last executing test programs: 11.607073963s ago: executing program 3 (id=2018): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffc000, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x9, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r4, r0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.195013962s ago: executing program 3 (id=2032): fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, &(0x7f0000001b00)=[{0x0}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee6901020301090212000100f30f000904b80700"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000079a8097537a4dea3bfb5395ff4b13008f4d2702ce8dc29f8ab063bdc0ec974ebebf98208ad36079eda2af0778e8e498c8773e2fa25e520b315b298b3fe70ee22e3e27f1cf82cecb2135681adaf226571fc7a49d4ac2338bc0a7b4085f781069826254d1d432c751fd0ea195040"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = openat$udambuf(0xffffff9c, &(0x7f0000000380), 0x2) ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000600)=ANY=[]) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r8, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x21, 0x80000, 0xfffff801) 8.67811016s ago: executing program 1 (id=2026): r0 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x58b2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x489, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000240)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="20010000"], 0x120}, 0x1, 0x0, 0x0, 0x20000090}, 0x8004) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, r4, 0x98204000) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4001, &(0x7f0000000000)=0x9, 0x8, 0x0) r10 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x9, 0x0, 0x400, 0x6, 0xfff, 0x3ff, 0x40}, 0x1c) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, &(0x7f0000000200)) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, 0x0, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x262, 0x0, {0x1}}) 7.959960897s ago: executing program 2 (id=2028): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = timerfd_create(0x6, 0x80000) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x1) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7.918094578s ago: executing program 2 (id=2029): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x2}}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f00000011c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000001280)=""/63, 0x3f}, 0x7}, {{&(0x7f00000012c0)=@xdp, 0x80, &(0x7f0000001800)=[{&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/234, 0xea}, {&(0x7f0000001540)=""/136, 0x88}, {&(0x7f0000001600)=""/118, 0x76}, {&(0x7f0000001680)=""/45, 0x2d}, {&(0x7f00000016c0)=""/87, 0x57}, {&(0x7f0000001740)=""/45, 0x2d}, {&(0x7f0000001780)=""/101, 0x65}], 0x8}, 0xffffffc0}, {{&(0x7f0000001840)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001940)=[{&(0x7f00000018c0)=""/91, 0x5b}], 0x1, &(0x7f0000001980)=""/207, 0xcf}, 0x388}, {{&(0x7f0000005e40)=@hci, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001b00)=""/188, 0xbc}, {&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/206, 0xce}, {&(0x7f0000001d80)=""/93, 0x5d}, {&(0x7f0000001e00)=""/116, 0x74}], 0x5, &(0x7f0000001a80)=""/61, 0x3d}, 0x4a4}, {{&(0x7f0000001f00)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002240)}, 0xffffff30}, {{&(0x7f0000002280)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002300)=""/247, 0xf7}], 0x1, &(0x7f0000002440)=""/246, 0xf6}, 0x9}, {{&(0x7f0000002540)=@generic, 0x80, &(0x7f0000005740)=[{&(0x7f00000025c0)=""/15, 0xf}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/21, 0x15}, {&(0x7f0000003640)=""/145, 0x91}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/11, 0xb}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x7, &(0x7f0000005780)=""/99, 0x63}, 0x2}, {{&(0x7f0000005800)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000001240)=""/28, 0x1c}, {&(0x7f00000058c0)=""/70, 0x46}, {&(0x7f0000005940)=""/156, 0x9c}, {&(0x7f0000005a00)=""/224, 0xe0}, {&(0x7f0000005b00)=""/238, 0xee}], 0x5, &(0x7f0000005c40)=""/183, 0xb7}, 0x7fffffff}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/4086) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0x6a9f0eede9332711}, {0x5, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.845229082s ago: executing program 4 (id=2030): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="a586d20413ecea22f949f553009d447ac27340b78a9099df112eacd20b0d9bac271b517bd63066c0", 0x28}], 0x1, 0x0, 0x0, 0x40884}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000500)="1d72123b9e1d49a54d778ca436f683c25d4ad190b60516720a02ac57d74d527d7256fc48bd0a7cd0a75e9ffd2a28f6d815449fd344eb39ef7caba1d0720675eaab70be56edb6831325945e5b43341bbf4bc12d8bccd5ed1aed333dc48eb38498cab9195f805cf17e56564f27fea2a807f9d25e9681d3a0d0b9d3e637583f080d7be951e09849808f3911d86737ac01f88eb7d7d9ef63656bfc85fa72a928c3b787f816c45451cf3792879b6582d93a6770302e55d378c4ed8ae2e9c7c1169d1ace391fa0924bc09a5a24", 0xca}, {&(0x7f0000000380)="e8316a9714bbcee9638a51dba3b6eb4b45ed3d19dd14c6060914c4fab09cce", 0x1f}, {&(0x7f0000000600)="6279381a7cef82ddc548700250cb2891cd38f10dda281b4586bcf5067aaf86df6f2e97969a00d828e261d12b5017589783d52674c6299cd4b23d22887f2e664b084ccd244c2de117fae7a3dc88e9f18a543aeecd8fc62c869b79f63ff23ec42f8572e3c90b21250910854cc286db5a468a8139ed1c917f137ff853820d006a73ef54f40cc734f61d", 0x88}, {&(0x7f00000006c0)="b543aba195ccf09e1e601a41d830240d1e8cfd1c57aa297f24651a9d92b1a779adf7694d4129893a75d68180a751275354ce61b74338e5fc718ac2ce391c29c49be7559f048ef7edb4ccee120f5d764b0c111ef2dc2b0eb004b04c1c11d52a840a4f93789d38f610d4c58656ce342724b7951ab340464d87166bcafa2daee83fe2e2114b15b9555731117fe763f1ed5d8015", 0x92}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000800)="6c722a6123e5705f2b0581aa9c2f6bbf59392688dc5f64299c96216bf3f41c0a20216937b687c0141fc375606e5d182d1392de921f898f94b346e2b70f0efba2d467e06ed8cc32a95407f95c92d97a1c19bf04443c39e109fb33fe9a65d35ff68cea9c10117f259c91075b3649dfaa2e917e66a9949d65695cb7e927cf5e69691b3ecfb90c9cca767daa3e7e6145792356167af91b0b1ab60cb62037f78c335160b769c7530e61fa5b7e36f95c82ae2056a9a67969d96f0ad488d6ea8d54868a2ce800b35c052fc65ff9ec60e86d2c352e9c3c99eb77423f6072dccbec46335a0f6c657b", 0xe4}], 0x6, &(0x7f0000000940)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x18, 0x40}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a00)="3a6b41ca98b9bab7a787cb97f85731aef6973ed32ddfaffd138d2878f8957e12a2b12a50ef1429e3c970c31c8eb6e3db1e3df700bbb7bce1f844eb77d573abbd70ca7cf066fd", 0x46}, {&(0x7f0000000a80)="5a112f19bf2160207d89521d88fb194650f7417be314176cbdd807036c7e1e08bf6c37d9c28f0160d546a21167af22b5305e00d50a0db432692567bfcfbddb06ba3bc66462ecfe07bbe7c3ff7917e511a922f0077387e5c674f37feeca6030db3666a477b52946a6c5066a5daba52928e227b154b75a6fdfbcc81991b8d5fc22393115f32e07dfd3d03847617aeacc14e1509922bb741cb10313e7fa78d073fee7fb8a0f499eef4cbbcf4ae030f9a7f2c4b4674d8ca1", 0xb6}], 0x2, &(0x7f0000000b80)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0, r0]}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)="4e41928f8c8bd0c7814d5ae9e6841342d7a01fdfad9c74ed5089ad461044af3f93e77612c22876168549f6b8e6bd82e368202bbdb27e45b784c9e4585a1cba0a7ae74e7938db6d9ea143f28ae78a39c1b07ce4b3e41262aef69abb601b8a0d1b7c9fe6ea4196bbbf33a5cf13d27ab4fd3130ebca952e214915484d67cd778102a299d444ca2ac9e7c52833b20eacd784b6d5e9f52a0d906b7909ff5c2cacb95d80d9221cd20ef873eaef39feeaf4735cd3925a4f7f77e2cc", 0xb8}], 0x1, 0x0, 0x0, 0x48041}}, {{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e80)="f14d24fbd6549ae5445a009b1e5a7c9e1bcd8e3f45937fe39a943182b6accb461a8e3da5b9eaa16754ee012317eee960285691061a7aaa0b81e19f59db7556153af86dbeac8de3c9ce8533fc403ab600d23a0a67ad5dc93cf847bc162adf76d5", 0x60}, {0x0}, {&(0x7f0000001000)="4ba96bbc37c7eb37213e40d9a9d932ac169ffe2d13a77eaf555dcf6d97d5561b9c217f8db6e45f5fb5fdb65aa96197f551d0df9b5cbb9c811bdd8efddfbacff3cd213d109b06c3abe84feaa4e104867e9966e3f2e928941b0fd2edee2c9cc4c9c10b86b4e0fd0d28f0f1a5b7008e2dd6ec61027a420b3eac", 0x78}, {&(0x7f0000001080)="1f11141782f948c92f49321e5e154e3f2b6915ee48a533f31478348948711bbba8c75c4b54e506834c6c32a879f7c465940313f4be677e74717d8615ffc4390c7a53e473835b0784a9bfb22e43bfb9bb", 0x50}, {&(0x7f0000001100)="bdde1d0a5ecd1cec4f284bf69a610a2c95fc808630de7df4b357bb9c76cb0bcc2cce3e2fb6f180175d8d12dde3cc1d71fef762f1584fd6d46911c72470a34588e209d529199b404fa5534cd263095eea0b87b07058b7bdbbef311047abf4686d29f100e07b8028d53fdcfdd0ca449aeff417d8ec65101d136768c7366b", 0x7d}, {&(0x7f0000001180)="a5715b21103e33b2f5ad0c11a57baafc7e318a1b48834bc59eea304aca5badd82aa8938f90bab12037c329c32caf1eaeecf713e5a9be906deab4817b0b212c49ae0061f31a15c3430232a5c40e3da607575e1ddfceda1604b8cf6598c60b11a737d2c7570fe03ab576fdaac0756a1593f01111a22d9739177113dacdc4d79b1ef7fdcaa8e9969c6015fe3d349e07dd86c8d4172708ab08eb24", 0x99}, {&(0x7f0000001240)="1db3bad42b12450c42e6a243086659a1a9ee046917203494319e20959a01decefd21718dfa8cc70d80da924efef4ab51a4a512bcd874e6a1a36c1724cf7124c617666ba85de6df0a3778811e4c7e1770da6e20db7e", 0x55}], 0x7, &(0x7f0000001480)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x104, 0x53d5480fa3a00814}}], 0x5, 0x200000c0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f00000000c0)={{0x1, @addr=0x9}, 0x8, 0x1000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) 6.82716963s ago: executing program 4 (id=2033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014000000600000000008"], 0xfdef) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = epoll_create(0x207) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000005600)={0x30000008}) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000100)={0x14}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000000)=@x25, 0x80, 0x0}}], 0x1, 0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x0, 0x0) sendfile(r5, r2, &(0x7f0000000000)=0x3, 0x4) 6.825837758s ago: executing program 0 (id=2043): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000740)={0x1, 0x0, @stop_pts=0x7}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000100)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x6, r6}, 0x14) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/22, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000180)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r3, r8, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8}) ioctl$KVM_GET_NR_MMU_PAGES(r8, 0xae45, 0x183) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000006060500000000000000053ccb73b68e16c92b746aea9fe57f2ca7d406b41db2f0d7e4c74e431bcf796d24880d09827d37eb04a85b4258bf4b3776ecc0c81a4004646bd579571bde4fcb3714ef1c1ca4561fc05dfa6307fc4a8869d234983bae4114127bdf1961d720dd477849cc9a5631716829a7537aa2cfb3b2a3cb84dddd277bab5c39a8c68c35661cd705d2a3f928c8fef695f2a4b51758bd480e6bbb92ef4a408b917315af69bdd7d617c6acb96bec8104d6ffc24e4bcbdbd860873a3fcf65b62e"], 0x14}, 0x1, 0x0, 0x0, 0xc805}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r9, 0x407, 0x0) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.556696021s ago: executing program 4 (id=2034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x120040, 0x18e) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6401006b55b9db06000000000000000018000000000000ff000000000000000000000000000040004e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='rpcgss_import_ctx\x00', r6, 0x0, 0xff}, 0x18) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) r9 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000200)={0xa0000004}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="000128bd7000fddbdf25170000000c0099009b0000003f0000000a000600ffffffffffff00000a0006000802f5ffff00000004001a00ffffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00080a1100000100000a00060008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff0000a281c0de3fb37a4d73ccfcf06c6ac851fd325480856e3e57cd5c7f4b025a0252abf2d4cd2eb7e0f638e6a68156140e60225757aad03e7d4e531f6643b67b6c68275b9cc96e8d3fb1ca8a18e38f53a151dbd4bb22"], 0x98}, 0x1, 0x0, 0x0, 0x20008051}, 0x4800) 6.390308051s ago: executing program 4 (id=2035): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x20010, 0xffffffffffffffff, 0x7e024000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x6}, 0x0, [0xfffffffc, 0x3, 0x34fc, 0x0, 0x938, 0x0, 0xffffffff, 0xffffffff, 0x81, 0x3, 0x0, 0x1, 0x0, 0x10001, 0x3, 0x0, 0xfffffffb, 0x10001, 0x0, 0xffff, 0x8, 0x804, 0x0, 0x10000, 0x7, 0x0, 0xfffffffc, 0x18c968c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0xffffffff, 0x9, 0x0, 0x9, 0x799, 0x0, 0x0, 0x3, 0xa, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0xf7ffffff, 0xfffffffc, 0x0, 0xc729985, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0xb0, 0xf, 0x0, 0x0, 0xfffffffd, 0x8336, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe38a, 0x6, 0x0, 0x4, 0xffffffff, 0x0, 0x3, 0x5b3a, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x2000000, 0x0, 0x0, 0xfffffffc]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) accept4$tipc(r0, 0x0, &(0x7f0000000100), 0x80800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xd06}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x200004, 0x101, 0x804, 0x40000000000030, 0x160c, 0x80000003, 0xffffffffffff8001, 0x0, 0x9, 0xffff, 0x4, 0x4, 0x105, 0x40000000000000b, 0x9], 0xdddd0000, 0x141201}) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.389337783s ago: executing program 0 (id=2046): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x120040, 0x18e) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6401006b55b9db06000000000000000018000000000000ff000000000000000000000000000040004e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='rpcgss_import_ctx\x00', r6, 0x0, 0xff}, 0x18) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) r9 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000200)={0xa0000004}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="000128bd7000fddbdf25170000000c0099009b0000003f0000000a000600ffffffffffff00000a0006000802f5ffff00000004001a00ffffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00080a1100000100000a00060008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff0000a281c0de3fb37a4d73ccfcf06c6ac851fd325480856e3e57cd5c7f4b025a0252abf2d4cd2eb7e0f638e6a68156140e60225757aad03e7d4e531f6643b67b6c68275b9cc96e8d3fb1ca8a18e38f53a151dbd4bb22"], 0x98}, 0x1, 0x0, 0x0, 0x20008051}, 0x4800) 6.292009948s ago: executing program 0 (id=2036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x11, 0x1, 0x4}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xed80000000000000, 0xffff1000, 0xfffffffffffffffd, 0x4, 0x2}) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x00', 0xf4240) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3ff1, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x68, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) set_mempolicy(0x0, &(0x7f0000000680)=0x10000, 0x80000000) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x0, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x80800) 5.549778155s ago: executing program 1 (id=2037): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x8c040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) dup3(r3, r4, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r5 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8f, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0305602, &(0x7f0000000100)={0x1, 0x300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b63dc69bca14cdc37cd"], 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) 5.502257968s ago: executing program 3 (id=2038): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="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", 0xb61}], 0x2) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x4}]}}}]}, 0x44}}, 0x0) write$uinput_user_dev(r7, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) readv(r7, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r7, 0x5502) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 5.196651344s ago: executing program 0 (id=2039): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) r2 = syz_io_uring_setup(0x1e09, &(0x7f0000000340)={0x0, 0x13eb, 0x60, 0x20000002, 0x3c6}, &(0x7f0000000040), &(0x7f00000009c0)) io_uring_enter(r2, 0x2241, 0x1b86, 0x1, &(0x7f00000001c0), 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000000)={0x2, {0x80000000, 0x8, 0x7, 0x3}, {0x6, 0xdc, 0x6, 0xffffffff}, {0x3, 0x4}}) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$inet(r6, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f00000011c0)='8', 0x1}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000800)={&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000440)=""/6, 0x6}], 0x6, &(0x7f0000000880)=""/151, 0x97}, 0x10140) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) ppoll(&(0x7f00000000c0)=[{r2, 0x40}, {r3, 0x8200}, {r2, 0x2440}, {0xffffffffffffffff, 0x600}, {r6, 0x8088}, {r0}, {r0, 0x2}], 0x7, &(0x7f0000000180)={r8, r9+10000000}, &(0x7f0000000200)={[0x8, 0x1000]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200ac1418aa08000300e0000001"], 0x40}}, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) 3.571883815s ago: executing program 2 (id=2040): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x20) syz_clone3(0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000680)=0x7fff0000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x6a7, 0x1000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0xfc9b, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0xfffff419}}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2d) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0209000004000000000200400000000002000000000000002051000700"/44]) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x4, 0x0, 0x10000, 0xa, 0x5, 0x7, 0x4, 0x3, 0x4c, 0x8, 0x0, 0xfffff153, 0x8, 0x7f, 0xf9, 0x2, 0xfb, '\x00', 0x0, 0xf}) 3.526965098s ago: executing program 3 (id=2041): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'}) unshare(0x20020600) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f0000000a80)=[{r2, 0xd222}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x2f, 0xcd, 0x7, 0xfffffffe, 0x17, @mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8, 0x7800, 0x4, 0xa397}}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r3, @ANYRES64=r4, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0xed, 0x100, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7800, 0x40, 0x58, 0x3ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000800)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000500)}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @remote, @initdev}, &(0x7f0000000640)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000006c0)={0x0, @broadcast, @initdev}, &(0x7f0000000700)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000100)={0x3b}, 0x8) r6 = dup(r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000740)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[], 0x298}, 0x1, 0x0, 0x0, 0x88c5}, 0x40) 3.263923994s ago: executing program 4 (id=2042): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260", 0xf}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6_sctp(0xa, 0x8e8c0da9e2ac7802, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x5, 0x1, 0x2, 0x0, 0xe, 0x101}, 0x20) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.147880187s ago: executing program 1 (id=2044): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="a586d20413ecea22f949f553009d447ac27340b78a9099df112eacd20b0d9bac271b517bd63066c0", 0x28}], 0x1, 0x0, 0x0, 0x40884}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000500)="1d72123b9e1d49a54d778ca436f683c25d4ad190b60516720a02ac57d74d527d7256fc48bd0a7cd0a75e9ffd2a28f6d815449fd344eb39ef7caba1d0720675eaab70be56edb6831325945e5b43341bbf4bc12d8bccd5ed1aed333dc48eb38498cab9195f805cf17e56564f27fea2a807f9d25e9681d3a0d0b9d3e637583f080d7be951e09849808f3911d86737ac01f88eb7d7d9ef63656bfc85fa72a928c3b787f816c45451cf3792879b6582d93a6770302e55d378c4ed8ae2e9c7c1169d1ace391fa0924bc09a5a24", 0xca}, {&(0x7f0000000380)="e8316a9714bbcee9638a51dba3b6eb4b45ed3d19dd14c6060914c4fab09cce", 0x1f}, {&(0x7f0000000600)="6279381a7cef82ddc548700250cb2891cd38f10dda281b4586bcf5067aaf86df6f2e97969a00d828e261d12b5017589783d52674c6299cd4b23d22887f2e664b084ccd244c2de117fae7a3dc88e9f18a543aeecd8fc62c869b79f63ff23ec42f8572e3c90b21250910854cc286db5a468a8139ed1c917f137ff853820d006a73ef54f40cc734f61d", 0x88}, {&(0x7f00000006c0)="b543aba195ccf09e1e601a41d830240d1e8cfd1c57aa297f24651a9d92b1a779adf7694d4129893a75d68180a751275354ce61b74338e5fc718ac2ce391c29c49be7559f048ef7edb4ccee120f5d764b0c111ef2dc2b0eb004b04c1c11d52a840a4f93789d38f610d4c58656ce342724b7951ab340464d87166bcafa2daee83fe2e2114b15b9555731117fe763f1ed5d8015", 0x92}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000800)="6c722a6123e5705f2b0581aa9c2f6bbf59392688dc5f64299c96216bf3f41c0a20216937b687c0141fc375606e5d182d1392de921f898f94b346e2b70f0efba2d467e06ed8cc32a95407f95c92d97a1c19bf04443c39e109fb33fe9a65d35ff68cea9c10117f259c91075b3649dfaa2e917e66a9949d65695cb7e927cf5e69691b3ecfb90c9cca767daa3e7e6145792356167af91b0b1ab60cb62037f78c335160b769c7530e61fa5b7e36f95c82ae2056a9a67969d96f0ad488d6ea8d54868a2ce800b35c052fc65ff9ec60e86d2c352e9c3c99eb77423f6072dccbec46335a0f6c657b", 0xe4}], 0x6, &(0x7f0000000940)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x18, 0x40}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a00)="3a6b41ca98b9bab7a787cb97f85731aef6973ed32ddfaffd138d2878f8957e12a2b12a50ef1429e3c970c31c8eb6e3db1e3df700bbb7bce1f844eb77d573abbd70ca7cf066fd", 0x46}, {&(0x7f0000000a80)="5a112f19bf2160207d89521d88fb194650f7417be314176cbdd807036c7e1e08bf6c37d9c28f0160d546a21167af22b5305e00d50a0db432692567bfcfbddb06ba3bc66462ecfe07bbe7c3ff7917e511a922f0077387e5c674f37feeca6030db3666a477b52946a6c5066a5daba52928e227b154b75a6fdfbcc81991b8d5fc22393115f32e07dfd3d03847617aeacc14e1509922bb741cb10313e7fa78d073fee7fb8a0f499eef4cbbcf4ae030f9a7f2c4b4674d8ca1", 0xb6}], 0x2, &(0x7f0000000b80)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0, r0]}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)="4e41928f8c8bd0c7814d5ae9e6841342d7a01fdfad9c74ed5089ad461044af3f93e77612c22876168549f6b8e6bd82e368202bbdb27e45b784c9e4585a1cba0a7ae74e7938db6d9ea143f28ae78a39c1b07ce4b3e41262aef69abb601b8a0d1b7c9fe6ea4196bbbf33a5cf13d27ab4fd3130ebca952e214915484d67cd778102a299d444ca2ac9e7c52833b20eacd784b6d5e9f52a0d906b7909ff5c2cacb95d80d9221cd20ef873eaef39feeaf4735cd3925a4f7f77e2cc", 0xb8}], 0x1, 0x0, 0x0, 0x48041}}, {{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000e80)="f14d24fbd6549ae5445a009b1e5a7c9e1bcd8e3f45937fe39a943182b6accb461a8e3da5b9eaa16754ee012317eee960285691061a7aaa0b81e19f59db7556153af86dbeac8de3c9ce8533fc403ab600d23a0a67ad5dc93cf847bc162adf76d5", 0x60}, {0x0}, {&(0x7f0000001000)="4ba96bbc37c7eb37213e40d9a9d932ac169ffe2d13a77eaf555dcf6d97d5561b9c217f8db6e45f5fb5fdb65aa96197f551d0df9b5cbb9c811bdd8efddfbacff3cd213d109b06c3abe84feaa4e104867e9966e3f2e928941b0fd2edee2c9cc4c9c10b86b4e0fd0d28f0f1a5b7008e2dd6ec61027a420b3eac", 0x78}, {&(0x7f0000001080)="1f11141782f948c92f49321e5e154e3f2b6915ee48a533f31478348948711bbba8c75c4b54e506834c6c32a879f7c465940313f4be677e74717d8615ffc4390c7a53e473835b0784a9bfb22e43bfb9bb", 0x50}, {&(0x7f0000001100)="bdde1d0a5ecd1cec4f284bf69a610a2c95fc808630de7df4b357bb9c76cb0bcc2cce3e2fb6f180175d8d12dde3cc1d71fef762f1584fd6d46911c72470a34588e209d529199b404fa5534cd263095eea0b87b07058b7bdbbef311047abf4686d29f100e07b8028d53fdcfdd0ca449aeff417d8ec65101d136768c7366b", 0x7d}, {&(0x7f0000001180)="a5715b21103e33b2f5ad0c11a57baafc7e318a1b48834bc59eea304aca5badd82aa8938f90bab12037c329c32caf1eaeecf713e5a9be906deab4817b0b212c49ae0061f31a15c3430232a5c40e3da607575e1ddfceda1604b8cf6598c60b11a737d2c7570fe03ab576fdaac0756a1593f01111a22d9739177113dacdc4d79b1ef7fdcaa8e9969c6015fe3d349e07dd86c8d4172708ab08eb24", 0x99}, {&(0x7f0000001240)="1db3bad42b12450c42e6a243086659a1a9ee046917203494319e20959a01decefd21718dfa8cc70d80da924efef4ab51a4a512bcd874e6a1a36c1724cf7124c617666ba85de6df0a3778811e4c7e1770da6e20db7e", 0x55}], 0x7, &(0x7f0000001480)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x104, 0x53d5480fa3a00814}}], 0x5, 0x200000c0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f00000000c0)={{0x1, @addr=0x9}, 0x8, 0x1000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) 2.513294578s ago: executing program 2 (id=2045): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}]}) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@mcast1, 0x1f, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) recvmmsg(r6, &(0x7f0000001280), 0x0, 0x0, &(0x7f0000001300)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000000000000ab5d1ac8dba0d8b4332313100000000"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 2.495988354s ago: executing program 3 (id=2047): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000740)={0x1, 0x0, @stop_pts=0x7}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000100)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x6, r6}, 0x14) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/22, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000180)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r3, r8, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8}) ioctl$KVM_GET_NR_MMU_PAGES(r8, 0xae45, 0x183) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000006060500000000000000053ccb73b68e16c92b746aea9fe57f2ca7d406b41db2f0d7e4c74e431bcf796d24880d09827d37eb04a85b4258bf4b3776ecc0c81a4004646bd579571bde4fcb3714ef1c1ca4561fc05dfa6307fc4a8869d234983bae4114127bdf1961d720dd477849cc9a5631716829a7537aa2cfb3b2a3cb84dddd277bab5c39a8c68c35661cd705d2a3f928c8fef695f2a4b51758bd480e6bbb92ef4a408b917315af69bdd7d617c6acb96bec8104d6ffc24e4bcbdbd860873a3fcf65b62e"], 0x14}, 0x1, 0x0, 0x0, 0xc805}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r9, 0x407, 0x0) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.065117052s ago: executing program 1 (id=2048): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x120040, 0x18e) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6401006b55b9db06000000000000000018000000000000ff000000000000000000000000000040004e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000032000000fe80000000000000000000000000001a2703000000000000000000000000000000000000000000000000000000000000ff0f000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a000400000000004800020063686163686132302d6e656f6e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400ffff5e2100000000ac1e000100000000000000000000000014000e0000000000000000000000000000000001"], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) socketpair(0x1a, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='rpcgss_import_ctx\x00', r6, 0x0, 0xff}, 0x18) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) r9 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000200)={0xa0000004}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="000128bd7000fddbdf25170000000c0099009b0000003f0000000a000600ffffffffffff00000a0006000802f5ffff00000004001a00ffffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00080a1100000100000a00060008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff0000a281c0de3fb37a4d73ccfcf06c6ac851fd325480856e3e57cd5c7f4b025a0252abf2d4cd2eb7e0f638e6a68156140e60225757aad03e7d4e531f6643b67b6c68275b9cc96e8d3fb1ca8a18e38f53a151dbd4bb22"], 0x98}, 0x1, 0x0, 0x0, 0x20008051}, 0x4800) 1.872322532s ago: executing program 1 (id=2049): r0 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x20, 0x0, &(0x7f00000008c0)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r2, 0x84, 0x7a, 0xfffffffffffffffe, &(0x7f0000000000)=0xfffffffffffffd80) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4003}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x10c, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = dup(r3) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000088a80000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r11, 0x1, 0x7, 0x6, @broadcast}, 0x14) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.7036371s ago: executing program 0 (id=2050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket(0x15, 0x5, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) timerfd_create(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) (async) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xf8, 0x40, 0x5ac, 0x24d, 0x1ea0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x59, 0x2}}]}}]}}, 0x0) (async) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x41, 0x0, @thr={&(0x7f00000001c0)="0b3bd2277980eff5718975d5deea5f86aa2bd4a1e2427f3a84884b86aec04715e932189976ba09b28eb123fade729fc27eed7ded1ea920007e0196024d4f44ef6cfee4652effd1dfb137d5dc3d94eea6", &(0x7f0000000440)="a1cc895627d4c9028cf66c4780072551aa76459b00a6a90c96d37f6ce526b0cca955ede24e5f906a2e4cea71994d6b8b1e6ee690733ca5e972cddadf42b70d9f318f4c6275841a922d34d1f7620ddb17feec640bd118b2ab3c5d06f6e7ea97de058e13efeaafa4d2ba012886333b058ce0a09e0397e55d4c8c179fd9b73cf0a7f811649bf30ed259dfca0c7188b4f97ef32412c48e7dc4ca5cf766035062197f9cfebf1aef359383b7b70bde81a672246c9f1563a06c70d3fd2e406c7f23e05b4a99d355b479e080887341de6d11b1a28d6c9f432ba48a93bf13d02f"}}, &(0x7f00000002c0)) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001db80)=@newtfilter={0x25f0, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xf}, {}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xe6, 0x3}}, @filter_kind_options=@f_flow={{0x9}, {0x2504, 0x2, [@TCA_FLOW_ACT={0x2500, 0x9, 0x0, 0x1, [@m_connmark={0x114, 0x4, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x7fff, 0x10000000, 0x3, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x100, 0x7, 0x7, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x10000000, 0x3, 0x5}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc2, 0x2, 0x10000000, 0x4, 0x100}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x36, 0x7, 0x400, 0x3}, 0x3ff}}]}, {0x56, 0x6, "01e44e5739f94ed495b75bef7bafab4dfa59f575630074bd57bdb900e055a54266f1aefd61445ce24c075abf77fae23602644bc4d7f35273dfc5e3e665ca5a49afc6b26f8861c91e97493b8232f62d8d674b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x120, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0xf4, 0x6, "8b9d8303eba18cdebf8dbe8950b968f3896679e677fc6e237cb124b9464f67aa4fb9080ad4ed06c4e59ace54d43aff9af10f6a29b35db051d8cdc25ec3a1a92cd302ba781e5044d8fca7205d40c5831e96be9143a457982b14b51e4d14860a8770beb0499923c68e411d64f87c40f9935c36ed09eda316eff594434b0873c4b10bbe0c1e6e5e35edb987558bcab587e968ba548a63f81c293a1ba09bf75c221344f8c0c333457925c6dad5c47b4eeea59ce64e6a1e1677f463741929ded63a7c381e18960786e9956e993cd70e4a6bfe5d494591968c5f0d74f453e9677489c0f3456cb92927c62c86a334af0cd775aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x10a4, 0x10, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x81, 0x20000000, 0x6, 0x3ff}, @empty, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x7, 0x10000000, 0x7, 0x20000}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffeff, 0x0, 0x0, 0x6, 0x5}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x50, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x9c, 0x7, 0x9, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xd4, 0x2, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf7}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdbc24}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0x87, 0x6, "e11f2057a9a2baee7b6fb2c765a063380104840f2d9ad064d83ae98fafa891a3d40d8fb9fa615efbb714a13f38ecfc45e447c80b288c628ecbb0c8fcf462781a1c12cba95a26d247fd8e3d7275e3a3fc503006868f93ee77c8b0d51aeff3ff20d73a036bece15ec8342f8ef1613f9f21cc301aa31d2bbc155cb5c421d0f05e4b3464a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x11c, 0x10, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x6dc79}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x80000000, 0x3, 0xe9}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x788c776a, 0x1, 0xfffffffa, 0x3ff}, 0x2}}]}, {0x9d, 0x6, "5e3a2d66e22fb49ecb34a53538303e5d240a8f9b3527dccdf7f225036eb86cad6f73eaf87e6a90b77509daeb9c4bed35da8e70f585df9be08c3387e21bf208af670de0f7da9e2609b6a42994d8de647739a3bdc8744ed944393bf59e1c9c3a96bf3d7af10cd64566bca5ab764f2b0da912308ec4d3d6840a9d1a64446422402a0b15d26d5d3e1e5fa77f2f1c28cecaf14b7a005b1eaf7b031c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0xfe4, 0x19, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d11, 0x20000000, 0x72fa7137bc3bf8ad, 0x400, 0x4}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0xf84, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}]}}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x8}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}]}}, @TCA_RATE={0x6, 0x5, {0xce, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0xca}}, @TCA_RATE={0x6, 0x5, {0xc, 0x67}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x25f0}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) r9 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) 1.562333706s ago: executing program 3 (id=2051): fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, &(0x7f0000001b00)=[{0x0}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee6901020301090212000100f30f000904b80700"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000079a8097537a4dea3bfb5395ff4b13008f4d2702ce8dc29f8ab063bdc0ec974ebebf98208ad36079eda2af0778e8e498c8773e2fa25e520b315b298b3fe70ee22e3e27f1cf82cecb2135681adaf226571fc7a49d4ac2338bc0a7b4085f781069826254d1d432c751fd0ea195040"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = openat$udambuf(0xffffff9c, &(0x7f0000000380), 0x2) ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000600)=ANY=[@ANYBLOB="55a7873c7d15cd13db5b7c4fda9ab67c05f458824290d2432f8c3d28f9bd9c48e149bb8a7ef78284097866c0591f48d27de0ca272bbc097a12e9b130aa8228afdb5cd279e626bac9143c0e6c4d9417e09a00bee281ed1656aa67407a83a199ba15870b3ea784c25fa1907b2b0a88dc1c9c6b010d8e81b5375d4e5bc91a4eee5e608b8a02d9578829145ed1e0eb166211866980df8becfcff4c85147d840a001ed27e2a9d984a641a11aa006877f5849ba700130d422b32538abcc8e7905667f036bb02a549252424e25014e337000e44d26e7289e6c657e984382b5d23", @ANYRES32=r5, @ANYBLOB="0000000000000100000000000000010000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000010000f0ffff00000000", @ANYRES32=r5]) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r8, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x21, 0x80000, 0xfffff801) 1.478508425s ago: executing program 4 (id=2052): syz_open_dev$char_usb(0xc, 0xb4, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fffffff, @local, 0x9}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0xbfda, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000040), &(0x7f0000000100)) 920.130209ms ago: executing program 2 (id=2053): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002780)={0x75, 0x80000001, 0xffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000240)={&(0x7f00000001c0)=[r1], &(0x7f0000000200)=[0x4, 0x7fff, 0x19, 0x1, 0xa7, 0x2], 0x9, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x700, 0x40, 0x8000, 0x8, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @multicast1}}}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@loopback, @mcast2, @private2, 0x3, 0x1ff, 0xffb4, 0x100, 0x66b8, 0x6600007, r3}) 886.161159ms ago: executing program 1 (id=2054): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="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", 0xb61}], 0x2) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x4}]}}}]}, 0x44}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 626.195556ms ago: executing program 2 (id=2055): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xff}, 0xff}, 0x18) 0s ago: executing program 0 (id=2056): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) kernel console output (not intermixed with test programs): 0x9c/0x150 [ 590.815648][T13304] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 590.815683][T13304] genl_family_rcv_msg_doit+0x215/0x300 [ 590.815715][T13304] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 590.815753][T13304] ? bpf_lsm_capable+0x9/0x20 [ 590.815775][T13304] ? security_capable+0x7e/0x2e0 [ 590.815808][T13304] genl_rcv_msg+0x60e/0x790 [ 590.815839][T13304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.815861][T13304] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 590.815902][T13304] netlink_rcv_skb+0x205/0x470 [ 590.815920][T13304] ? __lock_acquire+0xab9/0xd20 [ 590.815945][T13304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.815970][T13304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.816010][T13304] ? down_read+0x1ad/0x2e0 [ 590.816034][T13304] genl_rcv+0x28/0x40 [ 590.816054][T13304] netlink_unicast+0x82c/0x9e0 [ 590.816091][T13304] ? __pfx_netlink_unicast+0x10/0x10 [ 590.816113][T13304] ? kasan_check_range+0x1d4/0x2c0 [ 590.816140][T13304] ? netlink_sendmsg+0x642/0xb30 [ 590.816158][T13304] ? skb_put+0x11b/0x210 [ 590.816189][T13304] netlink_sendmsg+0x805/0xb30 [ 590.816221][T13304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.816243][T13304] ? __import_iovec+0x5d4/0x7f0 [ 590.816265][T13304] ? aa_sock_msg_perm+0xf1/0x1d0 [ 590.816287][T13304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.816307][T13304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.816328][T13304] __sock_sendmsg+0x21c/0x270 [ 590.816358][T13304] ____sys_sendmsg+0x505/0x830 [ 590.816387][T13304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.816427][T13304] ___sys_sendmsg+0x21f/0x2a0 [ 590.816453][T13304] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.816516][T13304] ? __fget_files+0x2a/0x420 [ 590.816532][T13304] ? __fget_files+0x3a0/0x420 [ 590.816561][T13304] __sys_sendmsg+0x164/0x220 [ 590.816586][T13304] ? __pfx___sys_sendmsg+0x10/0x10 [ 590.816619][T13304] ? __ia32_compat_sys_sendmsg+0x1d/0x90 [ 590.816643][T13304] ? __sanitizer_cov_trace_pc+0x5d/0x70 [ 590.816672][T13304] __do_fast_syscall_32+0xb6/0x2b0 [ 590.816693][T13304] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.816717][T13304] do_fast_syscall_32+0x34/0x80 [ 590.816737][T13304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.816759][T13304] RIP: 0023:0xf7fa3539 [ 590.816776][T13304] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 590.816792][T13304] RSP: 002b:00000000f545455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 590.816811][T13304] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 590.816824][T13304] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.816836][T13304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.816847][T13304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 590.816858][T13304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.816888][T13304] [ 591.287945][ T30] audit: type=1326 audit(1758784101.300:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 592.034464][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 592.235721][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 592.252901][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 592.273576][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.294756][ T10] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 592.336523][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 592.346359][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1859'. [ 592.363021][T13309] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1856'. [ 592.380369][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 592.401297][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.414546][ T10] usb 5-1: Product: syz [ 592.418754][ T10] usb 5-1: Manufacturer: syz [ 592.423461][ T10] usb 5-1: SerialNumber: syz [ 592.471125][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input49 [ 592.794804][ T5222] bcm5974 5-1:1.0: could not read from device [ 592.883135][ T10] usb 5-1: USB disconnect, device number 35 [ 592.895101][ T5222] bcm5974 5-1:1.0: could not read from device [ 592.957101][T13328] fuse: Bad value for 'fd' [ 593.233627][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1862'. [ 593.821804][T13343] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 593.830088][T13343] CPU: 1 UID: 0 PID: 13343 Comm: syz.0.1863 Not tainted syzkaller #0 PREEMPT(full) [ 593.830112][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 593.830123][T13343] Call Trace: [ 593.830132][T13343] [ 593.830140][T13343] dump_stack_lvl+0x189/0x250 [ 593.830166][T13343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.830183][T13343] ? __pfx__printk+0x10/0x10 [ 593.830207][T13343] ? kernfs_path_from_node+0x2f/0x290 [ 593.830224][T13343] ? kernfs_path_from_node+0x250/0x290 [ 593.830238][T13343] ? kernfs_path_from_node+0x2f/0x290 [ 593.830257][T13343] sysfs_warn_dup+0x8e/0xa0 [ 593.830272][T13343] sysfs_do_create_link_sd+0xc0/0x110 [ 593.830288][T13343] device_add_class_symlinks+0x1cf/0x240 [ 593.830309][T13343] device_add+0x475/0xb50 [ 593.830329][T13343] wiphy_register+0x1ba6/0x28d0 [ 593.830359][T13343] ? __pfx_wiphy_register+0x10/0x10 [ 593.830374][T13343] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 593.830398][T13343] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 593.830420][T13343] ieee80211_register_hw+0x3484/0x4100 [ 593.830451][T13343] ? ieee80211_register_hw+0x14a1/0x4100 [ 593.830477][T13343] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 593.830497][T13343] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 593.830524][T13343] ? __hrtimer_setup+0x187/0x210 [ 593.830537][T13343] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 593.830554][T13343] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 593.830598][T13343] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 593.830615][T13343] ? trace_kmalloc+0x1f/0xd0 [ 593.830631][T13343] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 593.830649][T13343] ? kstrndup+0xbf/0x160 [ 593.830672][T13343] hwsim_new_radio_nl+0xea4/0x1b10 [ 593.830694][T13343] ? __pfx___nla_validate_parse+0x10/0x10 [ 593.830721][T13343] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 593.830750][T13343] ? __nla_parse+0x40/0x60 [ 593.830768][T13343] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 593.830794][T13343] genl_family_rcv_msg_doit+0x215/0x300 [ 593.830818][T13343] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 593.830847][T13343] ? bpf_lsm_capable+0x9/0x20 [ 593.830864][T13343] ? security_capable+0x7e/0x2e0 [ 593.830889][T13343] genl_rcv_msg+0x60e/0x790 [ 593.830913][T13343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.830930][T13343] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 593.830950][T13343] ? __asan_memcpy+0x40/0x70 [ 593.830974][T13343] ? __pfx_ref_tracker_free+0x10/0x10 [ 593.830995][T13343] netlink_rcv_skb+0x205/0x470 [ 593.831009][T13343] ? __lock_acquire+0xab9/0xd20 [ 593.831030][T13343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.831050][T13343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.831081][T13343] ? down_read+0x1ad/0x2e0 [ 593.831102][T13343] genl_rcv+0x28/0x40 [ 593.831118][T13343] netlink_unicast+0x82c/0x9e0 [ 593.831145][T13343] ? __pfx_netlink_unicast+0x10/0x10 [ 593.831167][T13343] ? netlink_sendmsg+0x642/0xb30 [ 593.831180][T13343] ? skb_put+0x11b/0x210 [ 593.831199][T13343] netlink_sendmsg+0x805/0xb30 [ 593.831223][T13343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.831241][T13343] ? aa_sock_msg_perm+0xf1/0x1d0 [ 593.831258][T13343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.831272][T13343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.831288][T13343] __sock_sendmsg+0x21c/0x270 [ 593.831311][T13343] ____sys_sendmsg+0x505/0x830 [ 593.831332][T13343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.831364][T13343] ___sys_sendmsg+0x21f/0x2a0 [ 593.831383][T13343] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.831430][T13343] ? __fget_files+0x2a/0x420 [ 593.831443][T13343] ? __fget_files+0x3a0/0x420 [ 593.831464][T13343] __sys_sendmsg+0x164/0x220 [ 593.831483][T13343] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.831519][T13343] __do_fast_syscall_32+0xb6/0x2b0 [ 593.831536][T13343] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.831554][T13343] do_fast_syscall_32+0x34/0x80 [ 593.831570][T13343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.831587][T13343] RIP: 0023:0xf6ffe539 [ 593.831600][T13343] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 593.831613][T13343] RSP: 002b:00000000f53ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 593.831629][T13343] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 593.831640][T13343] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.831649][T13343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.831658][T13343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 593.831666][T13343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.831690][T13343] [ 594.277201][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.330819][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 594.330836][ T30] audit: type=1326 audit(1758784106.680:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.504670][ T30] audit: type=1326 audit(1758784106.680:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.526649][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.533179][ T30] audit: type=1326 audit(1758784106.750:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.555262][ T30] audit: type=1326 audit(1758784106.750:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.577215][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.583340][ T30] audit: type=1326 audit(1758784106.760:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.605488][ T30] audit: type=1326 audit(1758784106.760:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.627450][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.633517][ T30] audit: type=1326 audit(1758784106.760:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.655614][ T30] audit: type=1326 audit(1758784106.770:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.677570][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.683631][ T30] audit: type=1326 audit(1758784106.770:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.705858][ T30] audit: type=1326 audit(1758784106.770:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13338 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffe539 code=0x7ffc0000 [ 594.727838][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.737753][T13349] FAULT_INJECTION: forcing a failure. [ 594.737753][T13349] name failslab, interval 1, probability 0, space 0, times 0 [ 594.750539][T13349] CPU: 1 UID: 0 PID: 13349 Comm: syz.2.1865 Not tainted syzkaller #0 PREEMPT(full) [ 594.750562][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.750572][T13349] Call Trace: [ 594.750579][T13349] [ 594.750586][T13349] dump_stack_lvl+0x189/0x250 [ 594.750610][T13349] ? __pfx____ratelimit+0x10/0x10 [ 594.750626][T13349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.750643][T13349] ? __pfx__printk+0x10/0x10 [ 594.750677][T13349] ? __pfx___might_resched+0x10/0x10 [ 594.750694][T13349] ? fs_reclaim_acquire+0x7d/0x100 [ 594.750714][T13349] should_fail_ex+0x414/0x560 [ 594.750743][T13349] should_failslab+0xa8/0x100 [ 594.750767][T13349] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 594.750796][T13349] ? __pfx_nf_tables_abort+0x10/0x10 [ 594.750815][T13349] ? __alloc_skb+0x112/0x2d0 [ 594.750836][T13349] __alloc_skb+0x112/0x2d0 [ 594.750862][T13349] netlink_ack+0x146/0xa50 [ 594.750880][T13349] ? __kasan_kmalloc+0x93/0xb0 [ 594.750899][T13349] nfnetlink_rcv+0x2290/0x2520 [ 594.750930][T13349] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 594.750952][T13349] ? ref_tracker_free+0x63a/0x7d0 [ 594.750976][T13349] ? __netlink_deliver_tap+0x807/0x850 [ 594.750986][T13349] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.751005][T13349] netlink_unicast+0x82c/0x9e0 [ 594.751025][T13349] ? __pfx_netlink_unicast+0x10/0x10 [ 594.751041][T13349] ? netlink_sendmsg+0x642/0xb30 [ 594.751050][T13349] ? skb_put+0x11b/0x210 [ 594.751063][T13349] netlink_sendmsg+0x805/0xb30 [ 594.751078][T13349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.751090][T13349] ? __import_iovec+0x5d4/0x7f0 [ 594.751102][T13349] ? aa_sock_msg_perm+0xf1/0x1d0 [ 594.751113][T13349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 594.751123][T13349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.751134][T13349] __sock_sendmsg+0x21c/0x270 [ 594.751151][T13349] ____sys_sendmsg+0x505/0x830 [ 594.751166][T13349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.751186][T13349] ___sys_sendmsg+0x21f/0x2a0 [ 594.751199][T13349] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.751229][T13349] ? __fget_files+0x2a/0x420 [ 594.751238][T13349] ? __fget_files+0x3a0/0x420 [ 594.751251][T13349] __sys_sendmsg+0x164/0x220 [ 594.751265][T13349] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.751285][T13349] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.751297][T13349] __do_fast_syscall_32+0xb6/0x2b0 [ 594.751309][T13349] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.751321][T13349] do_fast_syscall_32+0x34/0x80 [ 594.751332][T13349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 594.751345][T13349] RIP: 0023:0xf7f54539 [ 594.751355][T13349] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 594.751363][T13349] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 594.751375][T13349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 594.751382][T13349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.751388][T13349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 594.751393][T13349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 594.751399][T13349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.751413][T13349] [ 595.067283][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.090888][T13346] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 595.098743][T13346] CPU: 0 UID: 0 PID: 13346 Comm: syz.4.1864 Not tainted syzkaller #0 PREEMPT(full) [ 595.098766][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 595.098776][T13346] Call Trace: [ 595.098784][T13346] [ 595.098792][T13346] dump_stack_lvl+0x189/0x250 [ 595.098821][T13346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.098837][T13346] ? __pfx__printk+0x10/0x10 [ 595.098861][T13346] ? kernfs_path_from_node+0x2f/0x290 [ 595.098877][T13346] ? kernfs_path_from_node+0x250/0x290 [ 595.098892][T13346] ? kernfs_path_from_node+0x2f/0x290 [ 595.098917][T13346] sysfs_warn_dup+0x8e/0xa0 [ 595.098937][T13346] sysfs_do_create_link_sd+0xc0/0x110 [ 595.098960][T13346] device_add_class_symlinks+0x1cf/0x240 [ 595.098985][T13346] device_add+0x475/0xb50 [ 595.099011][T13346] wiphy_register+0x1ba6/0x28d0 [ 595.099056][T13346] ? __pfx_wiphy_register+0x10/0x10 [ 595.099075][T13346] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 595.099107][T13346] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 595.099134][T13346] ieee80211_register_hw+0x3484/0x4100 [ 595.099174][T13346] ? ieee80211_register_hw+0x14a1/0x4100 [ 595.099207][T13346] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 595.099234][T13346] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 595.099268][T13346] ? __hrtimer_setup+0x187/0x210 [ 595.099285][T13346] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 595.099307][T13346] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 595.099363][T13346] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 595.099386][T13346] ? trace_kmalloc+0x1f/0xd0 [ 595.099406][T13346] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 595.099428][T13346] ? kstrndup+0xbf/0x160 [ 595.099457][T13346] hwsim_new_radio_nl+0xea4/0x1b10 [ 595.099484][T13346] ? __pfx___nla_validate_parse+0x10/0x10 [ 595.099516][T13346] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 595.099554][T13346] ? __nla_parse+0x40/0x60 [ 595.099578][T13346] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 595.099612][T13346] genl_family_rcv_msg_doit+0x215/0x300 [ 595.099655][T13346] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 595.099693][T13346] ? bpf_lsm_capable+0x9/0x20 [ 595.099714][T13346] ? security_capable+0x7e/0x2e0 [ 595.099747][T13346] genl_rcv_msg+0x60e/0x790 [ 595.099777][T13346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.099798][T13346] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 595.099824][T13346] ? __asan_memcpy+0x40/0x70 [ 595.099843][T13346] ? __pfx_ref_tracker_free+0x10/0x10 [ 595.099869][T13346] netlink_rcv_skb+0x205/0x470 [ 595.099887][T13346] ? __lock_acquire+0xab9/0xd20 [ 595.099910][T13346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.099935][T13346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.099975][T13346] ? down_read+0x1ad/0x2e0 [ 595.099999][T13346] genl_rcv+0x28/0x40 [ 595.100020][T13346] netlink_unicast+0x82c/0x9e0 [ 595.100059][T13346] ? __pfx_netlink_unicast+0x10/0x10 [ 595.100087][T13346] ? netlink_sendmsg+0x642/0xb30 [ 595.100104][T13346] ? skb_put+0x11b/0x210 [ 595.100129][T13346] netlink_sendmsg+0x805/0xb30 [ 595.100160][T13346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.100183][T13346] ? __import_iovec+0x5d4/0x7f0 [ 595.100203][T13346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 595.100223][T13346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.100242][T13346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.100262][T13346] __sock_sendmsg+0x21c/0x270 [ 595.100290][T13346] ____sys_sendmsg+0x505/0x830 [ 595.100319][T13346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.100359][T13346] ___sys_sendmsg+0x21f/0x2a0 [ 595.100383][T13346] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.100404][T13346] ? futex_private_hash_put+0x4b/0x280 [ 595.100423][T13346] ? futex_private_hash_put+0x245/0x280 [ 595.100479][T13346] ? __fget_files+0x2a/0x420 [ 595.100495][T13346] ? __fget_files+0x3a0/0x420 [ 595.100524][T13346] __sys_sendmsg+0x164/0x220 [ 595.100548][T13346] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.100588][T13346] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.100611][T13346] __do_fast_syscall_32+0xb6/0x2b0 [ 595.100640][T13346] do_fast_syscall_32+0x34/0x80 [ 595.100660][T13346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 595.100681][T13346] RIP: 0023:0xf708e539 [ 595.100699][T13346] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 595.100715][T13346] RSP: 002b:00000000f543c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 595.100735][T13346] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 595.100748][T13346] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.100760][T13346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 595.100771][T13346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 595.100782][T13346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 595.100811][T13346] [ 596.850598][T13374] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.1870'. [ 597.104317][T13384] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1871'. [ 597.565743][T13399] netlink: 'syz.4.1878': attribute type 4 has an invalid length. [ 597.573866][T13399] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1878'. [ 598.734305][T13425] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 598.742537][T13425] CPU: 1 UID: 0 PID: 13425 Comm: syz.0.1892 Not tainted syzkaller #0 PREEMPT(full) [ 598.742562][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.742575][T13425] Call Trace: [ 598.742583][T13425] [ 598.742590][T13425] dump_stack_lvl+0x189/0x250 [ 598.742610][T13425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.742623][T13425] ? __pfx__printk+0x10/0x10 [ 598.742640][T13425] ? kernfs_path_from_node+0x2f/0x290 [ 598.742659][T13425] ? kernfs_path_from_node+0x250/0x290 [ 598.742669][T13425] ? kernfs_path_from_node+0x2f/0x290 [ 598.742682][T13425] sysfs_warn_dup+0x8e/0xa0 [ 598.742694][T13425] sysfs_do_create_link_sd+0xc0/0x110 [ 598.742706][T13425] device_add_class_symlinks+0x1cf/0x240 [ 598.742721][T13425] device_add+0x475/0xb50 [ 598.742735][T13425] wiphy_register+0x1ba6/0x28d0 [ 598.742757][T13425] ? __pfx_wiphy_register+0x10/0x10 [ 598.742767][T13425] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 598.742785][T13425] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 598.742801][T13425] ieee80211_register_hw+0x3484/0x4100 [ 598.742823][T13425] ? ieee80211_register_hw+0x14a1/0x4100 [ 598.742841][T13425] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 598.742857][T13425] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 598.742876][T13425] ? __hrtimer_setup+0x187/0x210 [ 598.742885][T13425] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 598.742897][T13425] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 598.742928][T13425] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 598.742941][T13425] ? trace_kmalloc+0x1f/0xd0 [ 598.742954][T13425] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 598.742968][T13425] ? kstrndup+0xbf/0x160 [ 598.742985][T13425] hwsim_new_radio_nl+0xea4/0x1b10 [ 598.743001][T13425] ? __pfx___nla_validate_parse+0x10/0x10 [ 598.743020][T13425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 598.743041][T13425] ? __nla_parse+0x40/0x60 [ 598.743053][T13425] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 598.743072][T13425] genl_family_rcv_msg_doit+0x215/0x300 [ 598.743089][T13425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 598.743110][T13425] ? bpf_lsm_capable+0x9/0x20 [ 598.743122][T13425] ? security_capable+0x7e/0x2e0 [ 598.743141][T13425] genl_rcv_msg+0x60e/0x790 [ 598.743158][T13425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.743171][T13425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 598.743186][T13425] ? __asan_memcpy+0x40/0x70 [ 598.743197][T13425] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.743211][T13425] netlink_rcv_skb+0x205/0x470 [ 598.743220][T13425] ? __lock_acquire+0xab9/0xd20 [ 598.743234][T13425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.743248][T13425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.743269][T13425] ? down_read+0x1ad/0x2e0 [ 598.743282][T13425] genl_rcv+0x28/0x40 [ 598.743293][T13425] netlink_unicast+0x82c/0x9e0 [ 598.743313][T13425] ? __pfx_netlink_unicast+0x10/0x10 [ 598.743330][T13425] ? netlink_sendmsg+0x642/0xb30 [ 598.743339][T13425] ? skb_put+0x11b/0x210 [ 598.743352][T13425] netlink_sendmsg+0x805/0xb30 [ 598.743372][T13425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.743384][T13425] ? __import_iovec+0x5d4/0x7f0 [ 598.743396][T13425] ? aa_sock_msg_perm+0xf1/0x1d0 [ 598.743410][T13425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.743420][T13425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.743431][T13425] __sock_sendmsg+0x21c/0x270 [ 598.743449][T13425] ____sys_sendmsg+0x505/0x830 [ 598.743464][T13425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.743486][T13425] ___sys_sendmsg+0x21f/0x2a0 [ 598.743499][T13425] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.743511][T13425] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.743541][T13425] ? __fget_files+0x2a/0x420 [ 598.743550][T13425] ? __fget_files+0x3a0/0x420 [ 598.743565][T13425] __sys_sendmsg+0x164/0x220 [ 598.743578][T13425] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.743596][T13425] ? __secure_computing+0xe2/0x2a0 [ 598.743611][T13425] __do_fast_syscall_32+0xb6/0x2b0 [ 598.743623][T13425] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.743636][T13425] do_fast_syscall_32+0x34/0x80 [ 598.743647][T13425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.743663][T13425] RIP: 0023:0xf6ffe539 [ 598.743673][T13425] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 598.743682][T13425] RSP: 002b:00000000f53ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 598.743693][T13425] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 598.743701][T13425] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.743707][T13425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.743712][T13425] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 598.743718][T13425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.743734][T13425] [ 599.202236][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.840367][T13431] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1883'. [ 600.164632][ T5988] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 600.334571][ T5988] usb 3-1: Using ep0 maxpacket: 8 [ 600.343407][ T5988] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 600.353626][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.370140][ T5988] usb 3-1: Product: syz [ 600.375499][ T5988] usb 3-1: Manufacturer: syz [ 600.380291][ T5988] usb 3-1: SerialNumber: syz [ 600.390602][ T5988] usb 3-1: config 0 descriptor?? [ 600.608627][ T5988] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 601.420258][T13433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.436910][T13433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.628850][T13474] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1896'. [ 601.663814][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 601.663826][ T30] audit: type=1326 audit(1758784114.010:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13475 comm="syz.3.1897" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0xffff0000 [ 601.835997][ T5988] usb write operation failed. (-71) [ 601.846564][ T5988] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 601.879595][ T5988] dvbdev: DVB: registering new adapter (Terratec H7) [ 601.910851][ T5988] usb 3-1: media controller created [ 601.926039][T13479] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 601.971579][ T5988] usb read operation failed. (-71) [ 602.000496][ T5988] usb write operation failed. (-71) [ 602.018791][ T5988] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 602.053077][ T5988] usb 3-1: USB disconnect, device number 44 [ 602.915005][ T919] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 602.963895][T13501] syzkaller0: entered promiscuous mode [ 602.972465][T13501] syzkaller0: entered allmulticast mode [ 603.095920][ T919] usb 5-1: config 0 has no interfaces? [ 603.103262][ T919] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 603.114892][ T919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.204065][ T919] usb 5-1: Product: syz [ 603.219183][ T919] usb 5-1: Manufacturer: syz [ 603.223935][ T919] usb 5-1: SerialNumber: syz [ 603.275144][ T919] usb 5-1: config 0 descriptor?? [ 603.618609][ T5957] usb 5-1: USB disconnect, device number 36 [ 603.732404][T13511] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1908'. [ 604.105090][ T919] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 604.271520][ T919] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 604.292107][ T919] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 604.301514][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 604.316843][ T919] usb 2-1: Product: syz [ 604.329131][ T919] usb 2-1: Manufacturer: syz [ 604.350537][ T919] usb 2-1: SerialNumber: syz [ 604.429397][ T919] usb 2-1: config 0 descriptor?? [ 604.452652][ T30] audit: type=1326 audit(1758784116.800:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 604.474856][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.503002][T13526] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 604.510996][T13526] CPU: 1 UID: 0 PID: 13526 Comm: syz.4.1911 Not tainted syzkaller #0 PREEMPT(full) [ 604.511021][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.511034][T13526] Call Trace: [ 604.511042][T13526] [ 604.511051][T13526] dump_stack_lvl+0x189/0x250 [ 604.511081][T13526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.511103][T13526] ? __pfx__printk+0x10/0x10 [ 604.511133][T13526] ? kernfs_path_from_node+0x2f/0x290 [ 604.511154][T13526] ? kernfs_path_from_node+0x250/0x290 [ 604.511172][T13526] ? kernfs_path_from_node+0x2f/0x290 [ 604.511196][T13526] sysfs_warn_dup+0x8e/0xa0 [ 604.511216][T13526] sysfs_do_create_link_sd+0xc0/0x110 [ 604.511238][T13526] device_add_class_symlinks+0x1cf/0x240 [ 604.511261][T13526] device_add+0x475/0xb50 [ 604.511286][T13526] wiphy_register+0x1ba6/0x28d0 [ 604.511304][T13526] ? trace_irq_disable+0x37/0x110 [ 604.511344][T13526] ? __pfx_wiphy_register+0x10/0x10 [ 604.511373][T13526] ? ieee80211_register_hw+0x32b9/0x4100 [ 604.511403][T13526] ieee80211_register_hw+0x3484/0x4100 [ 604.511442][T13526] ? ieee80211_register_hw+0x14a1/0x4100 [ 604.511475][T13526] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 604.511500][T13526] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.511532][T13526] ? __hrtimer_setup+0x187/0x210 [ 604.511550][T13526] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 604.511572][T13526] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 604.511629][T13526] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 604.511652][T13526] ? trace_kmalloc+0x1f/0xd0 [ 604.511673][T13526] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 604.511697][T13526] ? kstrndup+0xbf/0x160 [ 604.511727][T13526] hwsim_new_radio_nl+0xea4/0x1b10 [ 604.511755][T13526] ? __pfx___nla_validate_parse+0x10/0x10 [ 604.511790][T13526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 604.511829][T13526] ? __nla_parse+0x40/0x60 [ 604.511853][T13526] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 604.511896][T13526] genl_family_rcv_msg_doit+0x215/0x300 [ 604.511929][T13526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 604.511968][T13526] ? bpf_lsm_capable+0x9/0x20 [ 604.511992][T13526] ? security_capable+0x7e/0x2e0 [ 604.512025][T13526] genl_rcv_msg+0x60e/0x790 [ 604.512056][T13526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.512078][T13526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 604.512119][T13526] netlink_rcv_skb+0x205/0x470 [ 604.512135][T13526] ? __lock_acquire+0xab9/0xd20 [ 604.512160][T13526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.512184][T13526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.512224][T13526] ? down_read+0x1ad/0x2e0 [ 604.512248][T13526] genl_rcv+0x28/0x40 [ 604.512268][T13526] netlink_unicast+0x82c/0x9e0 [ 604.512304][T13526] ? __pfx_netlink_unicast+0x10/0x10 [ 604.512332][T13526] ? netlink_sendmsg+0x642/0xb30 [ 604.512349][T13526] ? skb_put+0x11b/0x210 [ 604.512374][T13526] netlink_sendmsg+0x805/0xb30 [ 604.512405][T13526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.512427][T13526] ? __import_iovec+0x5d4/0x7f0 [ 604.512448][T13526] ? aa_sock_msg_perm+0xf1/0x1d0 [ 604.512469][T13526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.512489][T13526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.512509][T13526] __sock_sendmsg+0x21c/0x270 [ 604.512539][T13526] ____sys_sendmsg+0x505/0x830 [ 604.512567][T13526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.512599][T13526] ? ___sys_sendmsg+0x12e/0x2a0 [ 604.512627][T13526] ___sys_sendmsg+0x21f/0x2a0 [ 604.512652][T13526] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.512673][T13526] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.512731][T13526] ? __fget_files+0x2a/0x420 [ 604.512748][T13526] ? __fget_files+0x3a0/0x420 [ 604.512776][T13526] __sys_sendmsg+0x164/0x220 [ 604.512801][T13526] ? __pfx___sys_sendmsg+0x10/0x10 [ 604.512836][T13526] ? __secure_computing+0xe2/0x2a0 [ 604.512864][T13526] __do_fast_syscall_32+0xb6/0x2b0 [ 604.512899][T13526] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.512921][T13526] do_fast_syscall_32+0x34/0x80 [ 604.512942][T13526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.512963][T13526] RIP: 0023:0xf708e539 [ 604.512980][T13526] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 604.512995][T13526] RSP: 002b:00000000f543c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 604.513014][T13526] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 604.513027][T13526] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.513038][T13526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.513049][T13526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 604.513061][T13526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.513091][T13526] [ 604.966695][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.120634][ T30] audit: type=1326 audit(1758784116.800:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.142637][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.151250][ T30] audit: type=1326 audit(1758784116.840:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.173241][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.182037][ T30] audit: type=1326 audit(1758784116.840:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.204128][ T30] audit: type=1326 audit(1758784116.840:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.226111][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.232191][ T30] audit: type=1326 audit(1758784116.840:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.254246][ T30] audit: type=1326 audit(1758784116.840:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.276217][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.282292][ T30] audit: type=1326 audit(1758784116.840:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.304566][ T30] audit: type=1326 audit(1758784116.850:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13523 comm="syz.4.1911" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 605.326555][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.512153][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.526185][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.436803][T13550] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1917'. [ 606.790728][T13550] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1917'. [ 606.850271][T13550] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 607.096709][ T5957] usb 2-1: USB disconnect, device number 52 [ 607.148899][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 607.284487][ T980] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 607.563295][ T980] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 607.608600][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.642542][ T980] usb 1-1: Product: syz [ 607.749193][ T980] usb 1-1: Manufacturer: syz [ 607.764582][ T980] usb 1-1: SerialNumber: syz [ 607.788945][ T980] usb 1-1: config 0 descriptor?? [ 608.053322][T13575] fuse: Bad value for 'rootmode' [ 608.547410][T13577] program syz.2.1925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.649792][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 609.273185][T13592] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 609.280996][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 609.281036][ T30] audit: type=1326 audit(1758784121.620:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 609.309316][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.315530][T13592] CPU: 0 UID: 0 PID: 13592 Comm: syz.3.1928 Not tainted syzkaller #0 PREEMPT(full) [ 609.315557][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.315569][T13592] Call Trace: [ 609.315579][T13592] [ 609.315587][T13592] dump_stack_lvl+0x189/0x250 [ 609.315618][T13592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.315641][T13592] ? __pfx__printk+0x10/0x10 [ 609.315677][T13592] ? __rcu_read_unlock+0x84/0xe0 [ 609.315702][T13592] ? kernfs_path_from_node+0x2f/0x290 [ 609.315723][T13592] ? kernfs_path_from_node+0x250/0x290 [ 609.315742][T13592] ? kernfs_path_from_node+0x2f/0x290 [ 609.315768][T13592] sysfs_warn_dup+0x8e/0xa0 [ 609.315788][T13592] sysfs_do_create_link_sd+0xc0/0x110 [ 609.315810][T13592] device_add_class_symlinks+0x1cf/0x240 [ 609.315835][T13592] device_add+0x475/0xb50 [ 609.315859][T13592] wiphy_register+0x1ba6/0x28d0 [ 609.315893][T13592] ? __pfx_wiphy_register+0x10/0x10 [ 609.315907][T13592] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 609.315933][T13592] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 609.315955][T13592] ieee80211_register_hw+0x3484/0x4100 [ 609.315988][T13592] ? ieee80211_register_hw+0x14a1/0x4100 [ 609.316014][T13592] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 609.316035][T13592] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 609.316062][T13592] ? __hrtimer_setup+0x187/0x210 [ 609.316075][T13592] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 609.316092][T13592] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 609.316137][T13592] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 609.316155][T13592] ? trace_kmalloc+0x1f/0xd0 [ 609.316171][T13592] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 609.316190][T13592] ? kstrndup+0xbf/0x160 [ 609.316214][T13592] hwsim_new_radio_nl+0xea4/0x1b10 [ 609.316237][T13592] ? __pfx___nla_validate_parse+0x10/0x10 [ 609.316264][T13592] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 609.316294][T13592] ? __nla_parse+0x40/0x60 [ 609.316312][T13592] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 609.316338][T13592] genl_family_rcv_msg_doit+0x215/0x300 [ 609.316362][T13592] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 609.316391][T13592] ? bpf_lsm_capable+0x9/0x20 [ 609.316410][T13592] ? security_capable+0x7e/0x2e0 [ 609.316436][T13592] genl_rcv_msg+0x60e/0x790 [ 609.316460][T13592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.316477][T13592] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 609.316508][T13592] netlink_rcv_skb+0x205/0x470 [ 609.316522][T13592] ? __lock_acquire+0xab9/0xd20 [ 609.316542][T13592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.316561][T13592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.316592][T13592] ? down_read+0x1ad/0x2e0 [ 609.316611][T13592] genl_rcv+0x28/0x40 [ 609.316627][T13592] netlink_unicast+0x82c/0x9e0 [ 609.316655][T13592] ? __pfx_netlink_unicast+0x10/0x10 [ 609.316684][T13592] ? netlink_sendmsg+0x642/0xb30 [ 609.316699][T13592] ? skb_put+0x11b/0x210 [ 609.316719][T13592] netlink_sendmsg+0x805/0xb30 [ 609.316743][T13592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.316763][T13592] ? aa_sock_msg_perm+0xf1/0x1d0 [ 609.316780][T13592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.316795][T13592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.316811][T13592] __sock_sendmsg+0x21c/0x270 [ 609.316834][T13592] ____sys_sendmsg+0x505/0x830 [ 609.316857][T13592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.316888][T13592] ___sys_sendmsg+0x21f/0x2a0 [ 609.316907][T13592] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.316924][T13592] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.316969][T13592] ? __fget_files+0x2a/0x420 [ 609.316981][T13592] ? __fget_files+0x3a0/0x420 [ 609.317003][T13592] __sys_sendmsg+0x164/0x220 [ 609.317022][T13592] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.317050][T13592] ? __secure_computing+0xe2/0x2a0 [ 609.317071][T13592] __do_fast_syscall_32+0xb6/0x2b0 [ 609.317094][T13592] do_fast_syscall_32+0x34/0x80 [ 609.317109][T13592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 609.317127][T13592] RIP: 0023:0xf705e539 [ 609.317141][T13592] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 609.317153][T13592] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 609.317169][T13592] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 609.317180][T13592] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 609.317190][T13592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 609.317199][T13592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 609.317208][T13592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.317232][T13592] [ 609.322007][ T30] audit: type=1326 audit(1758784121.620:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 609.791235][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.848578][ T10] usb 1-1: USB disconnect, device number 55 [ 609.871359][ T30] audit: type=1326 audit(1758784121.620:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 609.898038][ T30] audit: type=1326 audit(1758784121.620:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 609.934121][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 609.968453][T13592] input: syz1 as /devices/virtual/input/input55 [ 610.036286][ T30] audit: type=1326 audit(1758784121.620:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 610.078664][ T30] audit: type=1326 audit(1758784121.620:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 610.116722][T13596] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 610.149713][T13596] CPU: 0 UID: 0 PID: 13596 Comm: syz.2.1929 Not tainted syzkaller #0 PREEMPT(full) [ 610.149741][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.149753][T13596] Call Trace: [ 610.149761][T13596] [ 610.149771][T13596] dump_stack_lvl+0x189/0x250 [ 610.149801][T13596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.149824][T13596] ? __pfx__printk+0x10/0x10 [ 610.149851][T13596] ? __rcu_read_unlock+0x84/0xe0 [ 610.149875][T13596] ? kernfs_path_from_node+0x2f/0x290 [ 610.149896][T13596] ? kernfs_path_from_node+0x250/0x290 [ 610.149914][T13596] ? kernfs_path_from_node+0x2f/0x290 [ 610.149938][T13596] sysfs_warn_dup+0x8e/0xa0 [ 610.149958][T13596] sysfs_do_create_link_sd+0xc0/0x110 [ 610.149981][T13596] device_add_class_symlinks+0x1cf/0x240 [ 610.150008][T13596] device_add+0x475/0xb50 [ 610.150035][T13596] wiphy_register+0x1ba6/0x28d0 [ 610.150073][T13596] ? __pfx_wiphy_register+0x10/0x10 [ 610.150092][T13596] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 610.150124][T13596] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 610.150153][T13596] ieee80211_register_hw+0x3484/0x4100 [ 610.150194][T13596] ? ieee80211_register_hw+0x14a1/0x4100 [ 610.150229][T13596] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 610.150258][T13596] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 610.150292][T13596] ? __hrtimer_setup+0x187/0x210 [ 610.150309][T13596] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 610.150332][T13596] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 610.150389][T13596] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 610.150412][T13596] ? trace_kmalloc+0x1f/0xd0 [ 610.150432][T13596] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 610.150456][T13596] ? kstrndup+0xbf/0x160 [ 610.150486][T13596] hwsim_new_radio_nl+0xea4/0x1b10 [ 610.150514][T13596] ? __pfx___nla_validate_parse+0x10/0x10 [ 610.150550][T13596] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 610.150588][T13596] ? __nla_parse+0x40/0x60 [ 610.150610][T13596] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 610.150652][T13596] genl_family_rcv_msg_doit+0x215/0x300 [ 610.150685][T13596] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 610.150725][T13596] ? bpf_lsm_capable+0x9/0x20 [ 610.150749][T13596] ? security_capable+0x7e/0x2e0 [ 610.150783][T13596] genl_rcv_msg+0x60e/0x790 [ 610.150813][T13596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.150836][T13596] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 610.150860][T13596] ? __asan_memcpy+0x40/0x70 [ 610.150877][T13596] ? __pfx_ref_tracker_free+0x10/0x10 [ 610.150902][T13596] netlink_rcv_skb+0x205/0x470 [ 610.150920][T13596] ? __lock_acquire+0xab9/0xd20 [ 610.150946][T13596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.150970][T13596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.151011][T13596] ? down_read+0x1ad/0x2e0 [ 610.151036][T13596] genl_rcv+0x28/0x40 [ 610.151057][T13596] netlink_unicast+0x82c/0x9e0 [ 610.151093][T13596] ? __pfx_netlink_unicast+0x10/0x10 [ 610.151120][T13596] ? netlink_sendmsg+0x642/0xb30 [ 610.151138][T13596] ? skb_put+0x11b/0x210 [ 610.151163][T13596] netlink_sendmsg+0x805/0xb30 [ 610.151194][T13596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.151217][T13596] ? __import_iovec+0x5d4/0x7f0 [ 610.151238][T13596] ? aa_sock_msg_perm+0xf1/0x1d0 [ 610.151265][T13596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.151285][T13596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.151305][T13596] __sock_sendmsg+0x21c/0x270 [ 610.151335][T13596] ____sys_sendmsg+0x505/0x830 [ 610.151365][T13596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.151404][T13596] ___sys_sendmsg+0x21f/0x2a0 [ 610.151429][T13596] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.151450][T13596] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.151509][T13596] ? __fget_files+0x2a/0x420 [ 610.151525][T13596] ? __fget_files+0x3a0/0x420 [ 610.151554][T13596] __sys_sendmsg+0x164/0x220 [ 610.151578][T13596] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.151613][T13596] ? __secure_computing+0xe2/0x2a0 [ 610.151649][T13596] __do_fast_syscall_32+0xb6/0x2b0 [ 610.151673][T13596] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.151698][T13596] do_fast_syscall_32+0x34/0x80 [ 610.151719][T13596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.151741][T13596] RIP: 0023:0xf7f54539 [ 610.151758][T13596] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 610.151773][T13596] RSP: 002b:00000000f540455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 610.151794][T13596] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 610.151807][T13596] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 610.151819][T13596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.151830][T13596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 610.151842][T13596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.151873][T13596] [ 610.624935][ T30] audit: type=1326 audit(1758784121.620:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 610.764414][ T30] audit: type=1326 audit(1758784121.620:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 611.212778][ T30] audit: type=1326 audit(1758784121.620:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 611.329575][ T30] audit: type=1326 audit(1758784122.220:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.2.1929" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 611.591889][T13588] netlink: 'syz.4.1927': attribute type 10 has an invalid length. [ 611.601040][T13588] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 611.614427][T11222] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 611.755999][T13610] FAULT_INJECTION: forcing a failure. [ 611.755999][T13610] name failslab, interval 1, probability 0, space 0, times 0 [ 611.774627][T11222] usb 2-1: Using ep0 maxpacket: 8 [ 611.781518][T11222] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 611.789897][T11222] usb 2-1: config 0 has no interface number 0 [ 611.804983][T11222] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 611.814965][T11222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.822979][T11222] usb 2-1: Product: syz [ 611.868458][T13610] CPU: 0 UID: 0 PID: 13610 Comm: syz.2.1933 Not tainted syzkaller #0 PREEMPT(full) [ 611.868483][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.868493][T13610] Call Trace: [ 611.868501][T13610] [ 611.868509][T13610] dump_stack_lvl+0x189/0x250 [ 611.868534][T13610] ? __pfx____ratelimit+0x10/0x10 [ 611.868554][T13610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.868574][T13610] ? __pfx__printk+0x10/0x10 [ 611.868609][T13610] should_fail_ex+0x414/0x560 [ 611.868635][T13610] should_failslab+0xa8/0x100 [ 611.868657][T13610] __kmalloc_cache_noprof+0x70/0x3d0 [ 611.868677][T13610] ? sctp_add_bind_addr+0x8c/0x370 [ 611.868696][T13610] sctp_add_bind_addr+0x8c/0x370 [ 611.868716][T13610] sctp_copy_local_addr_list+0x30b/0x4e0 [ 611.868744][T13610] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 611.868767][T13610] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 611.868791][T13610] ? sctp_v6_is_any+0x64/0x80 [ 611.868810][T13610] ? sctp_copy_one_addr+0x93/0x360 [ 611.868829][T13610] sctp_bind_addr_copy+0xb3/0x3c0 [ 611.868846][T13610] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 611.868871][T13610] sctp_connect_new_asoc+0x2e0/0x690 [ 611.868895][T13610] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 611.868914][T13610] ? __local_bh_enable_ip+0x12d/0x1c0 [ 611.868939][T13610] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 611.868957][T13610] ? security_sctp_bind_connect+0x7e/0x2e0 [ 611.868981][T13610] sctp_sendmsg+0x155c/0x2810 [ 611.869011][T13610] ? __pfx_sctp_sendmsg+0x10/0x10 [ 611.869033][T13610] ? aa_sk_perm+0x81e/0x950 [ 611.869062][T13610] ? __pfx_aa_sk_perm+0x10/0x10 [ 611.869087][T13610] ? sock_rps_record_flow+0x19/0x410 [ 611.869112][T13610] ? inet_sendmsg+0x2f4/0x370 [ 611.869139][T13610] __sock_sendmsg+0x19c/0x270 [ 611.869166][T13610] __sys_sendto+0x3bd/0x520 [ 611.869187][T13610] ? __pfx___sys_sendto+0x10/0x10 [ 611.869201][T13610] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 611.869232][T13610] ? __fget_files+0x3a0/0x420 [ 611.869261][T13610] ? ksys_write+0x22a/0x250 [ 611.869292][T13610] __ia32_sys_sendto+0xdd/0x100 [ 611.869312][T13610] __do_fast_syscall_32+0xb6/0x2b0 [ 611.869331][T13610] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.869352][T13610] do_fast_syscall_32+0x34/0x80 [ 611.869370][T13610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.869389][T13610] RIP: 0023:0xf7f54539 [ 611.869404][T13610] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 611.869419][T13610] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 611.869437][T13610] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 611.869457][T13610] RDX: 0000000000000001 RSI: 0000000004000000 RDI: 000000008005ffe4 [ 611.869468][T13610] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 611.869483][T13610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 611.869493][T13610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.869521][T13610] [ 612.232050][T11222] usb 2-1: Manufacturer: syz [ 612.248230][T13612] input: syz1 as /devices/virtual/input/input57 [ 612.310266][T11222] usb 2-1: SerialNumber: syz [ 612.354079][T11222] usb 2-1: config 0 descriptor?? [ 612.555983][T13624] program syz.3.1939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.566207][T13619] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 612.620682][T11222] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 612.632711][T11222] usb 2-1: No streaming interface found for terminal 6. [ 612.648079][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 612.724757][T11222] usb 2-1: USB disconnect, device number 53 [ 613.028276][T13638] FAULT_INJECTION: forcing a failure. [ 613.028276][T13638] name failslab, interval 1, probability 0, space 0, times 0 [ 613.044278][T13638] CPU: 0 UID: 0 PID: 13638 Comm: syz.0.1941 Not tainted syzkaller #0 PREEMPT(full) [ 613.044304][T13638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 613.044315][T13638] Call Trace: [ 613.044326][T13638] [ 613.044335][T13638] dump_stack_lvl+0x189/0x250 [ 613.044358][T13638] ? __pfx____ratelimit+0x10/0x10 [ 613.044376][T13638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.044395][T13638] ? __pfx__printk+0x10/0x10 [ 613.044422][T13638] ? __pfx___might_resched+0x10/0x10 [ 613.044444][T13638] should_fail_ex+0x414/0x560 [ 613.044472][T13638] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 613.044489][T13638] should_failslab+0xa8/0x100 [ 613.044511][T13638] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 613.044525][T13638] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 613.044547][T13638] ? alloc_inode+0x6a/0x1b0 [ 613.044568][T13638] ? __pfx_simple_start_creating+0x10/0x10 [ 613.044588][T13638] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 613.044604][T13638] alloc_inode+0x6a/0x1b0 [ 613.044629][T13638] new_inode+0x22/0x170 [ 613.044651][T13638] __debugfs_create_file+0x14d/0x4f0 [ 613.044680][T13638] debugfs_create_file_full+0x3f/0x60 [ 613.044707][T13638] ref_tracker_dir_debugfs+0x14e/0x270 [ 613.044726][T13638] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 613.044773][T13638] ? rcu_is_watching+0x15/0xb0 [ 613.044790][T13638] ? alloc_netdev_mqs+0xa3/0x11b0 [ 613.044819][T13638] ? __raw_spin_lock_init+0x45/0x100 [ 613.044843][T13638] alloc_netdev_mqs+0x26f/0x11b0 [ 613.044863][T13638] ? __pfx_vlan_setup+0x10/0x10 [ 613.044890][T13638] register_vlan_device+0x24f/0x4c0 [ 613.044919][T13638] ? __pfx_register_vlan_device+0x10/0x10 [ 613.044940][T13638] ? security_capable+0x7e/0x2e0 [ 613.044972][T13638] vlan_ioctl_handler+0x281/0x650 [ 613.044991][T13638] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 613.045009][T13638] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 613.045036][T13638] ? do_vfs_ioctl+0xbe8/0x1430 [ 613.045164][T13638] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 613.045188][T13638] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 613.045208][T13638] sock_ioctl+0x610/0x790 [ 613.045244][T13638] ? __pfx_sock_ioctl+0x10/0x10 [ 613.045268][T13638] ? __lock_acquire+0xab9/0xd20 [ 613.045305][T13638] compat_sock_ioctl+0x285/0xc80 [ 613.045330][T13638] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 613.045356][T13638] ? __fget_files+0x3a0/0x420 [ 613.045378][T13638] ? __fget_files+0x2a/0x420 [ 613.045399][T13638] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 613.045424][T13638] __ia32_compat_sys_ioctl+0x540/0x840 [ 613.045450][T13638] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 613.045472][T13638] ? __fget_files+0x3a0/0x420 [ 613.045496][T13638] ? fput+0xa0/0xd0 [ 613.045515][T13638] ? ksys_write+0x22a/0x250 [ 613.045548][T13638] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.045573][T13638] __do_fast_syscall_32+0xb6/0x2b0 [ 613.045593][T13638] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.045617][T13638] do_fast_syscall_32+0x34/0x80 [ 613.045637][T13638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 613.045659][T13638] RIP: 0023:0xf6ffe539 [ 613.045675][T13638] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 613.045692][T13638] RSP: 002b:00000000f53ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 613.045711][T13638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008982 [ 613.045724][T13638] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.045737][T13638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.045747][T13638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 613.045758][T13638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.045788][T13638] [ 613.405801][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.444556][T13638] debugfs: out of free dentries, can not create file 'netdev@ffff888078c50610' [ 613.504633][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 613.563714][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1944'. [ 613.598880][T13644] CUSE: info not properly terminated [ 613.715976][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 613.727096][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 613.737899][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 613.744587][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 613.753614][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.803060][ T10] usb 5-1: config 0 descriptor?? [ 613.808746][T13634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 614.626934][T13665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.635938][T13665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.649625][T13666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.701949][T13666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.021251][T13679] input: syz1 as /devices/virtual/input/input58 [ 615.633410][T13685] tipc: Enabled bearer , priority 0 [ 615.654859][T13685] syzkaller0: entered promiscuous mode [ 615.792230][T13685] syzkaller0: entered allmulticast mode [ 615.822653][T13685] netlink: 568 bytes leftover after parsing attributes in process `syz.3.1952'. [ 615.835764][T13685] tipc: Resetting bearer [ 615.897594][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 615.910345][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 615.951723][ T10] usb 5-1: USB disconnect, device number 37 [ 615.986581][T13684] tipc: Resetting bearer [ 616.005861][T13684] tipc: Disabling bearer [ 616.415954][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 616.909165][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1958'. [ 617.608642][T13718] input: syz1 as /devices/virtual/input/input59 [ 617.700313][T13719] gretap0: entered promiscuous mode [ 617.709408][T13719] vlan0: entered promiscuous mode [ 618.358380][T13745] FAULT_INJECTION: forcing a failure. [ 618.358380][T13745] name failslab, interval 1, probability 0, space 0, times 0 [ 618.376182][T13745] CPU: 1 UID: 0 PID: 13745 Comm: syz.4.1969 Not tainted syzkaller #0 PREEMPT(full) [ 618.376199][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 618.376209][T13745] Call Trace: [ 618.376214][T13745] [ 618.376220][T13745] dump_stack_lvl+0x189/0x250 [ 618.376237][T13745] ? __pfx____ratelimit+0x10/0x10 [ 618.376249][T13745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.376261][T13745] ? __pfx__printk+0x10/0x10 [ 618.376279][T13745] ? __pfx___might_resched+0x10/0x10 [ 618.376288][T13745] ? fs_reclaim_acquire+0x7d/0x100 [ 618.376301][T13745] should_fail_ex+0x414/0x560 [ 618.376320][T13745] should_failslab+0xa8/0x100 [ 618.376335][T13745] __kmalloc_cache_noprof+0x70/0x3d0 [ 618.376349][T13745] ? __kthread_create_on_node+0xef/0x3e0 [ 618.376361][T13745] ? __pfx_napi_threaded_poll+0x10/0x10 [ 618.376373][T13745] __kthread_create_on_node+0xef/0x3e0 [ 618.376386][T13745] ? __pfx___kthread_create_on_node+0x10/0x10 [ 618.376405][T13745] ? __pfx_napi_threaded_poll+0x10/0x10 [ 618.376414][T13745] ? __pfx_napi_threaded_poll+0x10/0x10 [ 618.376424][T13745] kthread_create_on_node+0xdd/0x130 [ 618.376439][T13745] ? __pfx_kthread_create_on_node+0x10/0x10 [ 618.376451][T13745] ? __local_bh_enable_ip+0x12d/0x1c0 [ 618.376461][T13745] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 618.376471][T13745] ? netif_napi_add_weight_locked+0x5f1/0x970 [ 618.376481][T13745] ? kmem_cache_free+0x18f/0x400 [ 618.376494][T13745] ? netif_napi_add_weight_locked+0x565/0x970 [ 618.376505][T13745] netif_napi_add_weight_locked+0x6c4/0x970 [ 618.376521][T13745] wg_peer_create+0x54e/0x8a0 [ 618.376543][T13745] wg_set_device+0x10f3/0x1fe0 [ 618.376566][T13745] ? __pfx_wg_set_device+0x10/0x10 [ 618.376598][T13745] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 618.376617][T13745] genl_family_rcv_msg_doit+0x215/0x300 [ 618.376635][T13745] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 618.376656][T13745] ? bpf_lsm_capable+0x9/0x20 [ 618.376670][T13745] ? security_capable+0x7e/0x2e0 [ 618.376690][T13745] genl_rcv_msg+0x60e/0x790 [ 618.376708][T13745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.376720][T13745] ? __pfx_wg_set_device+0x10/0x10 [ 618.376734][T13745] ? __asan_memcpy+0x40/0x70 [ 618.376745][T13745] ? __pfx_ref_tracker_free+0x10/0x10 [ 618.376759][T13745] netlink_rcv_skb+0x205/0x470 [ 618.376769][T13745] ? __lock_acquire+0xab9/0xd20 [ 618.376784][T13745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.376798][T13745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.376819][T13745] ? down_read+0x1ad/0x2e0 [ 618.376840][T13745] genl_rcv+0x28/0x40 [ 618.376852][T13745] netlink_unicast+0x82c/0x9e0 [ 618.376873][T13745] ? __pfx_netlink_unicast+0x10/0x10 [ 618.376889][T13745] ? netlink_sendmsg+0x642/0xb30 [ 618.376898][T13745] ? skb_put+0x11b/0x210 [ 618.376913][T13745] netlink_sendmsg+0x805/0xb30 [ 618.376929][T13745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.376941][T13745] ? __import_iovec+0x5d4/0x7f0 [ 618.376953][T13745] ? aa_sock_msg_perm+0xf1/0x1d0 [ 618.376965][T13745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.376976][T13745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.376987][T13745] __sock_sendmsg+0x21c/0x270 [ 618.377004][T13745] ____sys_sendmsg+0x505/0x830 [ 618.377020][T13745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.377043][T13745] ___sys_sendmsg+0x21f/0x2a0 [ 618.377056][T13745] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.377091][T13745] ? __fget_files+0x2a/0x420 [ 618.377100][T13745] ? __fget_files+0x3a0/0x420 [ 618.377115][T13745] __sys_sendmsg+0x164/0x220 [ 618.377129][T13745] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.377151][T13745] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.377164][T13745] __do_fast_syscall_32+0xb6/0x2b0 [ 618.377176][T13745] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.377189][T13745] do_fast_syscall_32+0x34/0x80 [ 618.377200][T13745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.377212][T13745] RIP: 0023:0xf708e539 [ 618.377223][T13745] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 618.377231][T13745] RSP: 002b:00000000f547e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 618.377242][T13745] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d40 [ 618.377249][T13745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.377255][T13745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.377261][T13745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.377267][T13745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.377283][T13745] [ 618.377426][T13745] kthread_run failed with err -12 [ 618.858660][T13747] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.1970'. [ 618.870884][T13747] netlink: zone id is out of range [ 618.911416][T13747] netlink: zone id is out of range [ 618.930967][T13747] netlink: zone id is out of range [ 619.066446][T13747] netlink: zone id is out of range [ 619.071688][T13747] netlink: zone id is out of range [ 619.077037][T13747] netlink: zone id is out of range [ 619.097280][T13747] netlink: zone id is out of range [ 619.129674][T13747] netlink: zone id is out of range [ 619.180528][T13747] netlink: zone id is out of range [ 619.261744][T13747] netlink: zone id is out of range [ 619.609619][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 619.609690][ T30] audit: type=1326 audit(1758784131.960:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 619.765877][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 619.839377][ T30] audit: type=1326 audit(1758784131.960:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 619.877607][T13758] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 619.894867][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.1.1974 Not tainted syzkaller #0 PREEMPT(full) [ 619.894890][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 619.894897][T13758] Call Trace: [ 619.894903][T13758] [ 619.894912][T13758] dump_stack_lvl+0x189/0x250 [ 619.894931][T13758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.894944][T13758] ? __pfx__printk+0x10/0x10 [ 619.894961][T13758] ? kernfs_path_from_node+0x2f/0x290 [ 619.894974][T13758] ? kernfs_path_from_node+0x250/0x290 [ 619.894985][T13758] ? kernfs_path_from_node+0x2f/0x290 [ 619.895000][T13758] sysfs_warn_dup+0x8e/0xa0 [ 619.895011][T13758] sysfs_do_create_link_sd+0xc0/0x110 [ 619.895023][T13758] device_add_class_symlinks+0x1cf/0x240 [ 619.895038][T13758] device_add+0x475/0xb50 [ 619.895052][T13758] wiphy_register+0x1ba6/0x28d0 [ 619.895074][T13758] ? __pfx_wiphy_register+0x10/0x10 [ 619.895083][T13758] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 619.895100][T13758] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 619.895116][T13758] ieee80211_register_hw+0x3484/0x4100 [ 619.895139][T13758] ? ieee80211_register_hw+0x14a1/0x4100 [ 619.895158][T13758] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 619.895172][T13758] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 619.895193][T13758] ? __hrtimer_setup+0x187/0x210 [ 619.895202][T13758] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 619.895215][T13758] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 619.895247][T13758] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 619.895260][T13758] ? trace_kmalloc+0x1f/0xd0 [ 619.895273][T13758] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 619.895286][T13758] ? kstrndup+0xbf/0x160 [ 619.895303][T13758] hwsim_new_radio_nl+0xea4/0x1b10 [ 619.895319][T13758] ? __pfx___nla_validate_parse+0x10/0x10 [ 619.895338][T13758] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 619.895359][T13758] ? __nla_parse+0x40/0x60 [ 619.895372][T13758] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 619.895391][T13758] genl_family_rcv_msg_doit+0x215/0x300 [ 619.895409][T13758] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.895429][T13758] ? bpf_lsm_capable+0x9/0x20 [ 619.895442][T13758] ? security_capable+0x7e/0x2e0 [ 619.895467][T13758] genl_rcv_msg+0x60e/0x790 [ 619.895484][T13758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.895498][T13758] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 619.895520][T13758] netlink_rcv_skb+0x205/0x470 [ 619.895530][T13758] ? __lock_acquire+0xab9/0xd20 [ 619.895545][T13758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.895559][T13758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.895580][T13758] ? down_read+0x1ad/0x2e0 [ 619.895593][T13758] genl_rcv+0x28/0x40 [ 619.895605][T13758] netlink_unicast+0x82c/0x9e0 [ 619.895626][T13758] ? __pfx_netlink_unicast+0x10/0x10 [ 619.895641][T13758] ? netlink_sendmsg+0x642/0xb30 [ 619.895650][T13758] ? skb_put+0x11b/0x210 [ 619.895668][T13758] netlink_sendmsg+0x805/0xb30 [ 619.895689][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.895712][T13758] ? __import_iovec+0x5d4/0x7f0 [ 619.895731][T13758] ? aa_sock_msg_perm+0xf1/0x1d0 [ 619.895751][T13758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.895769][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.895790][T13758] __sock_sendmsg+0x21c/0x270 [ 619.895818][T13758] ____sys_sendmsg+0x505/0x830 [ 619.895846][T13758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.895885][T13758] ___sys_sendmsg+0x21f/0x2a0 [ 619.895908][T13758] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.895930][T13758] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.895990][T13758] ? __fget_files+0x2a/0x420 [ 619.896007][T13758] ? __fget_files+0x3a0/0x420 [ 619.896037][T13758] __sys_sendmsg+0x164/0x220 [ 619.896062][T13758] ? __pfx___sys_sendmsg+0x10/0x10 [ 619.896098][T13758] ? __secure_computing+0xe2/0x2a0 [ 619.896127][T13758] __do_fast_syscall_32+0xb6/0x2b0 [ 619.896149][T13758] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.896172][T13758] do_fast_syscall_32+0x34/0x80 [ 619.896193][T13758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.896216][T13758] RIP: 0023:0xf7fa3539 [ 619.896232][T13758] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 619.896249][T13758] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 619.896269][T13758] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 619.896282][T13758] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.896293][T13758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.896305][T13758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 619.896317][T13758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.896348][T13758] [ 619.897800][ T30] audit: type=1326 audit(1758784132.000:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.544703][ T30] audit: type=1326 audit(1758784132.000:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.567138][ T30] audit: type=1326 audit(1758784132.020:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.589644][ T30] audit: type=1326 audit(1758784132.020:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.611811][ T30] audit: type=1326 audit(1758784132.030:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.640697][ T30] audit: type=1326 audit(1758784132.220:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.673043][ T30] audit: type=1326 audit(1758784132.220:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.703220][ T30] audit: type=1326 audit(1758784132.220:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.1.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 620.725708][T13758] input: syz1 as /devices/virtual/input/input60 [ 621.033704][T13772] input: syz1 as /devices/virtual/input/input61 [ 621.496533][T13787] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 622.834705][T13814] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 622.963778][T13814] CPU: 0 UID: 0 PID: 13814 Comm: syz.3.1988 Not tainted syzkaller #0 PREEMPT(full) [ 622.963804][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 622.963817][T13814] Call Trace: [ 622.963825][T13814] [ 622.963834][T13814] dump_stack_lvl+0x189/0x250 [ 622.963863][T13814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.963881][T13814] ? __pfx__printk+0x10/0x10 [ 622.963903][T13814] ? __rcu_read_unlock+0x84/0xe0 [ 622.963924][T13814] ? kernfs_path_from_node+0x2f/0x290 [ 622.963943][T13814] ? kernfs_path_from_node+0x250/0x290 [ 622.963960][T13814] ? kernfs_path_from_node+0x2f/0x290 [ 622.963983][T13814] sysfs_warn_dup+0x8e/0xa0 [ 622.964003][T13814] sysfs_do_create_link_sd+0xc0/0x110 [ 622.964025][T13814] device_add_class_symlinks+0x1cf/0x240 [ 622.964052][T13814] device_add+0x475/0xb50 [ 622.964076][T13814] wiphy_register+0x1ba6/0x28d0 [ 622.964110][T13814] ? __pfx_wiphy_register+0x10/0x10 [ 622.964127][T13814] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 622.964155][T13814] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 622.964178][T13814] ieee80211_register_hw+0x3484/0x4100 [ 622.964213][T13814] ? ieee80211_register_hw+0x14a1/0x4100 [ 622.964244][T13814] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 622.964269][T13814] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 622.964301][T13814] ? __hrtimer_setup+0x187/0x210 [ 622.964322][T13814] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 622.964341][T13814] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 622.964403][T13814] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 622.964424][T13814] ? trace_kmalloc+0x1f/0xd0 [ 622.964442][T13814] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 622.964464][T13814] ? kstrndup+0xbf/0x160 [ 622.964493][T13814] hwsim_new_radio_nl+0xea4/0x1b10 [ 622.964521][T13814] ? __pfx___nla_validate_parse+0x10/0x10 [ 622.964557][T13814] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 622.964597][T13814] ? __nla_parse+0x40/0x60 [ 622.964620][T13814] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 622.964652][T13814] genl_family_rcv_msg_doit+0x215/0x300 [ 622.964683][T13814] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 622.964719][T13814] ? bpf_lsm_capable+0x9/0x20 [ 622.964741][T13814] ? security_capable+0x7e/0x2e0 [ 622.964771][T13814] genl_rcv_msg+0x60e/0x790 [ 622.964799][T13814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.964820][T13814] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 622.964846][T13814] ? __asan_memcpy+0x40/0x70 [ 622.964866][T13814] ? __pfx_ref_tracker_free+0x10/0x10 [ 622.964889][T13814] netlink_rcv_skb+0x205/0x470 [ 622.964902][T13814] ? __lock_acquire+0xab9/0xd20 [ 622.964920][T13814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.964934][T13814] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 622.964956][T13814] ? down_read+0x1ad/0x2e0 [ 622.964970][T13814] genl_rcv+0x28/0x40 [ 622.964982][T13814] netlink_unicast+0x82c/0x9e0 [ 622.965003][T13814] ? __pfx_netlink_unicast+0x10/0x10 [ 622.965019][T13814] ? netlink_sendmsg+0x642/0xb30 [ 622.965028][T13814] ? skb_put+0x11b/0x210 [ 622.965042][T13814] netlink_sendmsg+0x805/0xb30 [ 622.965058][T13814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.965070][T13814] ? __import_iovec+0x5d4/0x7f0 [ 622.965082][T13814] ? aa_sock_msg_perm+0xf1/0x1d0 [ 622.965093][T13814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 622.965106][T13814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.965117][T13814] __sock_sendmsg+0x21c/0x270 [ 622.965134][T13814] ____sys_sendmsg+0x505/0x830 [ 622.965150][T13814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.965171][T13814] ___sys_sendmsg+0x21f/0x2a0 [ 622.965185][T13814] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.965196][T13814] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.965226][T13814] ? __fget_files+0x2a/0x420 [ 622.965235][T13814] ? __fget_files+0x3a0/0x420 [ 622.965250][T13814] __sys_sendmsg+0x164/0x220 [ 622.965263][T13814] ? __pfx___sys_sendmsg+0x10/0x10 [ 622.965282][T13814] ? __secure_computing+0xe2/0x2a0 [ 622.965297][T13814] __do_fast_syscall_32+0xb6/0x2b0 [ 622.965311][T13814] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.965323][T13814] do_fast_syscall_32+0x34/0x80 [ 622.965335][T13814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.965347][T13814] RIP: 0023:0xf705e539 [ 622.965364][T13814] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 622.965373][T13814] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 622.965385][T13814] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 622.965392][T13814] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.965398][T13814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.965404][T13814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 622.965410][T13814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.965425][T13814] [ 623.428543][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.958506][T13824] input: syz1 as /devices/virtual/input/input63 [ 624.313288][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.319934][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.386380][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'. [ 624.606517][ T5988] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 624.778939][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 624.800440][ T5988] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 624.854459][ T5988] usb 1-1: config 0 has no interface number 0 [ 624.864554][ T5988] usb 1-1: config 0 interface 184 has no altsetting 0 [ 624.929014][ T5988] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 624.954210][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.962766][ T5988] usb 1-1: Product: syz [ 624.967547][ T5988] usb 1-1: Manufacturer: syz [ 625.044297][T11222] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 625.060880][ T5988] usb 1-1: SerialNumber: syz [ 625.069512][ T5988] usb 1-1: config 0 descriptor?? [ 625.219064][T11222] usb 5-1: device descriptor read/64, error -71 [ 625.464496][T11222] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 625.518739][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 625.518757][ T30] audit: type=1326 audit(1758784137.870:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 625.734516][ T30] audit: type=1326 audit(1758784137.870:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 625.756724][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.771933][T13852] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 625.779782][T13852] CPU: 0 UID: 0 PID: 13852 Comm: syz.3.2000 Not tainted syzkaller #0 PREEMPT(full) [ 625.779812][T13852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 625.779823][T13852] Call Trace: [ 625.779833][T13852] [ 625.779841][T13852] dump_stack_lvl+0x189/0x250 [ 625.779873][T13852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.779896][T13852] ? __pfx__printk+0x10/0x10 [ 625.779927][T13852] ? kernfs_path_from_node+0x2f/0x290 [ 625.779948][T13852] ? kernfs_path_from_node+0x250/0x290 [ 625.779968][T13852] ? kernfs_path_from_node+0x2f/0x290 [ 625.779992][T13852] sysfs_warn_dup+0x8e/0xa0 [ 625.780012][T13852] sysfs_do_create_link_sd+0xc0/0x110 [ 625.780035][T13852] device_add_class_symlinks+0x1cf/0x240 [ 625.780061][T13852] device_add+0x475/0xb50 [ 625.780095][T13852] wiphy_register+0x1ba6/0x28d0 [ 625.780134][T13852] ? __pfx_wiphy_register+0x10/0x10 [ 625.780153][T13852] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 625.780185][T13852] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 625.780214][T13852] ieee80211_register_hw+0x3484/0x4100 [ 625.780254][T13852] ? ieee80211_register_hw+0x14a1/0x4100 [ 625.780288][T13852] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 625.780317][T13852] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 625.780351][T13852] ? __hrtimer_setup+0x187/0x210 [ 625.780369][T13852] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 625.780392][T13852] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 625.780449][T13852] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 625.780472][T13852] ? trace_kmalloc+0x1f/0xd0 [ 625.780493][T13852] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 625.780518][T13852] ? kstrndup+0xbf/0x160 [ 625.780549][T13852] hwsim_new_radio_nl+0xea4/0x1b10 [ 625.780577][T13852] ? __pfx___nla_validate_parse+0x10/0x10 [ 625.780613][T13852] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.780653][T13852] ? __nla_parse+0x40/0x60 [ 625.780675][T13852] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 625.780706][T13852] genl_family_rcv_msg_doit+0x215/0x300 [ 625.780738][T13852] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 625.780777][T13852] ? bpf_lsm_capable+0x9/0x20 [ 625.780800][T13852] ? security_capable+0x7e/0x2e0 [ 625.780830][T13852] genl_rcv_msg+0x60e/0x790 [ 625.780854][T13852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.780876][T13852] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.780903][T13852] ? __asan_memcpy+0x40/0x70 [ 625.780924][T13852] ? __pfx_ref_tracker_free+0x10/0x10 [ 625.780952][T13852] netlink_rcv_skb+0x205/0x470 [ 625.780969][T13852] ? __lock_acquire+0xab9/0xd20 [ 625.780995][T13852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.781020][T13852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.781061][T13852] ? down_read+0x1ad/0x2e0 [ 625.781097][T13852] genl_rcv+0x28/0x40 [ 625.781118][T13852] netlink_unicast+0x82c/0x9e0 [ 625.781155][T13852] ? __pfx_netlink_unicast+0x10/0x10 [ 625.781184][T13852] ? netlink_sendmsg+0x642/0xb30 [ 625.781202][T13852] ? skb_put+0x11b/0x210 [ 625.781229][T13852] netlink_sendmsg+0x805/0xb30 [ 625.781259][T13852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.781283][T13852] ? __import_iovec+0x5d4/0x7f0 [ 625.781303][T13852] ? aa_sock_msg_perm+0xf1/0x1d0 [ 625.781325][T13852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.781344][T13852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.781365][T13852] __sock_sendmsg+0x21c/0x270 [ 625.781394][T13852] ____sys_sendmsg+0x505/0x830 [ 625.781423][T13852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.781464][T13852] ___sys_sendmsg+0x21f/0x2a0 [ 625.781489][T13852] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.781511][T13852] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.781569][T13852] ? __fget_files+0x2a/0x420 [ 625.781586][T13852] ? __fget_files+0x3a0/0x420 [ 625.781615][T13852] __sys_sendmsg+0x164/0x220 [ 625.781639][T13852] ? __pfx___sys_sendmsg+0x10/0x10 [ 625.781676][T13852] ? __secure_computing+0xe2/0x2a0 [ 625.781704][T13852] __do_fast_syscall_32+0xb6/0x2b0 [ 625.781734][T13852] do_fast_syscall_32+0x34/0x80 [ 625.781754][T13852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.781776][T13852] RIP: 0023:0xf705e539 [ 625.781794][T13852] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 625.781810][T13852] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 625.781830][T13852] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 625.781843][T13852] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.781854][T13852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.781865][T13852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 625.781876][T13852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.781907][T13852] [ 626.237022][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.243364][T11222] usb 5-1: device descriptor read/64, error -71 [ 626.357722][ T30] audit: type=1326 audit(1758784137.900:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.380117][ T30] audit: type=1326 audit(1758784137.900:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.405741][ T30] audit: type=1326 audit(1758784137.900:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.428162][ T30] audit: type=1326 audit(1758784137.900:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.450356][ T30] audit: type=1326 audit(1758784138.030:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.472410][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.475067][T11222] usb usb5-port1: attempt power cycle [ 626.478657][ T30] audit: type=1326 audit(1758784138.030:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.505968][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.512145][ T30] audit: type=1326 audit(1758784138.120:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.561063][T13853] input: syz1 as /devices/virtual/input/input64 [ 626.593403][ T30] audit: type=1326 audit(1758784138.930:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.3.2000" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 626.894664][T11222] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 626.915204][T11222] usb 5-1: device descriptor read/8, error -71 [ 627.174469][T11222] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 627.256052][T11222] usb 5-1: device descriptor read/8, error -71 [ 627.374818][T11222] usb usb5-port1: unable to enumerate USB device [ 627.530812][ T5988] smsc75xx v1.0.0 [ 627.536814][ T5988] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 627.601704][ T5988] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 627.629867][ T5988] usb 1-1: USB disconnect, device number 56 [ 627.837218][T13872] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 627.854452][T13872] CPU: 1 UID: 0 PID: 13872 Comm: syz.0.2004 Not tainted syzkaller #0 PREEMPT(full) [ 627.854478][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.854490][T13872] Call Trace: [ 627.854498][T13872] [ 627.854507][T13872] dump_stack_lvl+0x189/0x250 [ 627.854540][T13872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.854563][T13872] ? __pfx__printk+0x10/0x10 [ 627.854593][T13872] ? kernfs_path_from_node+0x2f/0x290 [ 627.854613][T13872] ? kernfs_path_from_node+0x250/0x290 [ 627.854632][T13872] ? kernfs_path_from_node+0x2f/0x290 [ 627.854657][T13872] sysfs_warn_dup+0x8e/0xa0 [ 627.854678][T13872] sysfs_do_create_link_sd+0xc0/0x110 [ 627.854702][T13872] device_add_class_symlinks+0x1cf/0x240 [ 627.854743][T13872] device_add+0x475/0xb50 [ 627.854777][T13872] wiphy_register+0x1ba6/0x28d0 [ 627.854817][T13872] ? __pfx_wiphy_register+0x10/0x10 [ 627.854836][T13872] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 627.854874][T13872] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 627.854903][T13872] ieee80211_register_hw+0x3484/0x4100 [ 627.854949][T13872] ? ieee80211_register_hw+0x14a1/0x4100 [ 627.854983][T13872] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 627.855011][T13872] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 627.855046][T13872] ? __hrtimer_setup+0x187/0x210 [ 627.855064][T13872] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 627.855093][T13872] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 627.855152][T13872] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 627.855177][T13872] ? trace_kmalloc+0x1f/0xd0 [ 627.855197][T13872] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 627.855222][T13872] ? kstrndup+0xbf/0x160 [ 627.855253][T13872] hwsim_new_radio_nl+0xea4/0x1b10 [ 627.855280][T13872] ? __pfx___nla_validate_parse+0x10/0x10 [ 627.855316][T13872] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 627.855356][T13872] ? __nla_parse+0x40/0x60 [ 627.855379][T13872] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 627.855413][T13872] genl_family_rcv_msg_doit+0x215/0x300 [ 627.855445][T13872] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 627.855487][T13872] ? bpf_lsm_capable+0x9/0x20 [ 627.855510][T13872] ? security_capable+0x7e/0x2e0 [ 627.855543][T13872] genl_rcv_msg+0x60e/0x790 [ 627.855574][T13872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.855598][T13872] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 627.855623][T13872] ? __asan_memcpy+0x40/0x70 [ 627.855657][T13872] ? __pfx_ref_tracker_free+0x10/0x10 [ 627.855684][T13872] netlink_rcv_skb+0x205/0x470 [ 627.855703][T13872] ? __lock_acquire+0xab9/0xd20 [ 627.855729][T13872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.855755][T13872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.855796][T13872] ? down_read+0x1ad/0x2e0 [ 627.855821][T13872] genl_rcv+0x28/0x40 [ 627.855842][T13872] netlink_unicast+0x82c/0x9e0 [ 627.855884][T13872] ? __pfx_netlink_unicast+0x10/0x10 [ 627.855910][T13872] ? netlink_sendmsg+0x6a2/0xb30 [ 627.855938][T13872] netlink_sendmsg+0x805/0xb30 [ 627.855969][T13872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.855992][T13872] ? __import_iovec+0x5d4/0x7f0 [ 627.856013][T13872] ? aa_sock_msg_perm+0xf1/0x1d0 [ 627.856035][T13872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.856054][T13872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.856075][T13872] __sock_sendmsg+0x21c/0x270 [ 627.856105][T13872] ____sys_sendmsg+0x505/0x830 [ 627.856134][T13872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.856176][T13872] ___sys_sendmsg+0x21f/0x2a0 [ 627.856201][T13872] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.856221][T13872] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.856278][T13872] ? __fget_files+0x2a/0x420 [ 627.856295][T13872] ? __fget_files+0x3a0/0x420 [ 627.856323][T13872] __sys_sendmsg+0x164/0x220 [ 627.856348][T13872] ? __pfx___sys_sendmsg+0x10/0x10 [ 627.856384][T13872] ? __secure_computing+0xe2/0x2a0 [ 627.856413][T13872] __do_fast_syscall_32+0xb6/0x2b0 [ 627.856435][T13872] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.856459][T13872] do_fast_syscall_32+0x34/0x80 [ 627.856480][T13872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.856501][T13872] RIP: 0023:0xf6ffe539 [ 627.856518][T13872] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 627.856533][T13872] RSP: 002b:00000000f53ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 627.856553][T13872] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 627.856566][T13872] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.856577][T13872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 627.856589][T13872] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 627.856600][T13872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.856627][T13872] [ 628.558842][T13872] input: syz1 as /devices/virtual/input/input66 [ 628.581646][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 628.604005][T13880] input: syz1 as /devices/virtual/input/input65 [ 628.855253][T13889] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2010'. [ 629.092618][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 629.101650][T13893] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2011'. [ 629.111164][T13893] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 629.243795][T13900] net_ratelimit: 4052 callbacks suppressed [ 629.243809][T13900] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 629.704529][ T5988] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 629.753305][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'. [ 629.894487][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 629.901134][ T5988] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 629.912323][ T5988] usb 5-1: config 0 has no interface number 0 [ 629.968041][ T5988] usb 5-1: config 0 interface 184 has no altsetting 0 [ 629.977548][ T5988] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 629.989228][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.012777][ T5988] usb 5-1: Product: syz [ 630.045376][ T5988] usb 5-1: Manufacturer: syz [ 630.050117][ T5988] usb 5-1: SerialNumber: syz [ 630.161020][ T5988] usb 5-1: config 0 descriptor?? [ 631.237127][T13933] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 631.244849][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 631.244862][ T30] audit: type=1326 audit(1758784143.570:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.273083][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.284402][T13933] CPU: 0 UID: 0 PID: 13933 Comm: syz.1.2019 Not tainted syzkaller #0 PREEMPT(full) [ 631.284430][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 631.284441][T13933] Call Trace: [ 631.284448][T13933] [ 631.284457][T13933] dump_stack_lvl+0x189/0x250 [ 631.284487][T13933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.284510][T13933] ? __pfx__printk+0x10/0x10 [ 631.284541][T13933] ? kernfs_path_from_node+0x2f/0x290 [ 631.284561][T13933] ? kernfs_path_from_node+0x250/0x290 [ 631.284579][T13933] ? kernfs_path_from_node+0x2f/0x290 [ 631.284603][T13933] sysfs_warn_dup+0x8e/0xa0 [ 631.284623][T13933] sysfs_do_create_link_sd+0xc0/0x110 [ 631.284646][T13933] device_add_class_symlinks+0x1cf/0x240 [ 631.284672][T13933] device_add+0x475/0xb50 [ 631.284703][T13933] wiphy_register+0x1ba6/0x28d0 [ 631.284742][T13933] ? __pfx_wiphy_register+0x10/0x10 [ 631.284760][T13933] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 631.284792][T13933] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 631.284821][T13933] ieee80211_register_hw+0x3484/0x4100 [ 631.284860][T13933] ? ieee80211_register_hw+0x14a1/0x4100 [ 631.284894][T13933] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 631.284920][T13933] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 631.284953][T13933] ? __hrtimer_setup+0x187/0x210 [ 631.284970][T13933] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 631.284990][T13933] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 631.285043][T13933] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 631.285064][T13933] ? trace_kmalloc+0x1f/0xd0 [ 631.285080][T13933] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 631.285099][T13933] ? kstrndup+0xbf/0x160 [ 631.285122][T13933] hwsim_new_radio_nl+0xea4/0x1b10 [ 631.285145][T13933] ? __pfx___nla_validate_parse+0x10/0x10 [ 631.285172][T13933] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 631.285208][T13933] ? __nla_parse+0x40/0x60 [ 631.285227][T13933] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 631.285254][T13933] genl_family_rcv_msg_doit+0x215/0x300 [ 631.285287][T13933] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.285318][T13933] ? bpf_lsm_capable+0x9/0x20 [ 631.285337][T13933] ? security_capable+0x7e/0x2e0 [ 631.285364][T13933] genl_rcv_msg+0x60e/0x790 [ 631.285389][T13933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.285406][T13933] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 631.285427][T13933] ? rcu_is_watching+0x15/0xb0 [ 631.285449][T13933] netlink_rcv_skb+0x205/0x470 [ 631.285463][T13933] ? __lock_acquire+0xab9/0xd20 [ 631.285483][T13933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.285501][T13933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.285526][T13933] ? __pfx_genl_rcv+0x10/0x10 [ 631.285548][T13933] ? down_read+0x1ad/0x2e0 [ 631.285566][T13933] genl_rcv+0x28/0x40 [ 631.285582][T13933] netlink_unicast+0x82c/0x9e0 [ 631.285610][T13933] ? __pfx_netlink_unicast+0x10/0x10 [ 631.285632][T13933] ? netlink_sendmsg+0x642/0xb30 [ 631.285645][T13933] ? skb_put+0x11b/0x210 [ 631.285665][T13933] netlink_sendmsg+0x805/0xb30 [ 631.285688][T13933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.285707][T13933] ? aa_sock_msg_perm+0xf1/0x1d0 [ 631.285723][T13933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.285737][T13933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.285753][T13933] __sock_sendmsg+0x21c/0x270 [ 631.285784][T13933] ____sys_sendmsg+0x505/0x830 [ 631.285807][T13933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.285839][T13933] ___sys_sendmsg+0x21f/0x2a0 [ 631.285859][T13933] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.285876][T13933] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.285921][T13933] ? __fget_files+0x2a/0x420 [ 631.285933][T13933] ? __fget_files+0x3a0/0x420 [ 631.285955][T13933] __sys_sendmsg+0x164/0x220 [ 631.285974][T13933] ? __pfx___sys_sendmsg+0x10/0x10 [ 631.286001][T13933] ? __secure_computing+0xe2/0x2a0 [ 631.286022][T13933] __do_fast_syscall_32+0xb6/0x2b0 [ 631.286044][T13933] do_fast_syscall_32+0x34/0x80 [ 631.286060][T13933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 631.286077][T13933] RIP: 0023:0xf7fa3539 [ 631.286091][T13933] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 631.286103][T13933] RSP: 002b:00000000f545455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 631.286119][T13933] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 631.286130][T13933] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.286140][T13933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.286166][T13933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 631.286176][T13933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.286199][T13933] [ 631.742285][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.748893][ T30] audit: type=1326 audit(1758784143.570:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.771059][ T30] audit: type=1326 audit(1758784143.570:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.793116][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.799355][ T30] audit: type=1326 audit(1758784143.570:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.821426][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.827606][ T30] audit: type=1326 audit(1758784143.570:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.849766][ T30] audit: type=1326 audit(1758784143.570:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.871859][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.877949][ T30] audit: type=1326 audit(1758784143.570:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.900129][ T30] audit: type=1326 audit(1758784143.570:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.922186][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.928289][ T30] audit: type=1326 audit(1758784143.580:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.950476][ T30] audit: type=1326 audit(1758784143.580:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.1.2019" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 631.972584][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.254817][T13936] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2021'. [ 632.301815][T13935] input: syz1 as /devices/virtual/input/input67 [ 632.410064][ T5988] smsc75xx v1.0.0 [ 632.423286][ T5988] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 632.462735][T13939] tipc: Enabled bearer , priority 0 [ 632.473291][T13939] syzkaller0: entered promiscuous mode [ 632.504130][T13939] syzkaller0: entered allmulticast mode [ 632.537497][ T5988] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 632.539266][T13939] netlink: 568 bytes leftover after parsing attributes in process `syz.4.2022'. [ 632.603463][T13939] tipc: Resetting bearer [ 632.623100][ T5988] usb 5-1: USB disconnect, device number 42 [ 632.709572][T13944] sock: sock_set_timeout: `syz.2.2023' (pid 13944) tries to set negative timeout [ 632.854570][T11222] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 633.039254][T11222] usb 4-1: Using ep0 maxpacket: 32 [ 633.045163][T13952] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 633.052928][T13952] CPU: 0 UID: 0 PID: 13952 Comm: syz.0.2024 Not tainted syzkaller #0 PREEMPT(full) [ 633.052979][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 633.053006][T13952] Call Trace: [ 633.053024][T13952] [ 633.053043][T13952] dump_stack_lvl+0x189/0x250 [ 633.053103][T13952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.053125][T13952] ? __pfx__printk+0x10/0x10 [ 633.053154][T13952] ? kernfs_path_from_node+0x2f/0x290 [ 633.053179][T13952] ? kernfs_path_from_node+0x250/0x290 [ 633.053197][T13952] ? kernfs_path_from_node+0x2f/0x290 [ 633.053222][T13952] sysfs_warn_dup+0x8e/0xa0 [ 633.053242][T13952] sysfs_do_create_link_sd+0xc0/0x110 [ 633.053265][T13952] device_add_class_symlinks+0x1cf/0x240 [ 633.053293][T13952] device_add+0x475/0xb50 [ 633.053320][T13952] wiphy_register+0x1ba6/0x28d0 [ 633.053357][T13952] ? __pfx_wiphy_register+0x10/0x10 [ 633.053375][T13952] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 633.053410][T13952] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 633.053433][T13952] ieee80211_register_hw+0x3484/0x4100 [ 633.053465][T13952] ? ieee80211_register_hw+0x14a1/0x4100 [ 633.053492][T13952] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 633.053514][T13952] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 633.053541][T13952] ? __hrtimer_setup+0x187/0x210 [ 633.053555][T13952] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 633.053573][T13952] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 633.053617][T13952] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 633.053635][T13952] ? trace_kmalloc+0x1f/0xd0 [ 633.053653][T13952] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 633.053672][T13952] ? kstrndup+0xbf/0x160 [ 633.053695][T13952] hwsim_new_radio_nl+0xea4/0x1b10 [ 633.053731][T13952] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 633.053754][T13952] ? irqentry_exit+0x74/0x90 [ 633.053768][T13952] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.053800][T13952] genl_family_rcv_msg_doit+0x215/0x300 [ 633.053826][T13952] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 633.053855][T13952] ? bpf_lsm_capable+0x9/0x20 [ 633.053872][T13952] ? security_capable+0x7e/0x2e0 [ 633.053899][T13952] genl_rcv_msg+0x60e/0x790 [ 633.053923][T13952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.053940][T13952] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 633.053972][T13952] netlink_rcv_skb+0x205/0x470 [ 633.053985][T13952] ? __lock_acquire+0xab9/0xd20 [ 633.054005][T13952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.054024][T13952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.054055][T13952] ? down_read+0x1ad/0x2e0 [ 633.054073][T13952] genl_rcv+0x28/0x40 [ 633.054089][T13952] netlink_unicast+0x82c/0x9e0 [ 633.054117][T13952] ? __pfx_netlink_unicast+0x10/0x10 [ 633.054138][T13952] ? netlink_sendmsg+0x642/0xb30 [ 633.054153][T13952] ? skb_put+0x11b/0x210 [ 633.054172][T13952] netlink_sendmsg+0x805/0xb30 [ 633.054195][T13952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.054213][T13952] ? __import_iovec+0x5d4/0x7f0 [ 633.054229][T13952] ? aa_sock_msg_perm+0xf1/0x1d0 [ 633.054245][T13952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.054259][T13952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.054275][T13952] __sock_sendmsg+0x21c/0x270 [ 633.054299][T13952] ____sys_sendmsg+0x505/0x830 [ 633.054322][T13952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.054357][T13952] ___sys_sendmsg+0x21f/0x2a0 [ 633.054378][T13952] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.054401][T13952] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.054446][T13952] ? __fget_files+0x2a/0x420 [ 633.054459][T13952] ? __fget_files+0x3a0/0x420 [ 633.054482][T13952] __sys_sendmsg+0x164/0x220 [ 633.054501][T13952] ? __pfx___sys_sendmsg+0x10/0x10 [ 633.054529][T13952] ? __secure_computing+0xe2/0x2a0 [ 633.054552][T13952] __do_fast_syscall_32+0xb6/0x2b0 [ 633.054569][T13952] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.054587][T13952] do_fast_syscall_32+0x34/0x80 [ 633.054603][T13952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 633.054620][T13952] RIP: 0023:0xf6ffe539 [ 633.054633][T13952] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 633.054646][T13952] RSP: 002b:00000000f53ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 633.054662][T13952] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 633.054673][T13952] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.054682][T13952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.054691][T13952] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 633.054700][T13952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.054724][T13952] [ 633.056426][T11222] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 633.234501][ T5988] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 633.281319][T11222] usb 4-1: config 0 has no interface number 0 [ 633.455560][ T5988] usb 2-1: device descriptor read/64, error -71 [ 633.567889][T13938] tipc: Resetting bearer [ 633.628882][T13938] tipc: Disabling bearer [ 633.687711][T11222] usb 4-1: config 0 interface 184 has no altsetting 0 [ 633.782370][T11222] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 633.821602][T11222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.831646][T11222] usb 4-1: Product: syz [ 633.835974][T11222] usb 4-1: Manufacturer: syz [ 633.840808][T11222] usb 4-1: SerialNumber: syz [ 633.857178][T11222] usb 4-1: config 0 descriptor?? [ 633.985071][ T5988] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 634.175812][ T919] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 634.344559][ T919] usb 3-1: Using ep0 maxpacket: 16 [ 634.358545][ T919] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 634.369246][ T919] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 634.380419][ T919] usb 3-1: Product: syz [ 634.384769][ T919] usb 3-1: Manufacturer: syz [ 634.389404][ T919] usb 3-1: SerialNumber: syz [ 634.398808][ T919] usb 3-1: config 0 descriptor?? [ 635.139325][T13979] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.2034'. [ 635.279646][T13983] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2046'. [ 636.052553][T11222] smsc75xx v1.0.0 [ 636.057470][T11222] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 636.069511][T11222] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 636.082489][T11222] usb 4-1: USB disconnect, device number 52 [ 636.144657][T13991] MPI: mpi too large (130952 bits) [ 636.522812][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 636.522830][ T30] audit: type=1326 audit(1758784148.870:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 636.559608][T14006] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 636.639062][T14006] CPU: 0 UID: 0 PID: 14006 Comm: syz.3.2038 Not tainted syzkaller #0 PREEMPT(full) [ 636.639088][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 636.639099][T14006] Call Trace: [ 636.639106][T14006] [ 636.639115][T14006] dump_stack_lvl+0x189/0x250 [ 636.639144][T14006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.639164][T14006] ? __pfx__printk+0x10/0x10 [ 636.639188][T14006] ? __rcu_read_unlock+0x84/0xe0 [ 636.639209][T14006] ? kernfs_path_from_node+0x2f/0x290 [ 636.639227][T14006] ? kernfs_path_from_node+0x250/0x290 [ 636.639245][T14006] ? kernfs_path_from_node+0x2f/0x290 [ 636.639269][T14006] sysfs_warn_dup+0x8e/0xa0 [ 636.639289][T14006] sysfs_do_create_link_sd+0xc0/0x110 [ 636.639310][T14006] device_add_class_symlinks+0x1cf/0x240 [ 636.639335][T14006] device_add+0x475/0xb50 [ 636.639359][T14006] wiphy_register+0x1ba6/0x28d0 [ 636.639396][T14006] ? __pfx_wiphy_register+0x10/0x10 [ 636.639414][T14006] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 636.639447][T14006] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 636.639476][T14006] ieee80211_register_hw+0x3484/0x4100 [ 636.639515][T14006] ? ieee80211_register_hw+0x14a1/0x4100 [ 636.639549][T14006] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 636.639578][T14006] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 636.639612][T14006] ? __hrtimer_setup+0x187/0x210 [ 636.639628][T14006] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 636.639649][T14006] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 636.639705][T14006] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 636.639728][T14006] ? trace_kmalloc+0x1f/0xd0 [ 636.639749][T14006] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 636.639773][T14006] ? kstrndup+0xbf/0x160 [ 636.639812][T14006] hwsim_new_radio_nl+0xea4/0x1b10 [ 636.639841][T14006] ? __pfx___nla_validate_parse+0x10/0x10 [ 636.639877][T14006] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 636.639916][T14006] ? __nla_parse+0x40/0x60 [ 636.639940][T14006] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 636.639974][T14006] genl_family_rcv_msg_doit+0x215/0x300 [ 636.640006][T14006] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 636.640042][T14006] ? bpf_lsm_capable+0x9/0x20 [ 636.640063][T14006] ? security_capable+0x7e/0x2e0 [ 636.640095][T14006] genl_rcv_msg+0x60e/0x790 [ 636.640127][T14006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.640148][T14006] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 636.640178][T14006] ? __asan_memcpy+0x40/0x70 [ 636.640198][T14006] ? __pfx_ref_tracker_free+0x10/0x10 [ 636.640225][T14006] netlink_rcv_skb+0x205/0x470 [ 636.640243][T14006] ? __lock_acquire+0xab9/0xd20 [ 636.640268][T14006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.640293][T14006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.640334][T14006] ? down_read+0x1ad/0x2e0 [ 636.640358][T14006] genl_rcv+0x28/0x40 [ 636.640379][T14006] netlink_unicast+0x82c/0x9e0 [ 636.640416][T14006] ? __pfx_netlink_unicast+0x10/0x10 [ 636.640445][T14006] ? netlink_sendmsg+0x642/0xb30 [ 636.640462][T14006] ? skb_put+0x11b/0x210 [ 636.640487][T14006] netlink_sendmsg+0x805/0xb30 [ 636.640518][T14006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.640541][T14006] ? __import_iovec+0x5d4/0x7f0 [ 636.640561][T14006] ? aa_sock_msg_perm+0xf1/0x1d0 [ 636.640582][T14006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.640600][T14006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.640621][T14006] __sock_sendmsg+0x21c/0x270 [ 636.640651][T14006] ____sys_sendmsg+0x505/0x830 [ 636.640680][T14006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.640721][T14006] ___sys_sendmsg+0x21f/0x2a0 [ 636.640746][T14006] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.640767][T14006] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.640832][T14006] ? __fget_files+0x2a/0x420 [ 636.640849][T14006] ? __fget_files+0x3a0/0x420 [ 636.640879][T14006] __sys_sendmsg+0x164/0x220 [ 636.640904][T14006] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.640940][T14006] ? __secure_computing+0xe2/0x2a0 [ 636.640969][T14006] __do_fast_syscall_32+0xb6/0x2b0 [ 636.640991][T14006] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.641015][T14006] do_fast_syscall_32+0x34/0x80 [ 636.641036][T14006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 636.641058][T14006] RIP: 0023:0xf705e539 [ 636.641075][T14006] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 636.641091][T14006] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 636.641111][T14006] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 636.641124][T14006] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 636.641136][T14006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.641147][T14006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 636.641159][T14006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 636.641190][T14006] [ 637.106870][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.115303][ T30] audit: type=1326 audit(1758784148.900:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.137540][ T30] audit: type=1326 audit(1758784148.900:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.167000][T14006] input: syz1 as /devices/virtual/input/input68 [ 637.173352][ T30] audit: type=1326 audit(1758784148.900:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.201723][ T30] audit: type=1326 audit(1758784148.900:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.223887][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.230062][ T30] audit: type=1326 audit(1758784148.900:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.254888][ T30] audit: type=1326 audit(1758784148.900:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.654696][ T30] audit: type=1326 audit(1758784148.900:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.715848][ T30] audit: type=1326 audit(1758784148.900:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.744586][ T30] audit: type=1326 audit(1758784148.900:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13996 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 637.848302][ T5988] usb 3-1: USB disconnect, device number 45 [ 638.872047][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2042'. [ 639.642040][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2045'. [ 639.682866][T14039] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.2048'. [ 640.020747][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2049'. [ 640.434472][ T980] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 640.604622][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 640.611500][ T980] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 640.643911][ T980] usb 4-1: config 0 has no interface number 0 [ 640.658969][ T980] usb 4-1: config 0 interface 184 has no altsetting 0 [ 640.677974][ T980] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 640.689237][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.708621][ T980] usb 4-1: Product: syz [ 640.730989][ T980] usb 4-1: Manufacturer: syz [ 640.753387][ T980] usb 4-1: SerialNumber: syz [ 640.795224][ T980] usb 4-1: config 0 descriptor?? [ 641.046634][T14060] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 641.054289][T14060] CPU: 0 UID: 0 PID: 14060 Comm: syz.1.2054 Not tainted syzkaller #0 PREEMPT(full) [ 641.054317][T14060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.054328][T14060] Call Trace: [ 641.054337][T14060] [ 641.054346][T14060] dump_stack_lvl+0x189/0x250 [ 641.054374][T14060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.054394][T14060] ? __pfx__printk+0x10/0x10 [ 641.054421][T14060] ? kernfs_path_from_node+0x2f/0x290 [ 641.054440][T14060] ? kernfs_path_from_node+0x250/0x290 [ 641.054455][T14060] ? kernfs_path_from_node+0x2f/0x290 [ 641.054476][T14060] sysfs_warn_dup+0x8e/0xa0 [ 641.054494][T14060] sysfs_do_create_link_sd+0xc0/0x110 [ 641.054515][T14060] device_add_class_symlinks+0x1cf/0x240 [ 641.054540][T14060] device_add+0x475/0xb50 [ 641.054567][T14060] wiphy_register+0x1ba6/0x28d0 [ 641.054606][T14060] ? __pfx_wiphy_register+0x10/0x10 [ 641.054625][T14060] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 641.054657][T14060] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 641.054686][T14060] ieee80211_register_hw+0x3484/0x4100 [ 641.054735][T14060] ? ieee80211_register_hw+0x14a1/0x4100 [ 641.054769][T14060] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 641.054798][T14060] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 641.054833][T14060] ? __hrtimer_setup+0x187/0x210 [ 641.054851][T14060] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 641.054873][T14060] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 641.054935][T14060] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 641.054959][T14060] ? trace_kmalloc+0x1f/0xd0 [ 641.054979][T14060] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 641.055004][T14060] ? kstrndup+0xbf/0x160 [ 641.055034][T14060] hwsim_new_radio_nl+0xea4/0x1b10 [ 641.055063][T14060] ? __pfx___nla_validate_parse+0x10/0x10 [ 641.055099][T14060] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 641.055138][T14060] ? __nla_parse+0x40/0x60 [ 641.055162][T14060] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 641.055194][T14060] genl_family_rcv_msg_doit+0x215/0x300 [ 641.055225][T14060] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 641.055259][T14060] ? bpf_lsm_capable+0x9/0x20 [ 641.055280][T14060] ? security_capable+0x7e/0x2e0 [ 641.055313][T14060] genl_rcv_msg+0x60e/0x790 [ 641.055344][T14060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 641.055366][T14060] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 641.055407][T14060] netlink_rcv_skb+0x205/0x470 [ 641.055425][T14060] ? __lock_acquire+0xab9/0xd20 [ 641.055449][T14060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 641.055472][T14060] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.055513][T14060] ? down_read+0x1ad/0x2e0 [ 641.055537][T14060] genl_rcv+0x28/0x40 [ 641.055558][T14060] netlink_unicast+0x82c/0x9e0 [ 641.055595][T14060] ? __pfx_netlink_unicast+0x10/0x10 [ 641.055622][T14060] ? netlink_sendmsg+0x642/0xb30 [ 641.055639][T14060] ? skb_put+0x11b/0x210 [ 641.055664][T14060] netlink_sendmsg+0x805/0xb30 [ 641.055694][T14060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.055724][T14060] ? __import_iovec+0x5d4/0x7f0 [ 641.055746][T14060] ? aa_sock_msg_perm+0xf1/0x1d0 [ 641.055767][T14060] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.055786][T14060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.055807][T14060] __sock_sendmsg+0x21c/0x270 [ 641.055837][T14060] ____sys_sendmsg+0x505/0x830 [ 641.055865][T14060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.055906][T14060] ___sys_sendmsg+0x21f/0x2a0 [ 641.055931][T14060] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.055952][T14060] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.056010][T14060] ? __fget_files+0x2a/0x420 [ 641.056027][T14060] ? __fget_files+0x3a0/0x420 [ 641.056055][T14060] __sys_sendmsg+0x164/0x220 [ 641.056080][T14060] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.056116][T14060] ? __secure_computing+0xe2/0x2a0 [ 641.056144][T14060] __do_fast_syscall_32+0xb6/0x2b0 [ 641.056174][T14060] do_fast_syscall_32+0x34/0x80 [ 641.056194][T14060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.056215][T14060] RIP: 0023:0xf7fa3539 [ 641.056232][T14060] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 641.056247][T14060] RSP: 002b:00000000f545455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 641.056267][T14060] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 641.056280][T14060] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.056291][T14060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.056302][T14060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 641.056313][T14060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.056343][T14060] [ 641.499213][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.702520][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 641.702538][ T30] audit: type=1326 audit(1758784154.050:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 641.751333][T14063] ================================================================== [ 641.759432][T14063] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 641.767581][T14063] Read of size 1 at addr ffff888029250770 by task syz.2.2055/14063 [ 641.775477][T14063] [ 641.777800][T14063] CPU: 1 UID: 0 PID: 14063 Comm: syz.2.2055 Not tainted syzkaller #0 PREEMPT(full) [ 641.777814][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.777826][T14063] Call Trace: [ 641.777836][T14063] [ 641.777845][T14063] dump_stack_lvl+0x189/0x250 [ 641.777869][T14063] ? __kasan_check_byte+0x12/0x40 [ 641.777895][T14063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.777910][T14063] ? lock_release+0x4b/0x3e0 [ 641.777927][T14063] ? __virt_addr_valid+0x4a5/0x5c0 [ 641.777940][T14063] print_report+0xca/0x240 [ 641.777950][T14063] ? __xfrm_state_insert+0x8af/0x1450 [ 641.777962][T14063] kasan_report+0x118/0x150 [ 641.777985][T14063] ? __xfrm_state_insert+0x8af/0x1450 [ 641.778011][T14063] __xfrm_state_insert+0x8af/0x1450 [ 641.778036][T14063] ? xfrm_state_insert+0x44/0x60 [ 641.778056][T14063] xfrm_state_insert+0x54/0x60 [ 641.778067][T14063] ipcomp6_init_state+0x655/0x900 [ 641.778080][T14063] __xfrm_init_state+0xa73/0x13f0 [ 641.778093][T14063] ? __xfrm_init_state+0x7ef/0x13f0 [ 641.778107][T14063] xfrm_init_state+0x18/0xa0 [ 641.778123][T14063] pfkey_add+0x1d38/0x2e00 [ 641.778151][T14063] ? __pfx_pfkey_add+0x10/0x10 [ 641.778169][T14063] ? kmem_cache_free+0x18f/0x400 [ 641.778196][T14063] pfkey_sendmsg+0xbfb/0x1090 [ 641.778212][T14063] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 641.778226][T14063] ? __asan_memset+0x22/0x50 [ 641.778237][T14063] ? __import_iovec+0x5d4/0x7f0 [ 641.778250][T14063] ? aa_sock_msg_perm+0xf1/0x1d0 [ 641.778259][T14063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.778278][T14063] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 641.778297][T14063] __sock_sendmsg+0x21c/0x270 [ 641.778337][T14063] ____sys_sendmsg+0x505/0x830 [ 641.778356][T14063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.778370][T14063] ___sys_sendmsg+0x21f/0x2a0 [ 641.778383][T14063] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.778395][T14063] ? futex_private_hash_put+0x4b/0x280 [ 641.778406][T14063] ? futex_private_hash_put+0x245/0x280 [ 641.778434][T14063] ? __fget_files+0x2a/0x420 [ 641.778450][T14063] ? __fget_files+0x3a0/0x420 [ 641.778470][T14063] __sys_sendmsg+0x164/0x220 [ 641.778491][T14063] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.778510][T14063] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.778520][T14063] __do_fast_syscall_32+0xb6/0x2b0 [ 641.778532][T14063] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.778542][T14063] do_fast_syscall_32+0x34/0x80 [ 641.778554][T14063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.778574][T14063] RIP: 0023:0xf7f54539 [ 641.778590][T14063] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 641.778607][T14063] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 641.778627][T14063] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800001c0 [ 641.778640][T14063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.778652][T14063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.778659][T14063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 641.778665][T14063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.778675][T14063] [ 641.778679][T14063] [ 642.074708][ T30] audit: type=1326 audit(1758784154.100:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.1.2054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 642.076361][T14063] Allocated by task 12383: [ 642.076375][T14063] kasan_save_track+0x3e/0x80 [ 642.120753][T14063] __kasan_slab_alloc+0x6c/0x80 [ 642.125652][T14063] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 642.131134][T14063] xfrm_state_alloc+0x24/0x2f0 [ 642.135916][T14063] __find_acq_core+0x8a7/0x1c00 [ 642.140825][T14063] xfrm_find_acq+0x78/0xa0 [ 642.145323][T14063] xfrm_alloc_userspi+0x6b3/0xc90 [ 642.150362][T14063] xfrm_user_rcv_msg+0x7a0/0xab0 [ 642.155405][T14063] netlink_rcv_skb+0x205/0x470 [ 642.160163][T14063] xfrm_netlink_rcv+0x79/0x90 [ 642.164843][T14063] netlink_unicast+0x82c/0x9e0 [ 642.169599][T14063] netlink_sendmsg+0x805/0xb30 [ 642.174371][T14063] __sock_sendmsg+0x21c/0x270 [ 642.179042][T14063] ____sys_sendmsg+0x505/0x830 [ 642.183796][T14063] ___sys_sendmsg+0x21f/0x2a0 [ 642.188460][T14063] __sys_sendmsg+0x164/0x220 [ 642.193066][T14063] __do_fast_syscall_32+0xb6/0x2b0 [ 642.198162][T14063] do_fast_syscall_32+0x34/0x80 [ 642.202997][T14063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 642.209317][T14063] [ 642.211645][T14063] Freed by task 10: [ 642.215517][T14063] kasan_save_track+0x3e/0x80 [ 642.220187][T14063] kasan_save_free_info+0x46/0x50 [ 642.225194][T14063] __kasan_slab_free+0x5b/0x80 [ 642.229946][T14063] kmem_cache_free+0x18f/0x400 [ 642.234695][T14063] xfrm_state_gc_task+0x52d/0x6b0 [ 642.239707][T14063] process_scheduled_works+0xae1/0x17b0 [ 642.245234][T14063] worker_thread+0x8a0/0xda0 [ 642.249811][T14063] kthread+0x70e/0x8a0 [ 642.253867][T14063] ret_from_fork+0x439/0x7d0 [ 642.258441][T14063] ret_from_fork_asm+0x1a/0x30 [ 642.263193][T14063] [ 642.265503][T14063] The buggy address belongs to the object at ffff888029250440 [ 642.265503][T14063] which belongs to the cache xfrm_state of size 928 [ 642.279457][T14063] The buggy address is located 816 bytes inside of [ 642.279457][T14063] freed 928-byte region [ffff888029250440, ffff8880292507e0) [ 642.293234][T14063] [ 642.295627][T14063] The buggy address belongs to the physical page: [ 642.302032][T14063] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029250cc0 pfn:0x29250 [ 642.312081][T14063] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 642.320559][T14063] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 642.328093][T14063] page_type: f5(slab) [ 642.332072][T14063] raw: 00fff00000000040 ffff8881426b4c80 dead000000000122 0000000000000000 [ 642.340640][T14063] raw: ffff888029250cc0 00000000800f000e 00000000f5000000 0000000000000000 [ 642.349207][T14063] head: 00fff00000000040 ffff8881426b4c80 dead000000000122 0000000000000000 [ 642.357860][T14063] head: ffff888029250cc0 00000000800f000e 00000000f5000000 0000000000000000 [ 642.366515][T14063] head: 00fff00000000002 ffffea0000a49401 00000000ffffffff 00000000ffffffff [ 642.375173][T14063] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 642.383820][T14063] page dumped because: kasan: bad access detected [ 642.390216][T14063] page_owner tracks the page as allocated [ 642.395908][T14063] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7380, tgid 7379 (syz.3.323), ts 198278978361, free_ts 198102192286 [ 642.415085][T14063] post_alloc_hook+0x240/0x2a0 [ 642.419858][T14063] get_page_from_freelist+0x21e4/0x22c0 [ 642.425417][T14063] __alloc_frozen_pages_noprof+0x181/0x370 [ 642.431331][T14063] alloc_pages_mpol+0x232/0x4a0 [ 642.436188][T14063] allocate_slab+0x8a/0x370 [ 642.440702][T14063] ___slab_alloc+0xbeb/0x1420 [ 642.445375][T14063] kmem_cache_alloc_noprof+0x283/0x3c0 [ 642.450829][T14063] xfrm_state_alloc+0x24/0x2f0 [ 642.455595][T14063] pfkey_add+0x6e4/0x2e00 [ 642.459926][T14063] pfkey_sendmsg+0xbfb/0x1090 [ 642.464595][T14063] __sock_sendmsg+0x21c/0x270 [ 642.469272][T14063] ____sys_sendmsg+0x505/0x830 [ 642.474025][T14063] ___sys_sendmsg+0x21f/0x2a0 [ 642.478694][T14063] __sys_sendmsg+0x164/0x220 [ 642.483272][T14063] __do_fast_syscall_32+0xb6/0x2b0 [ 642.488370][T14063] do_fast_syscall_32+0x34/0x80 [ 642.493210][T14063] page last free pid 12 tgid 12 stack trace: [ 642.499173][T14063] __free_frozen_pages+0xbc4/0xd30 [ 642.504272][T14063] free_large_kmalloc+0x13a/0x1f0 [ 642.509283][T14063] sta_info_free+0x57a/0x660 [ 642.513857][T14063] __sta_info_destroy+0x44/0x50 [ 642.518689][T14063] ieee80211_ibss_work+0x824/0x1060 [ 642.523881][T14063] cfg80211_wiphy_work+0x2bb/0x470 [ 642.528977][T14063] process_scheduled_works+0xae1/0x17b0 [ 642.534501][T14063] worker_thread+0x8a0/0xda0 [ 642.539076][T14063] kthread+0x70e/0x8a0 [ 642.543127][T14063] ret_from_fork+0x439/0x7d0 [ 642.547698][T14063] ret_from_fork_asm+0x1a/0x30 [ 642.552466][T14063] [ 642.554777][T14063] Memory state around the buggy address: [ 642.560388][T14063] ffff888029250600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 642.568433][T14063] ffff888029250680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 642.576484][T14063] >ffff888029250700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 642.584528][T14063] ^ [ 642.592222][T14063] ffff888029250780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 642.600269][T14063] ffff888029250800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 642.608312][T14063] ================================================================== [ 642.616547][T14063] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 642.623745][T14063] CPU: 1 UID: 0 PID: 14063 Comm: syz.2.2055 Not tainted syzkaller #0 PREEMPT(full) [ 642.633105][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 642.643147][T14063] Call Trace: [ 642.646412][T14063] [ 642.649333][T14063] dump_stack_lvl+0x99/0x250 [ 642.653913][T14063] ? __asan_memcpy+0x40/0x70 [ 642.658518][T14063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.663700][T14063] ? __pfx__printk+0x10/0x10 [ 642.668281][T14063] vpanic+0x281/0x750 [ 642.672269][T14063] ? __pfx_vpanic+0x10/0x10 [ 642.676777][T14063] ? irqentry_exit+0x74/0x90 [ 642.681386][T14063] panic+0xb9/0xc0 [ 642.685118][T14063] ? __pfx_panic+0x10/0x10 [ 642.689533][T14063] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 642.695425][T14063] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 642.701381][T14063] ? __xfrm_state_insert+0x8af/0x1450 [ 642.706747][T14063] check_panic_on_warn+0x89/0xb0 [ 642.711682][T14063] ? __xfrm_state_insert+0x8af/0x1450 [ 642.717045][T14063] end_report+0x78/0x160 [ 642.721282][T14063] kasan_report+0x129/0x150 [ 642.725777][T14063] ? __xfrm_state_insert+0x8af/0x1450 [ 642.731145][T14063] __xfrm_state_insert+0x8af/0x1450 [ 642.736338][T14063] ? xfrm_state_insert+0x44/0x60 [ 642.741265][T14063] xfrm_state_insert+0x54/0x60 [ 642.746014][T14063] ipcomp6_init_state+0x655/0x900 [ 642.751029][T14063] __xfrm_init_state+0xa73/0x13f0 [ 642.756040][T14063] ? __xfrm_init_state+0x7ef/0x13f0 [ 642.761236][T14063] xfrm_init_state+0x18/0xa0 [ 642.765812][T14063] pfkey_add+0x1d38/0x2e00 [ 642.770220][T14063] ? __pfx_pfkey_add+0x10/0x10 [ 642.774965][T14063] ? kmem_cache_free+0x18f/0x400 [ 642.779896][T14063] pfkey_sendmsg+0xbfb/0x1090 [ 642.784563][T14063] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 642.789670][T14063] ? __asan_memset+0x22/0x50 [ 642.794260][T14063] ? __import_iovec+0x5d4/0x7f0 [ 642.799101][T14063] ? aa_sock_msg_perm+0xf1/0x1d0 [ 642.804024][T14063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.809294][T14063] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 642.814391][T14063] __sock_sendmsg+0x21c/0x270 [ 642.819056][T14063] ____sys_sendmsg+0x505/0x830 [ 642.823808][T14063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.829087][T14063] ___sys_sendmsg+0x21f/0x2a0 [ 642.833751][T14063] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.838933][T14063] ? futex_private_hash_put+0x4b/0x280 [ 642.844374][T14063] ? futex_private_hash_put+0x245/0x280 [ 642.849920][T14063] ? __fget_files+0x2a/0x420 [ 642.854492][T14063] ? __fget_files+0x3a0/0x420 [ 642.859151][T14063] __sys_sendmsg+0x164/0x220 [ 642.863732][T14063] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.868841][T14063] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.874022][T14063] __do_fast_syscall_32+0xb6/0x2b0 [ 642.879124][T14063] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.884307][T14063] do_fast_syscall_32+0x34/0x80 [ 642.889152][T14063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 642.895471][T14063] RIP: 0023:0xf7f54539 [ 642.899521][T14063] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 642.919111][T14063] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 642.927512][T14063] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800001c0 [ 642.935472][T14063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.943432][T14063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 642.951391][T14063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 642.959348][T14063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 642.967306][T14063] [ 642.970607][T14063] Kernel Offset: disabled [ 642.974995][T14063] Rebooting in 86400 seconds..