last executing test programs: 17m2.537245492s ago: executing program 32 (id=106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000ff01000000000000000000000000000100000000000000000000000000000000000000004e210000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000100000800000000000000000000000000000002000000000000010001000000000004010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff34000000000000000000000000000040200000fc020000000000000000000000000001000000006c"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 16m49.215495688s ago: executing program 33 (id=103): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) readahead(0xffffffffffffffff, 0x8, 0x9c9) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x67d493a5b9d0f250, 0x0) socket$inet6(0xa, 0x80000, 0x3) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08004500001c00000000001190200008907800"/42], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0xaa003) ioctl$FIBMAP(r2, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000003c0)=0xad) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x40000000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) 16m49.215404333s ago: executing program 34 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x7, 0x1, 0x100, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) 16m49.214769892s ago: executing program 35 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="9fffe1a87d"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r1, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x8, &(0x7f00000005c0)='\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x0, 0x2, "be9ca4877780b97411c9fa58f53ad3817f189b47f454139fe65a0baa4dfdf9e89af3e936b7d6ad6db59f87a0902368335a95243f6fb644fe0061edbd2955f78a4eb418e1decae29400ac7ce51860092c84b0cada37ccb0088ed6d3"}, 0x6b) 12m19.312144346s ago: executing program 5 (id=811): socket(0xa, 0x1, 0x0) syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) socket$can_bcm(0x1d, 0x2, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xd) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000100)=r1}, 0x1c) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 12m16.204579665s ago: executing program 5 (id=820): syz_open_dev$vim2m(0x0, 0x0, 0x2) geteuid() syz_open_dev$evdev(0x0, 0x855, 0x105200) getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x8000) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 12m12.64437245s ago: executing program 5 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400002f09000000dbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = io_uring_setup(0x412a, &(0x7f00000007c0)={0x0, 0x95f3, 0x2, 0x0, 0xf8}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000080)={0x0, 0x4ce6, 0x2, 0x2, 0x1ca, 0x0, r1}, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000940), &(0x7f0000000980)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x452142, 0xe0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="7e8bc9"], 0x20) ptrace(0x10, r7) syz_clone(0x80011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12m9.541614862s ago: executing program 5 (id=842): futex_waitv(&(0x7f0000001a00)=[{0x40, &(0x7f0000000000)=0x2, 0x82}, {0x100, &(0x7f0000000180), 0x2}, {0x1a6, &(0x7f00000001c0)=0x100000001, 0x2}, {0x1, &(0x7f0000000200)=0x94, 0x2}, {0x4, &(0x7f00000002c0)=0x9ff4, 0x2}, {0x800, &(0x7f0000000300)=0x9, 0x2}, {0x0, &(0x7f0000000340)=0x1, 0x2}, {0x69f3, &(0x7f0000000380)=0xffffffffffffff49, 0xfde4553e6d67f368}, {0xc17, &(0x7f00000003c0)=0x4, 0x82}, {0x463d53b1, &(0x7f0000000400)=0x9, 0x2}, {0x53e6, &(0x7f0000000440)=0x2, 0x82}, {0xfffffffffffffe49, &(0x7f0000000480), 0x82}, {0x8000000000000000, &(0x7f00000004c0)=0x7ff, 0x82}, {0xbc, &(0x7f0000000500)=0xff, 0x82}, {0xa, &(0x7f0000000580)=0x4, 0x2}, {0x5, &(0x7f00000005c0)=0xe, 0x82}, {0x8f8, &(0x7f0000000600)=0x7, 0x2}, {0x74, &(0x7f0000000640)=0x9, 0x82}, {0x9, &(0x7f0000000680)=0x6, 0x2}, {0xda4, &(0x7f00000006c0)=0xffff, 0x82}, {0x29, &(0x7f0000000700)=0x100, 0x82}, {0xf9, &(0x7f0000000740)=0xffffffffffffffad, 0x82}, {0x8000000000000000, &(0x7f0000000780)=0x200, 0x82}, {0x8, &(0x7f00000007c0)=0x1, 0x2}, {0xfffffffffffffffd, &(0x7f0000000800)=0x3, 0x80}, {0x3, &(0x7f0000000840)=0x5, 0x2}, {0x80000001, &(0x7f0000000880)}, {0x1, &(0x7f00000008c0)=0x6, 0x2}, {0x10000, &(0x7f0000000900)=0x9f, 0x82}, {0x6, &(0x7f0000000940)=0x8, 0x82}, {0x81, &(0x7f0000000980)=0x80, 0x82}, {0x8001, &(0x7f00000009c0)=0x9, 0x82}, {0x7, &(0x7f0000000a00)=0x9, 0x82}, {0x4, &(0x7f0000000a40)=0x4}, {0x2, &(0x7f0000000a80)=0x8, 0x82}, {0x1, &(0x7f0000000ac0)=0x53, 0x82}, {0xd790, &(0x7f0000000b00)=0x9, 0x2}, {0x9, &(0x7f0000000b40)=0x9cb, 0x82}, {0xbfb5, &(0x7f0000000b80)=0x7, 0x82}, {0x40, &(0x7f0000000bc0)=0xcf, 0x2}, {0x7, &(0x7f0000000c00)=0x53, 0x82}, {0x5, &(0x7f0000000c40)=0x9f7, 0x2}, {0x4, &(0x7f0000000c80)=0xff, 0x82}, {0x2092, &(0x7f0000000cc0), 0x82}, {0x9, &(0x7f0000000d00)=0x2, 0x82}, {0x8001, &(0x7f0000000d40)=0x349, 0x2}, {0x5, &(0x7f0000000d80)=0xffffffffffffff81, 0x2}, {0x1, &(0x7f0000000dc0)=0x18000000000000, 0x82}, {0x9, &(0x7f0000000e00)=0x3, 0x82}, {0xd, &(0x7f0000000e40)=0x4, 0x82}, {0x1, &(0x7f0000000e80)=0x6, 0x82}, {0x5, &(0x7f0000000ec0)=0x5, 0x2}, {0x5, &(0x7f0000000f00)=0x1, 0x2}, {0x0, &(0x7f0000000f40)=0x7, 0x2}, {0x2, &(0x7f0000000f80)=0x96, 0x82}, {0x1f, &(0x7f0000000fc0)=0x3, 0x2}, {0x71, &(0x7f0000001000)=0x4, 0x2}, {0x7, &(0x7f0000001040)=0x8, 0x82}, {0xa, &(0x7f0000001080)=0xa84, 0x2}, {0x6, &(0x7f00000010c0)=0x5, 0x82}, {0x588, &(0x7f0000001100)=0x54, 0x82}, {0x5, &(0x7f0000001140)=0x9, 0x82}, {0x3, &(0x7f0000001180)=0x7, 0x2}, {0x7, &(0x7f00000011c0)=0xe02a, 0x82}, {0x1, &(0x7f0000001200)=0x7f, 0x82}, {0x9, &(0x7f0000001240)=0x2, 0x2}, {0x5de9, &(0x7f0000001280)=0xf, 0x82}], 0x43, 0x0, 0x0, 0x0) 11m42.610131404s ago: executing program 36 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000140)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1fffffe, r3}, 0x10) 11m26.321556032s ago: executing program 37 (id=842): futex_waitv(&(0x7f0000001a00)=[{0x40, &(0x7f0000000000)=0x2, 0x82}, {0x100, &(0x7f0000000180), 0x2}, {0x1a6, &(0x7f00000001c0)=0x100000001, 0x2}, {0x1, &(0x7f0000000200)=0x94, 0x2}, {0x4, &(0x7f00000002c0)=0x9ff4, 0x2}, {0x800, &(0x7f0000000300)=0x9, 0x2}, {0x0, &(0x7f0000000340)=0x1, 0x2}, {0x69f3, &(0x7f0000000380)=0xffffffffffffff49, 0xfde4553e6d67f368}, {0xc17, &(0x7f00000003c0)=0x4, 0x82}, {0x463d53b1, &(0x7f0000000400)=0x9, 0x2}, {0x53e6, &(0x7f0000000440)=0x2, 0x82}, {0xfffffffffffffe49, &(0x7f0000000480), 0x82}, {0x8000000000000000, &(0x7f00000004c0)=0x7ff, 0x82}, {0xbc, &(0x7f0000000500)=0xff, 0x82}, {0xa, &(0x7f0000000580)=0x4, 0x2}, {0x5, &(0x7f00000005c0)=0xe, 0x82}, {0x8f8, &(0x7f0000000600)=0x7, 0x2}, {0x74, &(0x7f0000000640)=0x9, 0x82}, {0x9, &(0x7f0000000680)=0x6, 0x2}, {0xda4, &(0x7f00000006c0)=0xffff, 0x82}, {0x29, &(0x7f0000000700)=0x100, 0x82}, {0xf9, &(0x7f0000000740)=0xffffffffffffffad, 0x82}, {0x8000000000000000, &(0x7f0000000780)=0x200, 0x82}, {0x8, &(0x7f00000007c0)=0x1, 0x2}, {0xfffffffffffffffd, &(0x7f0000000800)=0x3, 0x80}, {0x3, &(0x7f0000000840)=0x5, 0x2}, {0x80000001, &(0x7f0000000880)}, {0x1, &(0x7f00000008c0)=0x6, 0x2}, {0x10000, &(0x7f0000000900)=0x9f, 0x82}, {0x6, &(0x7f0000000940)=0x8, 0x82}, {0x81, &(0x7f0000000980)=0x80, 0x82}, {0x8001, &(0x7f00000009c0)=0x9, 0x82}, {0x7, &(0x7f0000000a00)=0x9, 0x82}, {0x4, &(0x7f0000000a40)=0x4}, {0x2, &(0x7f0000000a80)=0x8, 0x82}, {0x1, &(0x7f0000000ac0)=0x53, 0x82}, {0xd790, &(0x7f0000000b00)=0x9, 0x2}, {0x9, &(0x7f0000000b40)=0x9cb, 0x82}, {0xbfb5, &(0x7f0000000b80)=0x7, 0x82}, {0x40, &(0x7f0000000bc0)=0xcf, 0x2}, {0x7, &(0x7f0000000c00)=0x53, 0x82}, {0x5, &(0x7f0000000c40)=0x9f7, 0x2}, {0x4, &(0x7f0000000c80)=0xff, 0x82}, {0x2092, &(0x7f0000000cc0), 0x82}, {0x9, &(0x7f0000000d00)=0x2, 0x82}, {0x8001, &(0x7f0000000d40)=0x349, 0x2}, {0x5, &(0x7f0000000d80)=0xffffffffffffff81, 0x2}, {0x1, &(0x7f0000000dc0)=0x18000000000000, 0x82}, {0x9, &(0x7f0000000e00)=0x3, 0x82}, {0xd, &(0x7f0000000e40)=0x4, 0x82}, {0x1, &(0x7f0000000e80)=0x6, 0x82}, {0x5, &(0x7f0000000ec0)=0x5, 0x2}, {0x5, &(0x7f0000000f00)=0x1, 0x2}, {0x0, &(0x7f0000000f40)=0x7, 0x2}, {0x2, &(0x7f0000000f80)=0x96, 0x82}, {0x1f, &(0x7f0000000fc0)=0x3, 0x2}, {0x71, &(0x7f0000001000)=0x4, 0x2}, {0x7, &(0x7f0000001040)=0x8, 0x82}, {0xa, &(0x7f0000001080)=0xa84, 0x2}, {0x6, &(0x7f00000010c0)=0x5, 0x82}, {0x588, &(0x7f0000001100)=0x54, 0x82}, {0x5, &(0x7f0000001140)=0x9, 0x82}, {0x3, &(0x7f0000001180)=0x7, 0x2}, {0x7, &(0x7f00000011c0)=0xe02a, 0x82}, {0x1, &(0x7f0000001200)=0x7f, 0x82}, {0x9, &(0x7f0000001240)=0x2, 0x2}, {0x5de9, &(0x7f0000001280)=0xf, 0x82}], 0x43, 0x0, 0x0, 0x0) 11m24.474409294s ago: executing program 38 (id=844): syz_open_dev$vim2m(0x0, 0x0, 0x2) geteuid() syz_open_dev$evdev(0x0, 0x855, 0x105200) getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x8000) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 11m22.844053001s ago: executing program 39 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x3, {0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00', 0x7}}}, 0x32) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="480f858a281bbc2a454880887a4c925d644b075d54608a73bbbd1727ef19ee8e10c51bd834a347e0ada80bf298348c4abf91ff1a63f9759baaa5fcad62e9fe56f3a61219a9a0275f124bac0a62b16556ffa7a189c94a6b460fb4f7b74b865e3b49640a768fe54a6b678f0f3211ebc51b4eb33ae4f5f469dfaca0a5719cbc9bcb2bf8610aabdcf63952ed882688e1b5f44be181462808bdfc29a1beb586de0ee0b7e17ab50943383b90848fc57dbb31938835a52e718205b11b92eb9afb090166d0e764ebd43465d1287928d7715f007b023a34242b59ebfae833ecd51559f2cce8c8fbc47a27", @ANYRES64=0x0], 0x20) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r4, &(0x7f0000000500)="0600000000000000010000000701000000000000000000006c733100"/104, 0x68) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYBLOB="3f06000088"], 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x8, 0x3, 0x268, 0x0, r4}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x4b3c, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x25, 0x3, 0x7}]}, 0x10) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f00000020c0)=""/4116, &(0x7f00000003c0)=0x1037) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000000200)=0x2) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a44000000060a030400000000000000000a0000010900010073797a3100000000100004800c000180080001006e61740009000200da597a3200000000050007404d000000140000001100ffea996f0000000000000a00000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) syz_open_dev$tty1(0xc, 0x4, 0x1) 11m21.395943243s ago: executing program 40 (id=846): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000000200)={0xb, 0x0, 0x80000}, 0x20) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000002000000732ac0fe00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="b4"}], 0x11, 0xfa94, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a903000000000000002330164cf023df", 0x10}], 0x1, &(0x7f0000001040), 0x0, 0x40d4}], 0x1, 0x80001) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x6f76, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) 9m5.180210199s ago: executing program 41 (id=861): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$pptp(0x18, 0x1, 0x2) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @multicast2}}, 0x1e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) ptrace(0x10, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)="20002e2f202031343734383336342320010000000000009fb4c31fe6f700203020300a", 0x23) 8m13.972383907s ago: executing program 9 (id=957): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xfc, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc014}, 0x4090) 8m13.699561259s ago: executing program 9 (id=958): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 8m13.441637838s ago: executing program 9 (id=959): io_setup(0x1, &(0x7f0000000000)=0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x2fa, r1, 0x0, 0x0, 0x8, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0xee00) r4 = socket$netlink(0x10, 0x3, 0x11) r5 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127\xae0.0.1\x00', 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 8m12.593805639s ago: executing program 9 (id=962): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002600)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r2, @ANYBLOB="40a0d7446580d4d5f5edd09561c7facb6f305e73a5794f8cfc78e8fddf7460a686961461a9ca53ca61565826179ea82cb8226fdb8563a90908ecf2a27a500eefe3ab5e726f31995757752522d9ac511e1d7f3a054a95b404a5b061ff52a6e327269a22d4a2e1372ee6c51e98d67876fad9ed733357c318510707a065313da13696ec63180cc01b133be98a208e072a4c6c5f393f209d5cad3a50d4dc4ef14763d4570b318a2701af7a885ae68e5209b76be49aa592481caeffb2905c3af79154f1b582cc420e5ef145d7d0bd9e44033f100436377179d3a16d87787750d2cbf082aca48ee4e6791e", @ANYRESDEC=r0, @ANYRES8=r1], 0x94}, 0x1, 0x0, 0x0, 0x8400}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff5}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x90, 0x17, @generic=0x5, 0x5, 0x10}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x294}, &(0x7f0000000280)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0xb4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xb4}}, 0x0) 8m10.996065771s ago: executing program 9 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="9fffe1a87d"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7f, 0x7, 0x1, {0x22, 0x744}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xc3}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x0, 0x28, 0x0, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x8a, &(0x7f00000004c0)=@string={0x8a, 0x3, "b2369795e1a8157df86a9cf04cf13968b79115bddc0d780d931558023df321745598846898a4c3f7aaab59f5dcca29671ae1e8bcd8739776888eac269b018dd933ae88e5d1f85b95ba082a610e35f083776e64bf220f79bc57f0797a1ef2d29883fd57e259f6200d8edb2aaa847ae78dead5314b0620a136b93c5c1e0db6a6d3fb1ea9642d377bec"}}, {0x87, &(0x7f0000000400)=@string={0x87, 0x3, "e0d3ed76e95e207616638c3ee4030f436ccf3beb546de7a541dc0f594a3b24abd888c39d4978641b0eff7a953b90be9786fb8831b7ff9e0aa696ee35153183c5a5a460e47d51f9a4690d46e940f2881fa084fa234c6fa485e5f5f32313fcfe5bab458c45ece43fd5717d577c8a5a3072de50de58b18d905a3c4cc6742e754a8e284bce0239"}}]}) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r4, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x8, &(0x7f00000005c0)='\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x0, 0x2, "be9ca4877780b97411c9fa58f53ad3817f189b47f454139fe65a0baa4dfdf9e89af3e936b7d6ad6db59f87a0902368335a95243f6fb644fe0061edbd2955f78a4eb418e1decae29400ac7ce51860092c84b0cada37ccb0088ed6d3"}, 0x6b) 7m59.535867618s ago: executing program 9 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4400) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) mlockall(0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) 7m54.235606831s ago: executing program 42 (id=964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x100001, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x28008004) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m44.489380054s ago: executing program 43 (id=966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4400) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) mlockall(0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) 6m18.638351116s ago: executing program 1 (id=996): write(0xffffffffffffffff, &(0x7f00000000c0)="984345fd2bd1f18100faf834d40d76be307058cb044334e4b27908cace6d585be4961f0f7a47f26fa977c2e6d1ab9fd687fe4edea582b15cd4d3341921bd976b119fd1", 0x43) r0 = epoll_create1(0x80000) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x40) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x80000001}) 6m18.055806323s ago: executing program 3 (id=997): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r1, 0x400, 0x70bd3a, 0x8000, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000d5}, 0x20004010) 6m17.759570403s ago: executing program 3 (id=999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0xf5, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4) 6m17.709281674s ago: executing program 1 (id=1000): r0 = landlock_create_ruleset(&(0x7f0000000040), 0x30, 0x0) landlock_restrict_self(r0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4"]}, 0xe2) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a8197c0479df99720c9f9d0a8093c947d", 0x21, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = gettid() r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) tkill(r4, 0x38) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket(0x1e, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/337], 0x148}, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000100)={0x2017be01}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x8d}]}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'nr0\x00'}) r12 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r12, r2}, &(0x7f00000000c0)=""/76, 0x4c, 0x0) r13 = dup2(r8, r0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r14, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={r15, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f00000007c0)={r15, 0x1000, "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"}, &(0x7f0000001800)=0x1008) 6m17.328038859s ago: executing program 0 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) read$sequencer(0xffffffffffffffff, &(0x7f0000000940)=""/167, 0xa7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000900)=0x61) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000000203010300400000002e080000000400002708000540000000020900020000000000d281b0ac"], 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x884) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000100007800c0001800800014000001c0205000500020000000500010006000000bacd41cbe54a6ea70f11967bf34172a3a1cf5d2e70a51a395bd35e739f6f8daca036d232d3291c96adcb80173764421a0444a2ee03f5524a9be20cae8fdeb0"], 0x5c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, 0xffffffffffffffff, &(0x7f0000000140)=0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x50}}, 0x0) 6m17.067168442s ago: executing program 1 (id=1002): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getgroups(0x400000000000005c, &(0x7f0000000040)) 6m16.466568366s ago: executing program 0 (id=1003): timer_create(0x4, &(0x7f00000000c0)={0x0, 0x5, 0x1}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x15, 0x4, @thr={&(0x7f0000000000)="88fac1d7fb122b454b52941dea37978fdcc3998ab2a694dee08404ee3d85c724ea136cadc16de3", &(0x7f0000000100)="729757e4cf285a3bdb84fc2cc41d1c96d0176e4eb1bcb5bf06044e9e07a60cc8bfddd9050b9984f4f3024b009b4578d2c0d6d0a4ca2356580e442f77432e7a334f3fbee1fa7dd73dd66665eb8e7604a0ead593d84f00a061a0254d3e75cf2ac1e05e16c75dc415cb"}}, &(0x7f0000000200)=0x0) timer_gettime(r1, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x9, r2, 0x7f, 0x9) syz_io_uring_setup(0x336e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3010, 0x3}, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d7000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) 6m16.229165987s ago: executing program 3 (id=1004): r0 = epoll_create1(0x80000) r1 = socket(0x0, 0x0, 0x346) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) write$tun(r3, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='debugfs\x00', 0x1214040, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 6m15.205550947s ago: executing program 1 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = mq_open(&(0x7f0000000780)='&\x00', 0x40, 0x101, 0x0) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x3b, 0x1, @thr={0x0, 0x0}}) read(r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000100)={0x3e, 0x5, 0x3b7d68cf}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = fanotify_init(0x8, 0x1000) fanotify_mark(r2, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) 6m14.928525188s ago: executing program 0 (id=1006): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) socket$nl_netfilter(0x10, 0x3, 0xc) 6m14.698331826s ago: executing program 5 (id=967): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0xfd) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES64=r2], 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x39, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46d01, 0x0) syz_open_dev$I2C(0x0, 0xffffffffffffffff, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) write(r3, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 6m14.608065428s ago: executing program 0 (id=1007): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x29, &(0x7f0000000280)=[{0x8, '\x00', @data=0x89, 0x2}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="64e09f262c7738828c1be71ee8b1156095d5917ac4e4e04096e7da5cbf256ed21fe7506a624e3b1089d90a25966a3012a75196a3f67b20b2c60fa1270d62f6cd3dfca9a82bbe59224c8da497af4129fb0620127c73ed", 0x56}], 0x1, 0x3) 6m14.400670361s ago: executing program 1 (id=1008): write(0xffffffffffffffff, &(0x7f00000000c0)="984345fd2bd1f18100faf834d40d76be307058cb044334e4b27908cace6d585be4961f0f7a47f26fa977c2e6d1ab9fd687fe4edea582b15cd4d3341921bd976b119fd1", 0x43) r0 = epoll_create1(0x80000) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x40) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x80000001}) 6m14.347974808s ago: executing program 0 (id=1009): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf3ffffff}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x1000000, [{0xffffffff, 0x9}]}, 0xc, 0x2) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000100"/28], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpgid(0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) 6m14.30475547s ago: executing program 3 (id=1010): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000000)) 6m14.178629635s ago: executing program 0 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="9fffe1a87d"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7f, 0x7, 0x1, {0x22, 0x744}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xc3}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x0, 0x28, 0x0, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x8a, &(0x7f00000004c0)=@string={0x8a, 0x3, "b2369795e1a8157df86a9cf04cf13968b79115bddc0d780d931558023df321745598846898a4c3f7aaab59f5dcca29671ae1e8bcd8739776888eac269b018dd933ae88e5d1f85b95ba082a610e35f083776e64bf220f79bc57f0797a1ef2d29883fd57e259f6200d8edb2aaa847ae78dead5314b0620a136b93c5c1e0db6a6d3fb1ea9642d377bec"}}, {0xa8, &(0x7f0000000400)=@string={0xa8, 0x3, "e0d3ed76e95e207616638c3ee4030f436ccf3beb546de7a541dc0f594a3b24abd888c39d4978641b0eff7a953b90be9786fb8831b7ff9e0aa696ee35153183c5a5a460e47d51f9a4690d46e940f2881fa084fa234c6fa485e5f5f32313fcfe5bab458c45ece43fd5717d577c8a5a3072de50de58b18d905a3c4cc6742e754a8e284bce023949c96bfa1094a33370df21c1001911081c1bb9052750ee072e5e920fde3430d2ec"}}]}) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r4, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x8, &(0x7f00000005c0)='\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x0, 0x2, "be9ca4877780b97411c9fa58f53ad3817f189b47f454139fe65a0baa4dfdf9e89af3e936b7d6ad6db59f87a0902368335a95243f6fb644fe0061edbd2955f78a4eb418e1decae29400ac7ce51860092c84b0cada37ccb0088ed6d3"}, 0x6b) 6m14.036437744s ago: executing program 3 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) read$sequencer(0xffffffffffffffff, &(0x7f0000000940)=""/167, 0xa7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000900)=0x61) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000000203010300400000002e080000000400002708000540000000020900020000000000d281b0ac"], 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x884) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000100007800c0001800800014000001c0205000500020000000500010006000000bacd41cbe54a6ea70f11967bf34172a3a1cf5d2e70a51a395bd35e739f6f8daca036d232d3291c96adcb80173764421a0444a2ee03f5524a9be20cae8fdeb0"], 0x5c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, 0xffffffffffffffff, &(0x7f0000000140)=0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x50}}, 0x0) 6m13.944712628s ago: executing program 1 (id=1013): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getgroups(0x400000000000005c, &(0x7f0000000040)) 6m11.614252953s ago: executing program 3 (id=1014): timer_create(0x4, &(0x7f00000000c0)={0x0, 0x5, 0x1}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x15, 0x4, @thr={&(0x7f0000000000)="88fac1d7fb122b454b52941dea37978fdcc3998ab2a694dee08404ee3d85c724ea136cadc16de3", &(0x7f0000000100)="729757e4cf285a3bdb84fc2cc41d1c96d0176e4eb1bcb5bf06044e9e07a60cc8bfddd9050b9984f4f3024b009b4578d2c0d6d0a4ca2356580e442f77432e7a334f3fbee1fa7dd73dd66665eb8e7604a0ead593d84f00a061a0254d3e75cf2ac1e05e16c75dc415cb"}}, &(0x7f0000000200)=0x0) timer_gettime(r1, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x9, r2, 0x7f, 0x9) syz_io_uring_setup(0x336e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3010, 0x3}, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d7000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) 6m11.049906468s ago: executing program 5 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="9fffe1a87d"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7f, 0x7, 0x1, {0x22, 0x744}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xc3}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x0, 0x28, 0x0, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x8a, &(0x7f00000004c0)=@string={0x8a, 0x3, "b2369795e1a8157df86a9cf04cf13968b79115bddc0d780d931558023df321745598846898a4c3f7aaab59f5dcca29671ae1e8bcd8739776888eac269b018dd933ae88e5d1f85b95ba082a610e35f083776e64bf220f79bc57f0797a1ef2d29883fd57e259f6200d8edb2aaa847ae78dead5314b0620a136b93c5c1e0db6a6d3fb1ea9642d377bec"}}, {0x9d, &(0x7f0000000400)=@string={0x9d, 0x3, "e0d3ed76e95e207616638c3ee4030f436ccf3beb546de7a541dc0f594a3b24abd888c39d4978641b0eff7a953b90be9786fb8831b7ff9e0aa696ee35153183c5a5a460e47d51f9a4690d46e940f2881fa084fa234c6fa485e5f5f32313fcfe5bab458c45ece43fd5717d577c8a5a3072de50de58b18d905a3c4cc6742e754a8e284bce023949c96bfa1094a33370df21c1001911081c1bb9052750"}}]}) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r4, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x8, &(0x7f00000005c0)='\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x0, 0x2, "be9ca4877780b97411c9fa58f53ad3817f189b47f454139fe65a0baa4dfdf9e89af3e936b7d6ad6db59f87a0902368335a95243f6fb644fe0061edbd2955f78a4eb418e1decae29400ac7ce51860092c84b0cada37ccb0088ed6d3"}, 0x6b) 5m56.97048147s ago: executing program 44 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="9fffe1a87d"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7f, 0x7, 0x1, {0x22, 0x744}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xc3}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x0, 0x28, 0x0, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x8a, &(0x7f00000004c0)=@string={0x8a, 0x3, "b2369795e1a8157df86a9cf04cf13968b79115bddc0d780d931558023df321745598846898a4c3f7aaab59f5dcca29671ae1e8bcd8739776888eac269b018dd933ae88e5d1f85b95ba082a610e35f083776e64bf220f79bc57f0797a1ef2d29883fd57e259f6200d8edb2aaa847ae78dead5314b0620a136b93c5c1e0db6a6d3fb1ea9642d377bec"}}, {0xa8, &(0x7f0000000400)=@string={0xa8, 0x3, "e0d3ed76e95e207616638c3ee4030f436ccf3beb546de7a541dc0f594a3b24abd888c39d4978641b0eff7a953b90be9786fb8831b7ff9e0aa696ee35153183c5a5a460e47d51f9a4690d46e940f2881fa084fa234c6fa485e5f5f32313fcfe5bab458c45ece43fd5717d577c8a5a3072de50de58b18d905a3c4cc6742e754a8e284bce023949c96bfa1094a33370df21c1001911081c1bb9052750ee072e5e920fde3430d2ec"}}]}) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r4, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x8, &(0x7f00000005c0)='\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x0, 0x2, "be9ca4877780b97411c9fa58f53ad3817f189b47f454139fe65a0baa4dfdf9e89af3e936b7d6ad6db59f87a0902368335a95243f6fb644fe0061edbd2955f78a4eb418e1decae29400ac7ce51860092c84b0cada37ccb0088ed6d3"}, 0x6b) 5m53.97997034s ago: executing program 45 (id=1013): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getgroups(0x400000000000005c, &(0x7f0000000040)) 5m52.54479992s ago: executing program 46 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="9fffe1a87d"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x7f, 0x7, 0x1, {0x22, 0x744}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xc3}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x0, 0x28, 0x0, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x8a, &(0x7f00000004c0)=@string={0x8a, 0x3, "b2369795e1a8157df86a9cf04cf13968b79115bddc0d780d931558023df321745598846898a4c3f7aaab59f5dcca29671ae1e8bcd8739776888eac269b018dd933ae88e5d1f85b95ba082a610e35f083776e64bf220f79bc57f0797a1ef2d29883fd57e259f6200d8edb2aaa847ae78dead5314b0620a136b93c5c1e0db6a6d3fb1ea9642d377bec"}}, {0x9d, &(0x7f0000000400)=@string={0x9d, 0x3, "e0d3ed76e95e207616638c3ee4030f436ccf3beb546de7a541dc0f594a3b24abd888c39d4978641b0eff7a953b90be9786fb8831b7ff9e0aa696ee35153183c5a5a460e47d51f9a4690d46e940f2881fa084fa234c6fa485e5f5f32313fcfe5bab458c45ece43fd5717d577c8a5a3072de50de58b18d905a3c4cc6742e754a8e284bce023949c96bfa1094a33370df21c1001911081c1bb9052750"}}]}) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}}, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r4, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000580)='fuseblk\x00', 0x8, &(0x7f00000005c0)='\x00') signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$PPPOEIOCDFWD(r7, 0xb101, 0x0) write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x0, 0x2, "be9ca4877780b97411c9fa58f53ad3817f189b47f454139fe65a0baa4dfdf9e89af3e936b7d6ad6db59f87a0902368335a95243f6fb644fe0061edbd2955f78a4eb418e1decae29400ac7ce51860092c84b0cada37ccb0088ed6d3"}, 0x6b) 5m50.267415903s ago: executing program 47 (id=1014): timer_create(0x4, &(0x7f00000000c0)={0x0, 0x5, 0x1}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x15, 0x4, @thr={&(0x7f0000000000)="88fac1d7fb122b454b52941dea37978fdcc3998ab2a694dee08404ee3d85c724ea136cadc16de3", &(0x7f0000000100)="729757e4cf285a3bdb84fc2cc41d1c96d0176e4eb1bcb5bf06044e9e07a60cc8bfddd9050b9984f4f3024b009b4578d2c0d6d0a4ca2356580e442f77432e7a334f3fbee1fa7dd73dd66665eb8e7604a0ead593d84f00a061a0254d3e75cf2ac1e05e16c75dc415cb"}}, &(0x7f0000000200)=0x0) timer_gettime(r1, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x9, r2, 0x7f, 0x9) syz_io_uring_setup(0x336e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3010, 0x3}, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d7000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) 19.455369212s ago: executing program 4 (id=1499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@newtaction={0x178, 0x1c, 0x1, 0x1, 0x0, {0x0, 0x0, 0x1300}, [{0x164, 0x1, [@m_xt={0x130, 0x19, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xb7, 0x6, "8cde5b542584ae891569684c3e30397af858ac1d4447cfab5ab37fe00c4c7638960059c174353c8ae5d3fd4d6af5593c03269f62866c0ff8dbab7e81f0bd87ff342d51c2a1ce516b9300d0f843ed91b873f0e92a8d5c66c0598c584f47fae4948c34e2a4c36eb7b632d34180628cb6180a9ea64224702da496bfe3ebeabc85d0042dbdf12ab3a3ffb4429c662db94a2bf543ebdcc69b4260869fded0669bacbe7bed9e75cd9d0bc391e65663e241f0588fc76a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x30, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x178}}, 0x0) 19.145750801s ago: executing program 4 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141d82) 15.6402959s ago: executing program 4 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1) sched_setscheduler(r0, 0x4, &(0x7f0000000180)=0x9) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071101b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) write$P9_RGETLOCK(r4, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) 14.916561949s ago: executing program 2 (id=1508): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_adjtime(0x5, &(0x7f0000000000)={0xe, 0x80, 0xfd, 0x5, 0x6, 0x7, 0x2, 0xe355, 0x5ae0, 0x52, 0x6, 0x6, 0x3dd2, 0xca, 0x101, 0x7f, 0x73e, 0xffffffffffffffff, 0x8, 0x7fffffff, 0x9, 0x818, 0x100000000, 0x7ff, 0x9, 0x5}) 14.387503812s ago: executing program 2 (id=1510): openat$kvm(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00 \x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x3, 0x0, 0x0, 0x3, 0x7fffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x40000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000340), 0xfffffffffffffeff, 0xc000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x400c040) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/195, 0xc3, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000005c0)=""/134, 0x86, 0x0, 0x1, 0x2}}, 0x48) 12.997619121s ago: executing program 8 (id=1511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) r1 = gettid() mknod(0x0, 0x801, 0x40) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x2f, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0}], 0x2}}], 0x1, 0x2004000) 11.731764252s ago: executing program 6 (id=1512): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) clock_nanosleep(0x2, 0x3f, &(0x7f0000000080)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x109000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) writev(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000e0000002000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000f5ff1810be1a000000000500000000000000000000000000000008000000000000000000000000000000fdffffffffffffff900f00000000000000000000000000000000000000000000000000000000000000100000b86b6e0000010001000000000c001500"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88}, 0x4) 11.439665301s ago: executing program 4 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 11.431519381s ago: executing program 2 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x103400) r2 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x14, 0x1, 0x4f, 0x1bbf}}], 0x18}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {0x0, 0x0, 0x0, r3}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20000040) 8.911415165s ago: executing program 4 (id=1516): r0 = socket(0x10, 0x803, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x440000) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x1, 0x1}}) 8.667383762s ago: executing program 7 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="b1", 0x1}, {&(0x7f0000000240)="638ba2baca5cd4d5b02ee71502fe72966d3ead16a74310ff9405f27fd60d6f78cd", 0x21}], 0x2) 8.448553693s ago: executing program 8 (id=1518): socket$kcm(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x100) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8.073400449s ago: executing program 6 (id=1519): unshare(0x4000600) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x9000001d}) close(0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x609002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0xf, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x0, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0xa00}, 0x1) 8.0339274s ago: executing program 2 (id=1520): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xb, 0x8, 0xfe, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x9, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x7, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0xda6, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0x2, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c8, 0x1, 0xfffff000, 0x7, 0x3, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.961068231s ago: executing program 8 (id=1521): socket(0x10, 0x803, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x440000) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 7.792630628s ago: executing program 6 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x5, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000814) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x200000, 0x62) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 7.40028385s ago: executing program 6 (id=1523): r0 = epoll_create1(0x80000) r1 = socket(0x0, 0x0, 0x346) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) write$tun(r3, &(0x7f0000000380)=ANY=[], 0xfdef) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 7.134322835s ago: executing program 8 (id=1524): openat$kvm(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00 \x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x3, 0x0, 0x0, 0x3, 0x7fffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x40000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000340), 0xfffffffffffffeff, 0xc000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x400c040) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/195, 0xc3, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, {&(0x7f00000005c0)=""/134, 0x86, 0x0, 0x1, 0x2}}, 0x48) 6.825487773s ago: executing program 2 (id=1525): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf25050018"], 0x38}}, 0x40408c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='usbip-vudc', 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000980)={0x1, 0x0, [{0x40000118, 0x0, 0x5}]}) r4 = syz_open_dev$loop(&(0x7f0000000080), 0xff, 0x80000) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x8000000000000001, 0x0, 0x6, 0x9, 0xd, "fc73e6277a1036cca1ed31fc1f31219e66b5a3f36a9709bb5cf2245ec752a2b4dad735b83a0ce2873a19c28d0a08a9273d730e7ed33a585e19a2f504c1fc25f3", "44309027f1a076e12b6cdba61cc3d701cdf89fbacc6acb2a661226661f1b069cbefacc54db0e0c9b784716aaca6e76b6545490a6c05c2314607e891469e03345", "c3046131751e142d1def7063bdc949982be286646156762a37f45cb2e06452d3", [0xfffffffffffffffb, 0x5]}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) 6.656829151s ago: executing program 6 (id=1526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 5.091531635s ago: executing program 6 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141d82) 4.416132841s ago: executing program 7 (id=1528): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, r0, 0x1}}, 0x18) 4.132521801s ago: executing program 7 (id=1529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) clock_nanosleep(0x2, 0x3f, &(0x7f0000000080)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x109000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) writev(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000e0000002000000000000000000000000ac1414bb00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000f5ff1810be1a000000000500000000000000000000000000000008000000000000000000000000000000fdffffffffffffff900f00000000000000000000000000000000000000000000000000000000000000100000b86b6e0000010001000000000c001500"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88}, 0x4) 4.078311463s ago: executing program 8 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141d82) 2.346667926s ago: executing program 8 (id=1531): socket$kcm(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x100) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.320001886s ago: executing program 7 (id=1532): unshare(0x4000600) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x9000001d}) close(0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x609002, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0xa00}, 0x1) 2.287761176s ago: executing program 2 (id=1533): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x4, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="000000000100"/28], 0x48) mount(&(0x7f0000000040)=@filename='configfs\x00', 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='10', 0x2) r8 = openat(0xffffffffffffff9c, 0x0, 0x802, 0x20) write(r8, &(0x7f0000000200)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r9, &(0x7f0000000280)='0', 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x40000022, 0x0, 0xfffffffffffffff2}]}) getrlimit(0x0, &(0x7f0000000340)) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000280)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.672652335s ago: executing program 7 (id=1534): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.318431521s ago: executing program 7 (id=1535): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = syz_io_uring_setup(0xd3d, &(0x7f0000000b00)={0x0, 0x2, 0x100, 0x2, 0xec}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = timerfd_create(0x0, 0x800) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f00000001c0), 0x1, 0x40}) syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x1000000, 0x2a, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) syz_ublk_add_dev(r1, r6, r3, r4, &(0x7f0000000540)={0x2e, 0xcb8045a30b577d09, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xc2f, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x108}}}, &(0x7f0000000340)) r7 = mmap$IORING_OFF_PBUF_RING(0x0, 0x4, 0x4, 0x30, 0xffffffffffffffff, 0x8706b886) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x20, 0x0, 0x0, 0x0, 0x12345, 0x2, {0x8}, 0x1, {0x0, r8}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1) r11 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r11, 0x1, 0x23, &(0x7f0000000040), 0x4) r12 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r10, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r12}) r13 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r13, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) ioctl$KVM_GET_XSAVE(r13, 0x9000aea4, &(0x7f0000000b80)) 0s ago: executing program 4 (id=1536): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x2e) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) write(r1, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n', 0x1e) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @tick=0x65757102, 0x0, {0x0, 0x9}, 0x67, 0x1}) kernel console output (not intermixed with test programs): ocess `syz.8.1125'. [ 967.445835][T13446] FAULT_INJECTION: forcing a failure. [ 967.445835][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 967.445887][T13446] CPU: 1 UID: 0 PID: 13446 Comm: syz.8.1125 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 967.445964][T13446] Tainted: [L]=SOFTLOCKUP [ 967.445985][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.446005][T13446] Call Trace: [ 967.446014][T13446] [ 967.446033][T13446] dump_stack_lvl+0xe8/0x150 [ 967.446112][T13446] should_fail_ex+0x46b/0x600 [ 967.446183][T13446] should_failslab+0xa8/0x100 [ 967.446213][T13446] kmem_cache_alloc_noprof+0xa4/0x660 [ 967.446291][T13446] ? skb_clone+0x212/0x3a0 [ 967.446333][T13446] ? skb_clone+0x212/0x3a0 [ 967.446366][T13446] skb_clone+0x212/0x3a0 [ 967.446425][T13446] __netlink_deliver_tap+0x413/0x860 [ 967.446502][T13446] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.446529][T13446] netlink_deliver_tap+0x19c/0x1b0 [ 967.446555][T13446] netlink_unicast+0x7b8/0x990 [ 967.446633][T13446] netlink_sendmsg+0x813/0xb40 [ 967.446684][T13446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.446711][T13446] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 967.446785][T13446] ? __kernel_text_address+0xd/0x30 [ 967.446834][T13446] ? unwind_get_return_address+0x4d/0x90 [ 967.446861][T13446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.446918][T13446] sock_sendmsg_nosec+0x13a/0x180 [ 967.446990][T13446] ____sys_sendmsg+0x565/0x870 [ 967.447012][T13446] ? __might_fault+0xaf/0x130 [ 967.447061][T13446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.447148][T13446] ? import_iovec+0x73/0xa0 [ 967.447175][T13446] ___sys_sendmsg+0x2a5/0x360 [ 967.447195][T13446] ? __lock_acquire+0x683/0x2ce0 [ 967.447258][T13446] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.447341][T13446] ? __fget_files+0x2a/0x420 [ 967.447393][T13446] ? __fget_files+0x3a8/0x420 [ 967.447481][T13446] __x64_sys_sendmsg+0x1b7/0x290 [ 967.447509][T13446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.447574][T13446] do_syscall_64+0x166/0x520 [ 967.447640][T13446] ? trace_irq_disable+0x3b/0x140 [ 967.447665][T13446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.447689][T13446] ? clear_bhb_loop+0x70/0xc0 [ 967.447760][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.447807][T13446] RIP: 0033:0x7f300552e0d9 [ 967.447829][T13446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.447849][T13446] RSP: 002b:00007f3003786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.447896][T13446] RAX: ffffffffffffffda RBX: 00007f30057b5fa0 RCX: 00007f300552e0d9 [ 967.447942][T13446] RDX: 0000000004004800 RSI: 0000200000000300 RDI: 0000000000000004 [ 967.447970][T13446] RBP: 00007f3003786090 R08: 0000000000000000 R09: 0000000000000000 [ 967.447985][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.447998][T13446] R13: 00007f30057b6038 R14: 00007f30057b5fa0 R15: 00007ffeff9c0cc8 [ 967.448059][T13446] [ 967.558677][ T6806] usb 5-1: GET_CAPABILITIES returned 0 [ 967.558721][ T6806] usbtmc 5-1:16.0: can't read capabilities [ 967.775975][ T6806] usb 5-1: USB disconnect, device number 15 [ 968.041714][ T38] audit: type=1400 audit(1787506619.402:1253): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=13451 comm="syz.2.1126" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 970.008393][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1132'. [ 970.030504][T13477] sctp: [Deprecated]: syz.8.1132 (pid 13477) Use of int in maxseg socket option. [ 970.030504][T13477] Use struct sctp_assoc_value instead [ 970.592390][T10462] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 970.756482][T10462] usb 8-1: Using ep0 maxpacket: 8 [ 970.757320][T10462] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 970.758723][T10462] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 970.758776][T10462] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 970.758800][T10462] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 970.758825][T10462] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 970.758848][T10462] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.758890][T10462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.908283][ T6162] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 971.232112][T10462] usb 8-1: usb_control_msg returned -32 [ 971.232163][T10462] usbtmc 8-1:16.0: can't read capabilities [ 971.240137][ T6162] usb 7-1: Using ep0 maxpacket: 16 [ 971.241014][ T6162] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 971.277823][ T6162] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 971.277850][ T6162] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 971.278927][ T6162] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 971.278958][ T6162] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 971.303849][ T6162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 971.303873][ T6162] usb 7-1: SerialNumber: syz [ 971.385036][T13479] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 971.388921][T10462] usb 8-1: USB disconnect, device number 24 [ 971.407701][ T6162] cdc_acm 7-1:1.0: skipping garbage [ 971.420467][ T6162] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 971.815290][T13479] [U] 2 [ 971.830764][ T5715] usb 7-1: USB disconnect, device number 15 [ 972.089396][T13497] FAULT_INJECTION: forcing a failure. [ 972.089396][T13497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.089431][T13497] CPU: 0 UID: 0 PID: 13497 Comm: syz.2.1135 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 972.089460][T13497] Tainted: [L]=SOFTLOCKUP [ 972.089467][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.089478][T13497] Call Trace: [ 972.089486][T13497] [ 972.089495][T13497] dump_stack_lvl+0xe8/0x150 [ 972.089527][T13497] should_fail_ex+0x46b/0x600 [ 972.089563][T13497] _copy_to_user+0x31/0xb0 [ 972.089587][T13497] simple_read_from_buffer+0xe1/0x170 [ 972.089619][T13497] proc_fail_nth_read+0x1be/0x230 [ 972.089653][T13497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.089694][T13497] ? rw_verify_area+0x250/0x4d0 [ 972.089724][T13497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.089753][T13497] vfs_read+0x219/0xa90 [ 972.089787][T13497] ? __pfx_vfs_read+0x10/0x10 [ 972.089817][T13497] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 972.089845][T13497] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 972.089872][T13497] ? mutex_lock_nested+0x152/0x1d0 [ 972.089891][T13497] ? fdget_pos+0x252/0x320 [ 972.089925][T13497] ksys_read+0x156/0x270 [ 972.089973][T13497] ? __pfx_ksys_read+0x10/0x10 [ 972.090034][T13497] do_syscall_64+0x166/0x520 [ 972.090063][T13497] ? trace_irq_disable+0x3b/0x140 [ 972.090087][T13497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.090110][T13497] ? clear_bhb_loop+0x70/0xc0 [ 972.090138][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.090161][T13497] RIP: 0033:0x7efc3a57e90e [ 972.090182][T13497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.090200][T13497] RSP: 002b:00007efc38815fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.090224][T13497] RAX: ffffffffffffffda RBX: 00007efc388166c0 RCX: 00007efc3a57e90e [ 972.090241][T13497] RDX: 000000000000000f RSI: 00007efc388160a0 RDI: 0000000000000003 [ 972.090256][T13497] RBP: 00007efc38816090 R08: 0000000000000000 R09: 0000000000000000 [ 972.090270][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.090283][T13497] R13: 00007efc3a846038 R14: 00007efc3a845fa0 R15: 00007ffe31e75568 [ 972.090319][T13497] [ 972.187623][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1136'. [ 972.199886][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1136'. [ 972.891975][ T5715] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 973.030697][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 973.035104][ T5715] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 973.037855][ T5715] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 973.037881][ T5715] usb 3-1: config 0 has no interface number 0 [ 973.037914][ T5715] usb 3-1: too many endpoints for config 0 interface 60 altsetting 88: 223, using maximum allowed: 30 [ 973.037955][ T5715] usb 3-1: config 0 interface 60 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 973.037984][ T5715] usb 3-1: config 0 interface 60 has no altsetting 0 [ 973.116869][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.116896][ T5715] usb 3-1: Product: syz [ 973.116910][ T5715] usb 3-1: Manufacturer: syz [ 973.116925][ T5715] usb 3-1: SerialNumber: syz [ 973.188287][ T5715] usb 3-1: config 0 descriptor?? [ 973.337093][T13507] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 973.436750][ T38] audit: type=1400 audit(1787506625.061:1254): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=13503 comm="syz.4.1138" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 973.476342][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.516141][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.561354][ T5715] visor 3-1:0.60: Sony Clie 3.5 converter detected [ 973.561811][ T5715] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 973.561947][ T5715] visor 3-1:0.60: probe with driver visor failed with error -71 [ 973.600795][ T5715] usb 3-1: USB disconnect, device number 9 [ 974.383257][ T6806] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 976.009431][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 976.009496][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.022834][ T6806] usb 7-1: Using ep0 maxpacket: 8 [ 976.023667][ T6806] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 976.029601][ T6806] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 976.029653][ T6806] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 976.029675][ T6806] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 976.029697][ T6806] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 976.029720][ T6806] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 976.029758][ T6806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.312026][ T6806] usb 7-1: GET_CAPABILITIES returned 0 [ 976.312078][ T6806] usbtmc 7-1:16.0: can't read capabilities [ 976.507709][ T5715] usb 7-1: USB disconnect, device number 16 [ 977.555255][ T5594] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 977.699169][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 977.700206][T13563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1151'. [ 977.717704][ T5594] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 977.772827][ T5594] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.772854][ T5594] usb 8-1: Product: syz [ 977.772869][ T5594] usb 8-1: Manufacturer: syz [ 977.772884][ T5594] usb 8-1: SerialNumber: syz [ 977.854863][ T5594] usb 8-1: config 0 descriptor?? [ 978.089961][ T5594] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 978.434540][T13571] [U] [ 979.008419][T13581] dump_stack_lvl+0xe8/0x150 [ 979.008454][T13581] should_fail_ex+0x46b/0x600 [ 979.008491][T13581] _copy_to_user+0x31/0xb0 [ 979.008515][T13581] simple_read_from_buffer+0xe1/0x170 [ 979.008547][T13581] proc_fail_nth_read+0x1be/0x230 [ 979.008582][T13581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 979.008617][T13581] ? rw_verify_area+0x250/0x4d0 [ 979.008649][T13581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 979.008680][T13581] vfs_read+0x219/0xa90 [ 979.008748][T13581] ? __pfx_vfs_read+0x10/0x10 [ 979.008781][T13581] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 979.008821][T13581] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 979.008850][T13581] ? mutex_lock_nested+0x152/0x1d0 [ 979.008883][T13581] ? fdget_pos+0x252/0x320 [ 979.008936][T13581] ksys_read+0x156/0x270 [ 979.008970][T13581] ? __pfx_ksys_read+0x10/0x10 [ 979.008999][T13581] ? fput+0xa0/0xd0 [ 979.009034][T13581] do_syscall_64+0x166/0x520 [ 979.009063][T13581] ? trace_irq_disable+0x3b/0x140 [ 979.009086][T13581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.009109][T13581] ? clear_bhb_loop+0x70/0xc0 [ 979.009138][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.009160][T13581] RIP: 0033:0x7efc3a57e90e [ 979.009181][T13581] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 979.009201][T13581] RSP: 002b:00007efc38815fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 979.009224][T13581] RAX: ffffffffffffffda RBX: 00007efc388166c0 RCX: 00007efc3a57e90e [ 979.009241][T13581] RDX: 000000000000000f RSI: 00007efc388160a0 RDI: 0000000000000004 [ 979.009256][T13581] RBP: 00007efc38816090 R08: 0000000000000000 R09: 0000000000000000 [ 979.009270][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.009283][T13581] R13: 00007efc3a846038 R14: 00007efc3a845fa0 R15: 00007ffe31e75568 [ 979.009317][T13581] [ 979.193646][ T5715] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 979.337492][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 979.338174][ T5715] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 979.339400][ T5715] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 979.339451][ T5715] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.339475][ T5715] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.339500][ T5715] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 979.339524][ T5715] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.339566][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.628803][ T5715] usb 5-1: usb_control_msg returned -32 [ 979.628850][ T5715] usbtmc 5-1:16.0: can't read capabilities [ 979.703973][ T5715] usb 5-1: USB disconnect, device number 16 [ 985.547234][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1163'. [ 985.548043][T13616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1163'. [ 986.239452][T13636] FAULT_INJECTION: forcing a failure. [ 986.239452][T13636] name failslab, interval 1, probability 0, space 0, times 0 [ 986.239488][T13636] CPU: 0 UID: 0 PID: 13636 Comm: syz.6.1170 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 986.239516][T13636] Tainted: [L]=SOFTLOCKUP [ 986.239523][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.239535][T13636] Call Trace: [ 986.239555][T13636] [ 986.239564][T13636] dump_stack_lvl+0xe8/0x150 [ 986.239598][T13636] should_fail_ex+0x46b/0x600 [ 986.239635][T13636] should_failslab+0xa8/0x100 [ 986.239660][T13636] __kmalloc_cache_noprof+0xa0/0x6b0 [ 986.239683][T13636] ? __se_sys_mount+0x166/0x420 [ 986.239707][T13636] ? __se_sys_mount+0x166/0x420 [ 986.239732][T13636] ? memdup_user+0x99/0xd0 [ 986.239768][T13636] __se_sys_mount+0x166/0x420 [ 986.239799][T13636] ? __pfx___se_sys_mount+0x10/0x10 [ 986.239831][T13636] ? __x64_sys_mount+0x20/0xc0 [ 986.239859][T13636] do_syscall_64+0x166/0x520 [ 986.239884][T13636] ? trace_irq_disable+0x3b/0x140 [ 986.239905][T13636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.239926][T13636] ? clear_bhb_loop+0x70/0xc0 [ 986.239950][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.239988][T13636] RIP: 0033:0x7feae2aae0d9 [ 986.240009][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.240029][T13636] RSP: 002b:00007feae0d06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 986.240056][T13636] RAX: ffffffffffffffda RBX: 00007feae2d35fa0 RCX: 00007feae2aae0d9 [ 986.240072][T13636] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000000 [ 986.240088][T13636] RBP: 00007feae0d06090 R08: 0000200000000440 R09: 0000000000000000 [ 986.240103][T13636] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000001 [ 986.240117][T13636] R13: 00007feae2d36038 R14: 00007feae2d35fa0 R15: 00007ffd4d7df5c8 [ 986.240151][T13636] [ 987.394078][T11903] Bluetooth: hci2: command 0x0406 tx timeout [ 987.436231][T11906] Bluetooth: hci1: command 0x0406 tx timeout [ 987.436293][T11903] Bluetooth: hci3: command 0x0406 tx timeout [ 987.982161][T13650] FAULT_INJECTION: forcing a failure. [ 987.982161][T13650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.982212][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.6.1172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 987.982244][T13650] Tainted: [L]=SOFTLOCKUP [ 987.982252][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.982277][T13650] Call Trace: [ 987.982285][T13650] [ 987.982295][T13650] dump_stack_lvl+0xe8/0x150 [ 987.982331][T13650] should_fail_ex+0x46b/0x600 [ 987.982370][T13650] _copy_to_user+0x31/0xb0 [ 987.982395][T13650] binder_ioctl_write_read+0x978d/0xa5d0 [ 987.982551][T13650] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 987.982610][T13650] ? stack_depot_save_flags+0x33/0x7f0 [ 987.982645][T13650] ? __lock_acquire+0x683/0x2ce0 [ 987.982676][T13650] ? do_raw_spin_lock+0x12b/0x2f0 [ 987.982732][T13650] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 987.982763][T13650] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 987.982791][T13650] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 987.982817][T13650] ? reacquire_held_locks+0x104/0x190 [ 987.982853][T13650] ? rt_spin_unlock+0x159/0x200 [ 987.982883][T13650] ? binder_get_thread+0x176/0x6d0 [ 987.982911][T13650] ? binder_ioctl+0x189/0x1b10 [ 987.982941][T13650] binder_ioctl+0x420/0x1b10 [ 987.982970][T13650] ? tomoyo_path_number_perm+0x219/0x5f0 [ 987.983001][T13650] ? tomoyo_path_number_perm+0x219/0x5f0 [ 987.983036][T13650] ? do_vfs_ioctl+0x1184/0x1550 [ 987.983057][T13650] ? __pfx_binder_ioctl+0x10/0x10 [ 987.983086][T13650] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 987.983107][T13650] ? __pfx_smack_log+0x10/0x10 [ 987.983143][T13650] ? smk_tskacc+0x2fb/0x370 [ 987.983173][T13650] ? smack_file_ioctl+0x2c4/0x370 [ 987.983205][T13650] ? __pfx_smack_file_ioctl+0x10/0x10 [ 987.983244][T13650] ? __fget_files+0x2a/0x420 [ 987.983289][T13650] ? __fget_files+0x3a8/0x420 [ 987.983317][T13650] ? __fget_files+0x2a/0x420 [ 987.983349][T13650] ? bpf_lsm_file_ioctl+0x9/0x20 [ 987.983381][T13650] ? __pfx_binder_ioctl+0x10/0x10 [ 987.983412][T13650] __se_sys_ioctl+0xff/0x170 [ 987.983436][T13650] do_syscall_64+0x166/0x520 [ 987.983464][T13650] ? trace_irq_disable+0x3b/0x140 [ 987.983488][T13650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.983511][T13650] ? clear_bhb_loop+0x70/0xc0 [ 987.983538][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.983561][T13650] RIP: 0033:0x7feae2aae0d9 [ 987.983582][T13650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.983609][T13650] RSP: 002b:00007feae0d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.983633][T13650] RAX: ffffffffffffffda RBX: 00007feae2d35fa0 RCX: 00007feae2aae0d9 [ 987.983649][T13650] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000004 [ 987.983664][T13650] RBP: 00007feae0d06090 R08: 0000000000000000 R09: 0000000000000000 [ 987.983690][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.983702][T13650] R13: 00007feae2d36038 R14: 00007feae2d35fa0 R15: 00007ffd4d7df5c8 [ 987.983734][T13650] [ 987.992532][T13650] binder: 13645:13650 ioctl c0306201 200000000540 returned -14 [ 988.017146][T13650] binder: 13645:13650 ioctl 4008550d 200000000000 returned -22 [ 990.832474][T10823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 992.009183][ T1133] IPVS: starting estimator thread 0... [ 992.089862][T13674] IPVS: using max 8 ests per chain, 19200 per kthread [ 992.232594][T11907] Bluetooth: hci4: command 0x0406 tx timeout [ 992.315831][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1178'. [ 992.363191][T13679] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1178'. [ 992.948857][T13696] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1181'. [ 992.970447][T13696] sctp: [Deprecated]: syz.6.1181 (pid 13696) Use of int in maxseg socket option. [ 992.970447][T13696] Use struct sctp_assoc_value instead [ 993.811151][ T6104] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 993.976489][ T6104] usb 9-1: Using ep0 maxpacket: 8 [ 993.977270][ T6104] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 993.979410][ T6104] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 993.979490][ T6104] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 993.979512][ T6104] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 993.979533][ T6104] usb 9-1: config 250 has no interface number 0 [ 993.979586][ T6104] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 993.979612][ T6104] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 993.979636][ T6104] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 993.979661][ T6104] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 993.979684][ T6104] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 993.979707][ T6104] usb 9-1: config 250 interface 228 has no altsetting 0 [ 994.017843][ T6104] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 994.017868][ T6104] usb 9-1: Product: syz [ 994.017883][ T6104] usb 9-1: SerialNumber: syz [ 994.189556][ T6104] hub 9-1:250.228: bad descriptor, ignoring hub [ 994.189674][ T6104] hub 9-1:250.228: probe with driver hub failed with error -5 [ 994.416680][ T6104] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 996.486097][T13726] hub 8-0:1.0: USB hub found [ 996.501635][T13726] hub 8-0:1.0: 1 port detected [ 996.641157][T13715] FAULT_INJECTION: forcing a failure. [ 996.641157][T13715] name failslab, interval 1, probability 0, space 0, times 0 [ 996.642508][T13715] CPU: 1 UID: 0 PID: 13715 Comm: syz.4.1187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 996.642540][T13715] Tainted: [L]=SOFTLOCKUP [ 996.642548][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 996.642561][T13715] Call Trace: [ 996.642570][T13715] [ 996.642579][T13715] dump_stack_lvl+0xe8/0x150 [ 996.642620][T13715] should_fail_ex+0x46b/0x600 [ 996.642670][T13715] should_failslab+0xa8/0x100 [ 996.642712][T13715] __kmalloc_cache_noprof+0xa0/0x6b0 [ 996.642737][T13715] ? io_ring_ctx_alloc+0x54/0xba0 [ 996.642757][T13715] ? io_ring_ctx_alloc+0x54/0xba0 [ 996.642794][T13715] io_ring_ctx_alloc+0x54/0xba0 [ 996.642814][T13715] ? io_prepare_config+0x8c8/0xc70 [ 996.642842][T13715] io_uring_create+0x50/0x990 [ 996.642865][T13715] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 996.642890][T13715] ? lockdep_hardirqs_on+0x7b/0x110 [ 996.642918][T13715] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 996.642955][T13715] ? rcu_is_watching+0x16/0xb0 [ 996.642993][T13715] do_syscall_64+0x166/0x520 [ 996.643018][T13715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.643040][T13715] ? clear_bhb_loop+0x70/0xc0 [ 996.643073][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.643093][T13715] RIP: 0033:0x7f46c481e0d9 [ 996.643111][T13715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.643128][T13715] RSP: 002b:00007f46c2a75ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 996.643149][T13715] RAX: ffffffffffffffda RBX: 00002000000008a8 RCX: 00007f46c481e0d9 [ 996.643163][T13715] RDX: 0000200000000928 RSI: 00002000000008a8 RDI: 0000000000000e26 [ 996.643176][T13715] RBP: 00002000000008a0 R08: 0000000000000008 R09: 0000000000000000 [ 996.643189][T13715] R10: 0000200000000930 R11: 0000000000000206 R12: 0000200000000928 [ 996.643202][T13715] R13: 0000200000000930 R14: 00007f46c2a75fd8 R15: 0000000000000001 [ 996.643230][T13715] [ 997.466970][ C1] usblp0: nonzero read bulk status received: -71 [ 997.566425][T11907] Bluetooth: hci5: command 0x0406 tx timeout [ 997.915515][T13736] netlink: 'syz.6.1189': attribute type 10 has an invalid length. [ 997.915538][T13736] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1189'. [ 997.915712][T13736] dummy0: entered promiscuous mode [ 998.662016][ T5594] usb 9-1: USB disconnect, device number 19 [ 998.799130][ T5594] usblp0: removed [ 999.914750][ T200] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1000.072738][ T6104] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1000.128550][ T200] usb 5-1: Using ep0 maxpacket: 16 [ 1000.129320][ T200] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1000.131521][ T200] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1000.131549][ T200] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1000.131576][ T200] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1000.131604][ T200] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1000.134777][T13771] FAULT_INJECTION: forcing a failure. [ 1000.134777][T13771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.136047][T13771] CPU: 0 UID: 0 PID: 13771 Comm: syz.2.1198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1000.136076][T13771] Tainted: [L]=SOFTLOCKUP [ 1000.136084][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.136096][T13771] Call Trace: [ 1000.136104][T13771] [ 1000.136113][T13771] dump_stack_lvl+0xe8/0x150 [ 1000.136149][T13771] should_fail_ex+0x46b/0x600 [ 1000.136185][T13771] _copy_from_user+0x2d/0xb0 [ 1000.136207][T13771] __sys_bind+0x1cc/0x410 [ 1000.136300][T13771] ? __pfx___sys_bind+0x10/0x10 [ 1000.136339][T13771] ? __pfx_ksys_write+0x10/0x10 [ 1000.136374][T13771] __x64_sys_bind+0x7a/0x90 [ 1000.136402][T13771] do_syscall_64+0x166/0x520 [ 1000.136428][T13771] ? trace_irq_disable+0x3b/0x140 [ 1000.136450][T13771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.136469][T13771] ? clear_bhb_loop+0x70/0xc0 [ 1000.136494][T13771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.136514][T13771] RIP: 0033:0x7efc3a5be0d9 [ 1000.136549][T13771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.136567][T13771] RSP: 002b:00007efc38816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1000.136589][T13771] RAX: ffffffffffffffda RBX: 00007efc3a845fa0 RCX: 00007efc3a5be0d9 [ 1000.136605][T13771] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1000.136618][T13771] RBP: 00007efc38816090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.136631][T13771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.136643][T13771] R13: 00007efc3a846038 R14: 00007efc3a845fa0 R15: 00007ffe31e75568 [ 1000.136675][T13771] [ 1000.138169][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1000.138192][ T200] usb 5-1: SerialNumber: syz [ 1000.254320][ T6104] usb 9-1: Using ep0 maxpacket: 8 [ 1000.259299][ T6104] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1000.302550][ T6104] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1000.302603][ T6104] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1000.302625][ T6104] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1000.302648][ T6104] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1000.302671][ T6104] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.302711][ T6104] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.459296][T13763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1000.518824][ T200] cdc_acm 5-1:1.0: skipping garbage [ 1000.600781][ T200] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1000.739806][ T6104] usb 9-1: usb_control_msg returned -32 [ 1000.739853][ T6104] usbtmc 9-1:16.0: can't read capabilities [ 1000.811546][T13763] [U] 2 [ 1000.890541][ T6104] usb 9-1: USB disconnect, device number 20 [ 1002.160939][T13776] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1200'. [ 1002.235437][T13777] geneve2: entered promiscuous mode [ 1002.256246][ T200] usb 5-1: USB disconnect, device number 17 [ 1003.019816][T13785] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1192'. [ 1005.014782][ T5820] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1005.168025][ T5820] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1005.169846][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.169898][ T5820] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1005.169962][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.236530][ T5820] usb 3-1: config 0 descriptor?? [ 1005.926800][ T5820] Bluetooth: Can't get version to change to load ram patch err [ 1005.926845][ T5820] Bluetooth: Loading patch file failed [ 1005.926879][ T5820] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 1005.974188][ T5820] usb 3-1: USB disconnect, device number 11 [ 1006.696677][T13841] FAULT_INJECTION: forcing a failure. [ 1006.696677][T13841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.696714][T13841] CPU: 1 UID: 0 PID: 13841 Comm: syz.6.1202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1006.696742][T13841] Tainted: [L]=SOFTLOCKUP [ 1006.696750][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1006.696764][T13841] Call Trace: [ 1006.696771][T13841] [ 1006.696781][T13841] dump_stack_lvl+0xe8/0x150 [ 1006.696817][T13841] should_fail_ex+0x46b/0x600 [ 1006.696855][T13841] _copy_to_user+0x31/0xb0 [ 1006.696880][T13841] simple_read_from_buffer+0xe1/0x170 [ 1006.696914][T13841] proc_fail_nth_read+0x1be/0x230 [ 1006.696949][T13841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1006.696988][T13841] ? rw_verify_area+0x250/0x4d0 [ 1006.697012][T13841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1006.697033][T13841] vfs_read+0x219/0xa90 [ 1006.697058][T13841] ? __pfx_vfs_read+0x10/0x10 [ 1006.697079][T13841] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1006.697101][T13841] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1006.697120][T13841] ? mutex_lock_nested+0x152/0x1d0 [ 1006.697133][T13841] ? fdget_pos+0x252/0x320 [ 1006.697158][T13841] ksys_read+0x156/0x270 [ 1006.697180][T13841] ? __pfx_ksys_read+0x10/0x10 [ 1006.697207][T13841] do_syscall_64+0x166/0x520 [ 1006.697226][T13841] ? trace_irq_disable+0x3b/0x140 [ 1006.697242][T13841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.697257][T13841] ? clear_bhb_loop+0x70/0xc0 [ 1006.697274][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.697289][T13841] RIP: 0033:0x7feae2a6e90e [ 1006.697302][T13841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1006.697315][T13841] RSP: 002b:00007feae0d05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1006.697331][T13841] RAX: ffffffffffffffda RBX: 00007feae0d066c0 RCX: 00007feae2a6e90e [ 1006.697342][T13841] RDX: 000000000000000f RSI: 00007feae0d060a0 RDI: 0000000000000004 [ 1006.697351][T13841] RBP: 00007feae0d06090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.697360][T13841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.697369][T13841] R13: 00007feae2d36038 R14: 00007feae2d35fa0 R15: 00007ffd4d7df5c8 [ 1006.697396][T13841] [ 1007.090787][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 1007.394160][T13858] input: syz0 as /devices/virtual/input/input17 [ 1009.054865][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 1009.094738][T10823] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1009.894001][T10823] usb 7-1: Using ep0 maxpacket: 8 [ 1009.894677][T10823] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1009.895817][T10823] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1009.895866][T10823] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1009.895888][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1009.895911][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1009.895934][T10823] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.895972][T10823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.926366][ T5595] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1011.426179][T10823] usb 7-1: usb_control_msg returned -71 [ 1011.426241][T10823] usbtmc 7-1:16.0: can't read capabilities [ 1011.462124][T10823] usb 7-1: USB disconnect, device number 17 [ 1012.196430][T10823] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1012.320474][T10823] usb 8-1: device descriptor read/64, error -71 [ 1012.673708][T10823] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1013.776485][T10823] usb 8-1: device descriptor read/64, error -71 [ 1013.776606][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1013.874646][T10823] usb usb8-port1: attempt power cycle [ 1013.933949][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1013.934848][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1013.937378][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1013.937402][ T10] usb 7-1: config 0 has no interface number 0 [ 1013.937445][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1013.950532][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.950559][ T10] usb 7-1: Product: syz [ 1013.950576][ T10] usb 7-1: Manufacturer: syz [ 1013.950592][ T10] usb 7-1: SerialNumber: syz [ 1014.016384][ T10] usb 7-1: config 0 descriptor?? [ 1014.263807][T10823] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1014.463418][T10823] usb 8-1: device not accepting address 28, error -71 [ 1014.696604][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1014.696636][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1014.867220][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1232'. [ 1015.142416][T13930] FAULT_INJECTION: forcing a failure. [ 1015.142416][T13930] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.142453][T13930] CPU: 1 UID: 0 PID: 13930 Comm: syz.2.1234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1015.142482][T13930] Tainted: [L]=SOFTLOCKUP [ 1015.142489][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1015.142502][T13930] Call Trace: [ 1015.142510][T13930] [ 1015.142519][T13930] dump_stack_lvl+0xe8/0x150 [ 1015.142555][T13930] should_fail_ex+0x46b/0x600 [ 1015.142593][T13930] should_failslab+0xa8/0x100 [ 1015.142620][T13930] kmem_cache_alloc_noprof+0xa4/0x660 [ 1015.142655][T13930] ? skb_clone+0x212/0x3a0 [ 1015.142678][T13930] ? skb_clone+0x212/0x3a0 [ 1015.142706][T13930] skb_clone+0x212/0x3a0 [ 1015.142733][T13930] __netlink_deliver_tap+0x413/0x860 [ 1015.142770][T13930] ? netlink_deliver_tap+0x2e/0x1b0 [ 1015.142796][T13930] netlink_deliver_tap+0x19c/0x1b0 [ 1015.142822][T13930] netlink_unicast+0x7b8/0x990 [ 1015.142854][T13930] netlink_sendmsg+0x813/0xb40 [ 1015.142896][T13930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.142923][T13930] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1015.142952][T13930] ? __kernel_text_address+0xd/0x30 [ 1015.142975][T13930] ? unwind_get_return_address+0x4d/0x90 [ 1015.143002][T13930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.143026][T13930] sock_sendmsg_nosec+0x13a/0x180 [ 1015.143058][T13930] ____sys_sendmsg+0x565/0x870 [ 1015.143080][T13930] ? __might_fault+0xaf/0x130 [ 1015.143111][T13930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1015.143144][T13930] ? import_iovec+0x73/0xa0 [ 1015.143169][T13930] ___sys_sendmsg+0x2a5/0x360 [ 1015.143191][T13930] ? __lock_acquire+0x683/0x2ce0 [ 1015.143220][T13930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1015.143277][T13930] ? __fget_files+0x2a/0x420 [ 1015.143306][T13930] ? __fget_files+0x3a8/0x420 [ 1015.143343][T13930] __x64_sys_sendmsg+0x1b7/0x290 [ 1015.143367][T13930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1015.143412][T13930] do_syscall_64+0x166/0x520 [ 1015.143441][T13930] ? trace_irq_disable+0x3b/0x140 [ 1015.143463][T13930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.143485][T13930] ? clear_bhb_loop+0x70/0xc0 [ 1015.143510][T13930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.143532][T13930] RIP: 0033:0x7efc3a5be0d9 [ 1015.143552][T13930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.143570][T13930] RSP: 002b:00007efc38816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.143593][T13930] RAX: ffffffffffffffda RBX: 00007efc3a845fa0 RCX: 00007efc3a5be0d9 [ 1015.143608][T13930] RDX: 0000000020000084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1015.143622][T13930] RBP: 00007efc38816090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.143635][T13930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.143647][T13930] R13: 00007efc3a846038 R14: 00007efc3a845fa0 R15: 00007ffe31e75568 [ 1015.143680][T13930] [ 1015.387713][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1015.387746][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1015.387775][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1015.388088][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1015.522801][ T10] usb 7-1: USB disconnect, device number 18 [ 1016.873028][ T5820] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1018.377900][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 1018.378826][ T5820] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1018.383372][ T5820] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1018.383437][ T5820] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1018.383461][ T5820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1018.383486][ T5820] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1018.383520][ T5820] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.383558][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.673124][T13955] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 1018.673124][T13955] program syz.7.1242 not setting count and/or reply_len properly [ 1018.735701][ T5820] usb 5-1: usb_control_msg returned -32 [ 1018.735752][ T5820] usbtmc 5-1:16.0: can't read capabilities [ 1018.783624][ T5820] usb 5-1: USB disconnect, device number 18 [ 1019.112605][ T6104] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1019.235115][ T6104] usb 3-1: device descriptor read/64, error -71 [ 1019.540014][ T6104] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1019.663784][ T6104] usb 3-1: device descriptor read/64, error -71 [ 1019.759305][T13971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1246'. [ 1019.779556][ T6104] usb usb3-port1: attempt power cycle [ 1021.226278][ T6104] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1021.247551][ T6104] usb 3-1: device descriptor read/8, error -71 [ 1021.341795][T13978] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1235'. [ 1021.502094][ T6104] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1021.524989][ T6104] usb 3-1: device descriptor read/8, error -71 [ 1021.640598][ T6104] usb usb3-port1: unable to enumerate USB device [ 1022.597399][ T6104] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1022.767000][ T6104] usb 3-1: Using ep0 maxpacket: 16 [ 1022.768610][ T6104] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.790397][ T6104] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1022.790427][ T6104] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1022.790453][ T6104] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1022.790482][ T6104] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1022.793289][ T6104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1022.793313][ T6104] usb 3-1: SerialNumber: syz [ 1022.891823][T13987] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1022.911279][ T6104] cdc_acm 3-1:1.0: skipping garbage [ 1022.920926][ T6104] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 1023.152739][T13987] [U] 2 [ 1023.165085][T10462] usb 3-1: USB disconnect, device number 16 [ 1025.807364][T10823] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1025.851328][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1257'. [ 1025.950187][T10823] usb 7-1: Using ep0 maxpacket: 8 [ 1025.950883][T10823] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1025.952856][T10823] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1025.952909][T10823] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1025.952932][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1025.952958][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1025.952981][T10823] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.953033][T10823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.330356][T10823] usb 7-1: GET_CAPABILITIES returned 0 [ 1026.330427][T10823] usbtmc 7-1:16.0: can't read capabilities [ 1026.539380][ T6162] usb 7-1: USB disconnect, device number 19 [ 1027.140428][ T5594] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1028.264822][ T5594] usb 3-1: Using ep0 maxpacket: 32 [ 1028.265390][ T5594] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1028.268499][ T5594] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1028.268516][ T5594] usb 3-1: config 0 has no interface number 0 [ 1028.268546][ T5594] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1028.271447][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.271463][ T5594] usb 3-1: Product: syz [ 1028.271473][ T5594] usb 3-1: Manufacturer: syz [ 1028.271483][ T5594] usb 3-1: SerialNumber: syz [ 1028.409874][ T5594] usb 3-1: config 0 descriptor?? [ 1029.832124][ T6162] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1030.002981][ T6162] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1030.021702][ T6162] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.021727][ T6162] usb 8-1: Product: syz [ 1030.021741][ T6162] usb 8-1: Manufacturer: syz [ 1030.021814][ T6162] usb 8-1: SerialNumber: syz [ 1030.072870][ T6162] usb 8-1: config 0 descriptor?? [ 1030.135039][ T6162] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1030.137802][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1030.292316][T14048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.302897][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1030.304234][T14048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.306186][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1030.310827][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1030.310905][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.310932][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.310959][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.310987][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.311032][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.852257][ T10] usb 7-1: usb_control_msg returned -32 [ 1030.852308][ T10] usbtmc 7-1:16.0: can't read capabilities [ 1030.854479][ T6162] gspca_sunplus: reg_w_riv err -71 [ 1030.854779][ T6162] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1030.937523][ T6162] usb 8-1: USB disconnect, device number 30 [ 1031.417987][T14078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1031.554696][ T5594] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1031.554798][ T5594] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1031.554840][ T5594] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1031.554925][ T5594] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1031.603248][ T5594] usb 3-1: USB disconnect, device number 17 [ 1031.664908][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1031.809003][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1031.815525][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.820365][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1031.820395][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1031.820477][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1031.820606][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1031.853420][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1031.853445][ T10] usb 9-1: SerialNumber: syz [ 1032.035092][T14081] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1032.054217][ T10] cdc_acm 9-1:1.0: skipping garbage [ 1032.066122][ T10] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 1032.314642][T14079] [U] 2 [ 1032.319505][ T10] usb 9-1: USB disconnect, device number 21 [ 1032.467988][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.584109][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1270'. [ 1033.965411][ T5594] usb 7-1: USB disconnect, device number 20 [ 1034.368496][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1034.395289][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.893063][T14130] FAULT_INJECTION: forcing a failure. [ 1034.893063][T14130] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.893134][T14130] CPU: 1 UID: 0 PID: 14130 Comm: syz.7.1275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1034.893162][T14130] Tainted: [L]=SOFTLOCKUP [ 1034.893168][T14130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.893180][T14130] Call Trace: [ 1034.893188][T14130] [ 1034.893197][T14130] dump_stack_lvl+0xe8/0x150 [ 1034.893232][T14130] should_fail_ex+0x46b/0x600 [ 1034.893268][T14130] should_failslab+0xa8/0x100 [ 1034.893293][T14130] __kmalloc_noprof+0xfe/0x780 [ 1034.893314][T14130] ? key_put+0xb7/0x240 [ 1034.893335][T14130] ? __keyctl_dh_compute+0x3df/0xd10 [ 1034.893359][T14130] ? __keyctl_dh_compute+0x3df/0xd10 [ 1034.893389][T14130] __keyctl_dh_compute+0x3df/0xd10 [ 1034.893418][T14130] ? __lock_acquire+0x683/0x2ce0 [ 1034.893446][T14130] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1034.893471][T14130] ? __css_rstat_updated+0x237/0x540 [ 1034.893531][T14130] ? kvm_sched_clock_read+0x11/0x20 [ 1034.893550][T14130] ? sched_clock+0x41/0x60 [ 1034.893595][T14130] keyctl_dh_compute+0x124/0x180 [ 1034.893613][T14130] ? lockdep_hardirqs_on+0x7b/0x110 [ 1034.893633][T14130] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1034.893653][T14130] ? trace_sched_exit_tp+0x3a/0x130 [ 1034.893669][T14130] ? __schedule+0x16ef/0x5700 [ 1034.893692][T14130] __se_sys_keyctl+0x44c/0x9d0 [ 1034.893709][T14130] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1034.893737][T14130] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1034.893753][T14130] ? __pfx___schedule+0x10/0x10 [ 1034.893774][T14130] ? fput+0xa0/0xd0 [ 1034.893791][T14130] ? ksys_write+0x248/0x270 [ 1034.893812][T14130] ? rcu_is_watching+0x16/0xb0 [ 1034.893837][T14130] ? __x64_sys_keyctl+0x20/0xc0 [ 1034.893861][T14130] do_syscall_64+0x166/0x520 [ 1034.893880][T14130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.893896][T14130] ? clear_bhb_loop+0x70/0xc0 [ 1034.893915][T14130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.893931][T14130] RIP: 0033:0x7f74ff79e0d9 [ 1034.893950][T14130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.893964][T14130] RSP: 002b:00007f74fd9b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1034.893981][T14130] RAX: ffffffffffffffda RBX: 00007f74ffa26180 RCX: 00007f74ff79e0d9 [ 1034.893992][T14130] RDX: 0000200000000480 RSI: 0000200000000140 RDI: 0000000000000017 [ 1034.894003][T14130] RBP: 00007f74fd9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.894012][T14130] R10: 0000000000000053 R11: 0000000000000246 R12: 0000000000000001 [ 1034.894022][T14130] R13: 00007f74ffa26218 R14: 00007f74ffa26180 R15: 00007fff13bfcc48 [ 1034.894048][T14130] [ 1036.089796][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1278'. [ 1036.089827][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1278'. [ 1036.170051][ T5594] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1036.332056][ T5594] usb 7-1: Using ep0 maxpacket: 8 [ 1036.332691][ T5594] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1036.336900][ T5594] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1036.336968][ T5594] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1036.336993][ T5594] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1036.337030][ T5594] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1036.337054][ T5594] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1036.337095][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.637537][ T5594] usb 7-1: GET_CAPABILITIES returned 0 [ 1036.637585][ T5594] usbtmc 7-1:16.0: can't read capabilities [ 1036.808275][T10823] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1036.885388][ T200] usb 7-1: USB disconnect, device number 21 [ 1037.034746][T10823] usb 8-1: Using ep0 maxpacket: 32 [ 1039.202468][T10823] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1039.378650][T14167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 1039.882256][T10823] usb 8-1: unable to read config index 0 descriptor/all [ 1039.882300][T10823] usb 8-1: can't read configurations, error -71 [ 1040.641927][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1292'. [ 1040.641965][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1292'. [ 1041.398500][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1296'. [ 1041.398602][T14226] openvswitch: netlink: EtherType 300 is less than min 600 [ 1041.718362][ T5595] Bluetooth: hci1: unexpected event for opcode 0x702f [ 1042.789835][T10823] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1042.932650][T10823] usb 7-1: Using ep0 maxpacket: 8 [ 1042.933497][T10823] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1042.936588][T10823] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1042.936792][T10823] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1042.936817][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1042.937603][T10823] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1042.937635][T10823] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.937683][T10823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.404017][T10823] usb 7-1: GET_CAPABILITIES returned 0 [ 1043.404066][T10823] usbtmc 7-1:16.0: can't read capabilities [ 1047.222237][T10823] usb 7-1: USB disconnect, device number 22 [ 1047.755447][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1300'. [ 1048.314405][ T6104] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1050.284818][ T6104] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1050.290840][ T6104] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1050.290870][ T6104] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1050.290911][ T6104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.427961][ T6104] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 1050.708088][ T6104] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 1051.914512][ T6162] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1053.168985][ T6162] usb 9-1: Using ep0 maxpacket: 16 [ 1053.220262][T14316] FAULT_INJECTION: forcing a failure. [ 1053.220262][T14316] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.220292][T14316] CPU: 1 UID: 0 PID: 14316 Comm: syz.2.1313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1053.220314][T14316] Tainted: [L]=SOFTLOCKUP [ 1053.220320][T14316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.220329][T14316] Call Trace: [ 1053.220335][T14316] [ 1053.220342][T14316] dump_stack_lvl+0xe8/0x150 [ 1053.220370][T14316] should_fail_ex+0x46b/0x600 [ 1053.220399][T14316] should_failslab+0xa8/0x100 [ 1053.220419][T14316] __kvmalloc_node_noprof+0x17a/0x8a0 [ 1053.220439][T14316] ? io_alloc_cache_init+0x42/0x140 [ 1053.220454][T14316] ? io_alloc_cache_init+0x42/0x140 [ 1053.220474][T14316] io_alloc_cache_init+0x42/0x140 [ 1053.220491][T14316] io_ring_ctx_alloc+0x518/0xba0 [ 1053.220513][T14316] io_uring_create+0x50/0x990 [ 1053.220531][T14316] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1053.220550][T14316] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1053.220567][T14316] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1053.220597][T14316] ? __pfx_ksys_write+0x10/0x10 [ 1053.220628][T14316] do_syscall_64+0x166/0x520 [ 1053.220647][T14316] ? trace_irq_disable+0x3b/0x140 [ 1053.220664][T14316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.220680][T14316] ? clear_bhb_loop+0x70/0xc0 [ 1053.220699][T14316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.220721][T14316] RIP: 0033:0x7efc3a5be0d9 [ 1053.220736][T14316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.220750][T14316] RSP: 002b:00007efc38816028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1053.220766][T14316] RAX: ffffffffffffffda RBX: 00007efc3a845fa0 RCX: 00007efc3a5be0d9 [ 1053.220778][T14316] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000899 [ 1053.220788][T14316] RBP: 00007efc38816090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.220798][T14316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.220807][T14316] R13: 00007efc3a846038 R14: 00007efc3a845fa0 R15: 00007ffe31e75568 [ 1053.220831][T14316] [ 1053.449447][ T5314] usb 7-1: USB disconnect, device number 23 [ 1053.670915][ T5314] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1053.732238][ T5314] spcp8x5 7-1:1.0: device disconnected [ 1053.876850][ T6162] usb 9-1: device descriptor read/all, error -71 [ 1053.880778][T14311] [U] 2 [ 1054.130594][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1316'. [ 1054.143999][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1316'. [ 1054.896380][ T38] audit: type=1326 audit(1787506710.596:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1054.896553][ T38] audit: type=1326 audit(1787506710.596:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1054.912448][ T38] audit: type=1326 audit(1787506710.607:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1054.921622][ T38] audit: type=1326 audit(1787506710.607:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1054.935803][ T38] audit: type=1326 audit(1787506710.607:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1054.935932][ T38] audit: type=1326 audit(1787506710.628:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f300552de42 code=0x7ffc0000 [ 1054.936035][ T38] audit: type=1326 audit(1787506710.628:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f300552ded7 code=0x7ffc0000 [ 1054.956333][ T38] audit: type=1326 audit(1787506710.638:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f30054eadd1 code=0x7ffc0000 [ 1054.956463][ T38] audit: type=1326 audit(1787506710.638:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1054.973630][ T38] audit: type=1326 audit(1787506710.659:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14335 comm="syz.8.1321" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1055.025106][T14336] binder: 14335:14336 ioctl 400c620e 0 returned -14 [ 1055.136392][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.136913][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.148361][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.149480][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.164733][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.165254][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.165854][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.179991][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.180602][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.236010][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.236560][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.264310][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.264514][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.264664][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.264810][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.264989][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.265214][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.265364][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.265521][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.265679][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.314158][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.317550][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.340586][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.341190][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.367206][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.367847][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.421855][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.422016][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.422167][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.422309][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.422545][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.423080][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.473028][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.473838][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.498332][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.498932][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.524315][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.524831][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.525399][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.543702][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.544352][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.694874][T14338] binder: 14335:14338 ioctl c018620c 200000000040 returned -1 [ 1055.943746][ T5314] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1056.935134][ T5314] usb 7-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1057.075837][ T5314] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1057.111687][ T5314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1057.111716][ T5314] usb 7-1: Product: syz [ 1057.111732][ T5314] usb 7-1: Manufacturer: syz [ 1060.472576][ T5314] input: Samsung SUR40 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input18 [ 1061.062127][ T5314] usb 7-1: USB disconnect, device number 24 [ 1061.255323][T14373] loop8: detected capacity change from 0 to 8 [ 1061.295369][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1330'. [ 1061.305547][T14374] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1330'. [ 1061.346427][T14373] Dev loop8: unable to read RDB block 8 [ 1061.346500][T14373] loop8: unable to read partition table [ 1061.346712][T14373] loop8: partition table beyond EOD, truncated [ 1061.346730][T14373] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1062.214319][T14396] FAULT_INJECTION: forcing a failure. [ 1062.214319][T14396] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.214356][T14396] CPU: 1 UID: 0 PID: 14396 Comm: syz.4.1333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1062.214385][T14396] Tainted: [L]=SOFTLOCKUP [ 1062.214393][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1062.214406][T14396] Call Trace: [ 1062.214417][T14396] [ 1062.214426][T14396] dump_stack_lvl+0xe8/0x150 [ 1062.214464][T14396] should_fail_ex+0x46b/0x600 [ 1062.214502][T14396] should_failslab+0xa8/0x100 [ 1062.214529][T14396] __kvmalloc_node_noprof+0x17a/0x8a0 [ 1062.214557][T14396] ? seq_read_iter+0x1eb/0xcb0 [ 1062.214578][T14396] ? seq_read_iter+0x1eb/0xcb0 [ 1062.214600][T14396] ? seq_read_iter+0xa5/0xcb0 [ 1062.214632][T14396] seq_read_iter+0x1eb/0xcb0 [ 1062.214669][T14396] seq_read+0x36a/0x490 [ 1062.214699][T14396] ? __pfx_seq_read+0x10/0x10 [ 1062.214734][T14396] ? rw_verify_area+0x250/0x4d0 [ 1062.214764][T14396] ? __pfx_seq_read+0x10/0x10 [ 1062.214785][T14396] vfs_read+0x219/0xa90 [ 1062.214823][T14396] ? __pfx_vfs_read+0x10/0x10 [ 1062.214854][T14396] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1062.214886][T14396] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1062.214913][T14396] ? mutex_lock_nested+0x152/0x1d0 [ 1062.214933][T14396] ? fdget_pos+0x252/0x320 [ 1062.214967][T14396] ksys_read+0x156/0x270 [ 1062.214999][T14396] ? __pfx_ksys_read+0x10/0x10 [ 1062.215041][T14396] do_syscall_64+0x166/0x520 [ 1062.215066][T14396] ? trace_irq_disable+0x3b/0x140 [ 1062.215088][T14396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.215110][T14396] ? clear_bhb_loop+0x70/0xc0 [ 1062.215137][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.215158][T14396] RIP: 0033:0x7f46c481e0d9 [ 1062.215177][T14396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.215195][T14396] RSP: 002b:00007f46c2a55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1062.215216][T14396] RAX: ffffffffffffffda RBX: 00007f46c4aa6090 RCX: 00007f46c481e0d9 [ 1062.215230][T14396] RDX: 0000000000002020 RSI: 0000200000001180 RDI: 0000000000000003 [ 1062.215243][T14396] RBP: 00007f46c2a55090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.215256][T14396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.215268][T14396] R13: 00007f46c4aa6128 R14: 00007f46c4aa6090 R15: 00007ffe73b4f438 [ 1062.215301][T14396] [ 1065.572883][ T6162] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1066.026057][ T6162] usb 5-1: not running at top speed; connect to a high speed hub [ 1066.026086][ T6162] usb 5-1: New USB device found, idVendor=0499, idProduct=1028, bcdDevice= 0.40 [ 1066.028727][ T6162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1066.028749][ T6162] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1066.044375][ T6162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.044447][ T6162] usb 5-1: Product: syz [ 1066.044487][ T6162] usb 5-1: Manufacturer: 䯧ᵇ勬逞俆潀㪀嵞ヴ㞴쐭鳺Ⳇ짒⟣ڠ븭ぽ䕊ṱ诀ꯓ汼辣駘怸땬䬠朞꧶觫愸욕ℵ晡뢠嘕炣踷盐ܲ࿲ट୳偝⎊摯捲㩫켻ᜮণ鹴蔔ῆὊꪵ [ 1066.044565][ T6162] usb 5-1: SerialNumber: syz [ 1066.556956][ T6162] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1066.794262][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1344'. [ 1066.795464][T14428] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1344'. [ 1067.074458][ T6162] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1067.200574][ T6162] usb 5-1: USB disconnect, device number 19 [ 1067.500699][T12689] udevd[12689]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.268396][ T6167] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1069.441794][ T6167] usb 5-1: Using ep0 maxpacket: 16 [ 1069.442920][ T6167] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.446484][ T6167] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1069.446514][ T6167] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1069.446540][ T6167] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1069.446569][ T6167] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1069.461549][ T6167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.461574][ T6167] usb 5-1: SerialNumber: syz [ 1069.564270][T14459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1069.570737][ T6167] cdc_acm 5-1:1.0: skipping garbage [ 1069.603156][ T6167] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1069.827564][T14459] [U] 2 [ 1069.889529][ T6167] usb 5-1: USB disconnect, device number 20 [ 1070.109466][ T200] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1070.260917][ T200] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 1070.262695][ T200] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.293089][ T200] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.293113][ T200] usb 8-1: Product: syz [ 1070.293128][ T200] usb 8-1: Manufacturer: syz [ 1070.293142][ T200] usb 8-1: SerialNumber: syz [ 1070.364931][ T200] etas_es58x 8-1:1.0: Starting syz syz (Serial Number syz) [ 1070.665518][T14477] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1357'. [ 1072.397191][ T5595] Bluetooth: hci1: unexpected subevent 0x1a length: 30 > 6 [ 1076.473872][ T6167] usb 8-1: USB disconnect, device number 33 [ 1076.496931][T14507] [U] 2 [ 1077.009739][T14505] netlink: 'syz.6.1362': attribute type 4 has an invalid length. [ 1077.009761][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 1077.955741][T14523] FAULT_INJECTION: forcing a failure. [ 1077.955741][T14523] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.955781][T14523] CPU: 1 UID: 0 PID: 14523 Comm: syz.2.1366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1077.955812][T14523] Tainted: [L]=SOFTLOCKUP [ 1077.955820][T14523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.955833][T14523] Call Trace: [ 1077.955841][T14523] [ 1077.955852][T14523] dump_stack_lvl+0xe8/0x150 [ 1077.955889][T14523] should_fail_ex+0x46b/0x600 [ 1077.955928][T14523] should_failslab+0xa8/0x100 [ 1077.955956][T14523] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1077.955985][T14523] ? __alloc_skb+0x1db/0x7a0 [ 1077.956016][T14523] ? __alloc_skb+0x1db/0x7a0 [ 1077.956056][T14523] __alloc_skb+0x1db/0x7a0 [ 1077.956093][T14523] netlink_sendmsg+0x5d4/0xb40 [ 1077.956130][T14523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.956159][T14523] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1077.956188][T14523] ? __kernel_text_address+0xd/0x30 [ 1077.956211][T14523] ? unwind_get_return_address+0x4d/0x90 [ 1077.956239][T14523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.956263][T14523] sock_sendmsg_nosec+0x13a/0x180 [ 1077.956297][T14523] ____sys_sendmsg+0x565/0x870 [ 1077.956322][T14523] ? __might_fault+0xaf/0x130 [ 1077.956350][T14523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1077.956383][T14523] ? import_iovec+0x73/0xa0 [ 1077.956410][T14523] ___sys_sendmsg+0x2a5/0x360 [ 1077.956432][T14523] ? __lock_acquire+0x683/0x2ce0 [ 1077.956461][T14523] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.956520][T14523] ? __fget_files+0x2a/0x420 [ 1077.956547][T14523] ? __fget_files+0x3a8/0x420 [ 1077.956586][T14523] __x64_sys_sendmsg+0x1b7/0x290 [ 1077.956621][T14523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1077.956668][T14523] do_syscall_64+0x166/0x520 [ 1077.956695][T14523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.956719][T14523] ? clear_bhb_loop+0x70/0xc0 [ 1077.956747][T14523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.956770][T14523] RIP: 0033:0x7efc3a5be0d9 [ 1077.956791][T14523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.956811][T14523] RSP: 002b:00007efc38816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.956833][T14523] RAX: ffffffffffffffda RBX: 00007efc3a845fa0 RCX: 00007efc3a5be0d9 [ 1077.956850][T14523] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1077.956864][T14523] RBP: 00007efc38816090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.956877][T14523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.956891][T14523] R13: 00007efc3a846038 R14: 00007efc3a845fa0 R15: 00007ffe31e75568 [ 1077.956923][T14523] [ 1080.703366][T14536] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1370'. [ 1080.777289][ T5243] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1081.059175][T14543] FAULT_INJECTION: forcing a failure. [ 1081.059175][T14543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.059257][T14543] CPU: 1 UID: 0 PID: 14543 Comm: syz.8.1371 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1081.059290][T14543] Tainted: [L]=SOFTLOCKUP [ 1081.059299][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.059313][T14543] Call Trace: [ 1081.059322][T14543] [ 1081.059333][T14543] dump_stack_lvl+0xe8/0x150 [ 1081.059371][T14543] should_fail_ex+0x46b/0x600 [ 1081.059412][T14543] _copy_to_user+0x31/0xb0 [ 1081.059439][T14543] simple_read_from_buffer+0xe1/0x170 [ 1081.059476][T14543] proc_fail_nth_read+0x1be/0x230 [ 1081.059513][T14543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1081.059551][T14543] ? rw_verify_area+0x250/0x4d0 [ 1081.059586][T14543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1081.059618][T14543] vfs_read+0x219/0xa90 [ 1081.059659][T14543] ? __pfx_vfs_read+0x10/0x10 [ 1081.059694][T14543] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1081.059727][T14543] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1081.059755][T14543] ? mutex_lock_nested+0x152/0x1d0 [ 1081.059772][T14543] ? fdget_pos+0x252/0x320 [ 1081.059802][T14543] ksys_read+0x156/0x270 [ 1081.059829][T14543] ? __pfx_ksys_read+0x10/0x10 [ 1081.059863][T14543] do_syscall_64+0x166/0x520 [ 1081.059887][T14543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.059905][T14543] ? clear_bhb_loop+0x70/0xc0 [ 1081.059927][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.059945][T14543] RIP: 0033:0x7f30054ee90e [ 1081.059963][T14543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1081.059978][T14543] RSP: 002b:00007f3003743fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1081.060004][T14543] RAX: ffffffffffffffda RBX: 00007f30037446c0 RCX: 00007f30054ee90e [ 1081.060018][T14543] RDX: 000000000000000f RSI: 00007f30037440a0 RDI: 0000000000000007 [ 1081.060029][T14543] RBP: 00007f3003744090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.060040][T14543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.060051][T14543] R13: 00007f30057b6218 R14: 00007f30057b6180 R15: 00007ffeff9c0cc8 [ 1081.060078][T14543] [ 1081.260169][T10462] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1081.718971][T10462] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1081.739520][T10462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.739549][T10462] usb 7-1: Product: syz [ 1081.739564][T10462] usb 7-1: Manufacturer: syz [ 1081.739581][T10462] usb 7-1: SerialNumber: syz [ 1081.825732][T10462] usb 7-1: config 0 descriptor?? [ 1081.839514][T10462] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1082.216743][T10462] gspca_sunplus: reg_r err -71 [ 1082.244387][T10462] usb 7-1: USB disconnect, device number 25 [ 1088.649433][T14596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1383'. [ 1088.737007][ T5594] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1088.895250][ T5594] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1088.903299][ T5594] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1088.903321][ T5594] usb 9-1: Product: syz [ 1088.903332][ T5594] usb 9-1: SerialNumber: syz [ 1088.955454][ T5594] usb 9-1: config 0 descriptor?? [ 1089.084838][T14608] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1089.086779][ T5243] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1089.405709][ T6162] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1089.662426][ T6162] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1089.685733][ T6162] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.685762][ T6162] usb 8-1: Product: syz [ 1089.686175][ T6162] usb 8-1: Manufacturer: syz [ 1089.686193][ T6162] usb 8-1: SerialNumber: syz [ 1089.775559][ T6162] usb 8-1: config 0 descriptor?? [ 1089.960030][ T6162] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1090.826271][ T6162] gspca_sunplus: reg_w_riv err -110 [ 1090.826472][ T6162] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 1090.896114][ T6162] usb 8-1: USB disconnect, device number 34 [ 1091.378650][ T5594] usb 9-1: USB disconnect, device number 24 [ 1091.413394][T10823] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1091.537250][T10823] usb 7-1: device descriptor read/64, error -71 [ 1091.775532][T10823] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1091.908861][T10823] usb 7-1: device descriptor read/64, error -71 [ 1092.745599][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1092.746390][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1092.865022][T10823] usb usb7-port1: attempt power cycle [ 1094.925202][T14636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1392'. [ 1095.015687][T10823] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1095.192436][T10823] usb 7-1: device descriptor read/8, error -71 [ 1095.632871][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1396'. [ 1096.084109][ T5243] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1096.326094][T14655] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32 [ 1096.367146][T14659] binder: 14658:14659 ioctl c028aa03 2000000002c0 returned -22 [ 1096.947377][T10823] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1097.199243][T10823] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1098.711805][T10823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.711868][T10823] usb 7-1: Product: syz [ 1098.711923][T10823] usb 7-1: Manufacturer: syz [ 1098.711941][T10823] usb 7-1: SerialNumber: syz [ 1099.519229][T10823] usb 7-1: config 0 descriptor?? [ 1099.757996][T10823] usb 7-1: can't set config #0, error -71 [ 1099.788225][T10823] usb 7-1: USB disconnect, device number 30 [ 1099.800715][T12689] udevd[12689]: setting owner of /dev/bus/usb/007/030 to uid=0, gid=0 failed: No such file or directory [ 1100.209079][ T38] kauditd_printk_skb: 184 callbacks suppressed [ 1100.209099][ T38] audit: type=1326 audit(1787506758.157:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.210902][ T38] audit: type=1326 audit(1787506758.157:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.210969][ T38] audit: type=1326 audit(1787506758.157:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.298604][T10823] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1100.298993][ T38] audit: type=1326 audit(1787506758.157:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.299044][ T38] audit: type=1326 audit(1787506758.157:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.299299][ T38] audit: type=1326 audit(1787506758.251:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.299353][ T38] audit: type=1326 audit(1787506758.251:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.324240][ T38] audit: type=1326 audit(1787506758.262:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.324291][ T38] audit: type=1326 audit(1787506758.283:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.327482][ T38] audit: type=1326 audit(1787506758.283:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.8.1404" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f300552e0d9 code=0x7ffc0000 [ 1100.500473][T10823] usb 5-1: Using ep0 maxpacket: 16 [ 1100.501631][T10823] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.503997][T10823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1100.504024][T10823] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1100.504048][T10823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 1100.504088][T10823] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1100.506433][T10823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1100.506457][T10823] usb 5-1: SerialNumber: syz [ 1100.593290][T14680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1100.607398][T10823] cdc_acm 5-1:1.0: skipping garbage [ 1100.610190][T10823] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1100.813492][T14680] [U] 2 [ 1100.820438][T10823] usb 5-1: USB disconnect, device number 21 [ 1102.468981][T14701] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1407'. [ 1104.218899][T14736] FAULT_INJECTION: forcing a failure. [ 1104.218899][T14736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.219909][T14736] CPU: 0 UID: 0 PID: 14736 Comm: syz.8.1412 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1104.219943][T14736] Tainted: [L]=SOFTLOCKUP [ 1104.219952][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1104.219972][T14736] Call Trace: [ 1104.219982][T14736] [ 1104.219993][T14736] dump_stack_lvl+0xe8/0x150 [ 1104.220031][T14736] should_fail_ex+0x46b/0x600 [ 1104.220072][T14736] _copy_from_user+0x2d/0xb0 [ 1104.220098][T14736] do_sock_getsockopt+0x200/0x7e0 [ 1104.220130][T14736] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1104.220170][T14736] ? __fget_files+0x3a8/0x420 [ 1104.220199][T14736] ? __fget_files+0x2a/0x420 [ 1104.220237][T14736] __x64_sys_getsockopt+0x1aa/0x250 [ 1104.220271][T14736] do_syscall_64+0x166/0x520 [ 1104.220302][T14736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.220326][T14736] ? clear_bhb_loop+0x70/0xc0 [ 1104.220355][T14736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.220379][T14736] RIP: 0033:0x7f300552e0d9 [ 1104.220406][T14736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.220426][T14736] RSP: 002b:00007f3003744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1104.220451][T14736] RAX: ffffffffffffffda RBX: 00007f30057b6180 RCX: 00007f300552e0d9 [ 1104.220468][T14736] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000004 [ 1104.220482][T14736] RBP: 00007f3003744090 R08: 00002000000000c0 R09: 0000000000000000 [ 1104.220498][T14736] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.220513][T14736] R13: 00007f30057b6218 R14: 00007f30057b6180 R15: 00007ffeff9c0cc8 [ 1104.220548][T14736] [ 1104.645000][ T6104] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1106.052375][ T6104] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1106.052415][ T6104] usb 5-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice= 4.da [ 1106.323544][ T6104] usb 5-1: config 232 has an invalid interface number: 133 but max is 0 [ 1106.323572][ T6104] usb 5-1: config 232 has no interface number 0 [ 1106.323805][ T6104] usb 5-1: config 232 interface 133 has no altsetting 0 [ 1106.364215][ T6104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.364242][ T6104] usb 5-1: Product: syz [ 1106.364257][ T6104] usb 5-1: Manufacturer: syz [ 1106.364276][ T6104] usb 5-1: SerialNumber: syz [ 1106.783517][ T6104] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 1106.798380][ T6104] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1106.798476][ T6104] pac7311 5-1:232.133: probe with driver pac7311 failed with error -71 [ 1106.835999][ T6104] usb 5-1: USB disconnect, device number 22 [ 1107.103737][T14761] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.103752][T14761] binder: 14760:14761 ioctl 4018620d 200000004a80 returned -16 [ 1107.500353][T14765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1420'. [ 1107.514314][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 1107.514330][ T38] audit: type=1326 audit(1787506765.831:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.514375][ T38] audit: type=1326 audit(1787506765.831:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.515659][ T38] audit: type=1326 audit(1787506765.831:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.515724][ T38] audit: type=1326 audit(1787506765.831:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.528111][ T38] audit: type=1326 audit(1787506765.842:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.528231][ T38] audit: type=1326 audit(1787506765.842:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.528375][ T38] audit: type=1326 audit(1787506765.842:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.547560][ T38] audit: type=1326 audit(1787506765.863:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.547684][ T38] audit: type=1326 audit(1787506765.863:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14768 comm="syz.2.1421" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efc3a5be0d9 code=0x7ffc0000 [ 1107.931040][T14776] FAULT_INJECTION: forcing a failure. [ 1107.931040][T14776] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.931082][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.8.1424 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1107.931114][T14776] Tainted: [L]=SOFTLOCKUP [ 1107.931123][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.931137][T14776] Call Trace: [ 1107.931147][T14776] [ 1107.931157][T14776] dump_stack_lvl+0xe8/0x150 [ 1107.931218][T14776] should_fail_ex+0x46b/0x600 [ 1107.931258][T14776] should_failslab+0xa8/0x100 [ 1107.931288][T14776] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1107.931313][T14776] ? binder_transaction+0x6dc/0x6fc0 [ 1107.931346][T14776] ? binder_transaction+0x6dc/0x6fc0 [ 1107.931397][T14776] binder_transaction+0x6dc/0x6fc0 [ 1107.931453][T14776] ? is_bpf_text_address+0x292/0x2b0 [ 1107.931518][T14776] ? __pfx_binder_transaction+0x10/0x10 [ 1107.931570][T14776] ? __lock_acquire+0x683/0x2ce0 [ 1107.931598][T14776] ? __lock_acquire+0x683/0x2ce0 [ 1107.931635][T14776] ? __lock_acquire+0x683/0x2ce0 [ 1107.931667][T14776] ? __lock_acquire+0x683/0x2ce0 [ 1107.931702][T14776] ? __lock_acquire+0x683/0x2ce0 [ 1107.931732][T14776] ? __might_fault+0xaf/0x130 [ 1107.931757][T14776] ? __might_fault+0xaf/0x130 [ 1107.931801][T14776] binder_ioctl_write_read+0xb5c/0xa5d0 [ 1107.931873][T14776] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1107.931909][T14776] ? stack_depot_save_flags+0x33/0x7f0 [ 1107.931942][T14776] ? __lock_acquire+0x683/0x2ce0 [ 1107.931972][T14776] ? do_raw_spin_lock+0x12b/0x2f0 [ 1107.932018][T14776] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1107.932061][T14776] ? reacquire_held_locks+0x104/0x190 [ 1107.932099][T14776] ? rt_spin_unlock+0x159/0x200 [ 1107.932150][T14776] ? binder_get_thread+0x176/0x6d0 [ 1107.932180][T14776] ? binder_ioctl+0x189/0x1b10 [ 1107.932220][T14776] binder_ioctl+0x420/0x1b10 [ 1107.932250][T14776] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1107.932286][T14776] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1107.932325][T14776] ? do_vfs_ioctl+0x1184/0x1550 [ 1107.932348][T14776] ? __pfx_binder_ioctl+0x10/0x10 [ 1107.932381][T14776] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1107.932404][T14776] ? __pfx_smack_log+0x10/0x10 [ 1107.932442][T14776] ? smk_tskacc+0x2fb/0x370 [ 1107.932476][T14776] ? smack_file_ioctl+0x2c4/0x370 [ 1107.932512][T14776] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1107.932555][T14776] ? __fget_files+0x2a/0x420 [ 1107.932585][T14776] ? __fget_files+0x3a8/0x420 [ 1107.932615][T14776] ? __fget_files+0x2a/0x420 [ 1107.932648][T14776] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1107.932682][T14776] ? __pfx_binder_ioctl+0x10/0x10 [ 1107.932714][T14776] __se_sys_ioctl+0xff/0x170 [ 1107.932739][T14776] do_syscall_64+0x166/0x520 [ 1107.932768][T14776] ? trace_irq_disable+0x3b/0x140 [ 1107.932793][T14776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.932817][T14776] ? clear_bhb_loop+0x70/0xc0 [ 1107.932845][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.932869][T14776] RIP: 0033:0x7f300552e0d9 [ 1107.932890][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.932910][T14776] RSP: 002b:00007f3003786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.932934][T14776] RAX: ffffffffffffffda RBX: 00007f30057b5fa0 RCX: 00007f300552e0d9 [ 1107.932951][T14776] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1107.932966][T14776] RBP: 00007f3003786090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.932981][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.932994][T14776] R13: 00007f30057b6038 R14: 00007f30057b5fa0 R15: 00007ffeff9c0cc8 [ 1107.933029][T14776] [ 1112.017491][ T38] audit: type=1107 audit(1787506770.514:1472): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1112.843752][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1431'. [ 1112.949597][T14797] FAULT_INJECTION: forcing a failure. [ 1112.949597][T14797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.949643][T14797] CPU: 1 UID: 0 PID: 14797 Comm: syz.7.1416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1112.949668][T14797] Tainted: [L]=SOFTLOCKUP [ 1112.949674][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1112.949685][T14797] Call Trace: [ 1112.949692][T14797] [ 1112.949700][T14797] dump_stack_lvl+0xe8/0x150 [ 1112.949736][T14797] should_fail_ex+0x46b/0x600 [ 1112.949776][T14797] _copy_from_iter+0x1d3/0x1660 [ 1112.949804][T14797] ? rcu_is_watching+0x16/0xb0 [ 1112.949828][T14797] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1112.949869][T14797] ? __pfx__copy_from_iter+0x10/0x10 [ 1112.949893][T14797] ? __alloc_skb+0x27a/0x7a0 [ 1112.949920][T14797] ? __alloc_skb+0x27a/0x7a0 [ 1112.949949][T14797] ? netlink_sendmsg+0x650/0xb40 [ 1112.949972][T14797] ? skb_put+0x112/0x210 [ 1112.950002][T14797] netlink_sendmsg+0x6c0/0xb40 [ 1112.950031][T14797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.950072][T14797] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1112.950098][T14797] ? __kernel_text_address+0xd/0x30 [ 1112.950117][T14797] ? unwind_get_return_address+0x4d/0x90 [ 1112.950142][T14797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.950164][T14797] sock_sendmsg_nosec+0x13a/0x180 [ 1112.950196][T14797] ____sys_sendmsg+0x565/0x870 [ 1112.950218][T14797] ? __might_fault+0xaf/0x130 [ 1112.950247][T14797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1112.950274][T14797] ? import_iovec+0x73/0xa0 [ 1112.950297][T14797] ___sys_sendmsg+0x2a5/0x360 [ 1112.950316][T14797] ? __lock_acquire+0x683/0x2ce0 [ 1112.950343][T14797] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.950396][T14797] ? __fget_files+0x2a/0x420 [ 1112.950428][T14797] ? __fget_files+0x3a8/0x420 [ 1112.950464][T14797] __x64_sys_sendmsg+0x1b7/0x290 [ 1112.950484][T14797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1112.950523][T14797] do_syscall_64+0x166/0x520 [ 1112.950547][T14797] ? trace_irq_disable+0x3b/0x140 [ 1112.950566][T14797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.950590][T14797] ? clear_bhb_loop+0x70/0xc0 [ 1112.950616][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.950633][T14797] RIP: 0033:0x7f74ff79e0d9 [ 1112.950650][T14797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.950665][T14797] RSP: 002b:00007f74fd9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1112.950684][T14797] RAX: ffffffffffffffda RBX: 00007f74ffa25fa0 RCX: 00007f74ff79e0d9 [ 1112.950698][T14797] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1112.950710][T14797] RBP: 00007f74fd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.950721][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.950731][T14797] R13: 00007f74ffa26038 R14: 00007f74ffa25fa0 R15: 00007fff13bfcc48 [ 1112.950759][T14797] [ 1114.810954][T14832] trusted_key: syz.8.1435 sent an empty control message without MSG_MORE. [ 1116.325968][T14845] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1436'. [ 1116.325995][T14845] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1436'. [ 1118.070117][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1437'. [ 1118.072520][T14844] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1437'. [ 1119.387584][ T5715] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1120.341528][ T5715] usb 8-1: Using ep0 maxpacket: 16 [ 1120.342389][ T5715] usb 8-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 1120.345066][ T5715] usb 8-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1120.345101][ T5715] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1120.345138][ T5715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.394050][ T5715] usb 8-1: config 0 descriptor?? [ 1120.670151][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.687848][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.709207][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.720643][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.756058][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.770872][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.810891][ T5715] usbhid 8-1:0.0: can't add hid device: -71 [ 1120.811020][ T5715] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1120.863862][ T5715] usb 8-1: USB disconnect, device number 35 [ 1121.140161][T10462] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1121.285510][T10462] usb 7-1: Using ep0 maxpacket: 32 [ 1121.290717][T10462] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1121.290775][T10462] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1121.292414][T10462] usb 7-1: config 1 has an invalid interface number: 129 but max is 2 [ 1121.292440][T10462] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.292462][T10462] usb 7-1: config 1 has no interface number 2 [ 1121.292539][T10462] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1121.292568][T10462] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1121.367181][T10462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.367213][T10462] usb 7-1: Product: syz [ 1121.367229][T10462] usb 7-1: Manufacturer: syz [ 1121.367246][T10462] usb 7-1: SerialNumber: syz [ 1121.682757][T14882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.691971][T14882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.744986][T10462] usb 7-1: Fast Track Pro switching to config #2 [ 1121.783760][T10462] usb 7-1: USB disconnect, device number 31 [ 1121.854595][T12689] udevd[12689]: setting mode of /dev/bus/usb/007/031 to 020664 failed: No such file or directory [ 1121.854800][T12689] udevd[12689]: setting owner of /dev/bus/usb/007/031 to uid=0, gid=0 failed: No such file or directory [ 1122.202550][T14901] gretap1: entered allmulticast mode [ 1125.269560][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1453'. [ 1125.272690][T14918] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1453'. [ 1125.802506][T14932] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1454'. [ 1126.116513][T14933] afs: Unknown parameter 'd&qyn' [ 1126.908505][T14924] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1126.908579][T14924] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1126.908640][T14924] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1127.139327][T14924] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1127.223010][T14924] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1128.940999][T10462] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1129.089397][T10462] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1129.097013][T10462] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1129.097038][T10462] usb 5-1: Product: syz [ 1129.097052][T10462] usb 5-1: Manufacturer: syz [ 1129.097066][T10462] usb 5-1: SerialNumber: syz [ 1129.149314][T10462] usb 5-1: config 0 descriptor?? [ 1129.162796][T10462] ch341 5-1:0.0: ch341-uart converter detected [ 1129.407168][T10462] usb 5-1: failed to receive control message: -71 [ 1129.407231][T10462] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1129.440112][T10462] usb 5-1: USB disconnect, device number 23 [ 1129.456942][T10462] ch341 5-1:0.0: device disconnected [ 1131.527362][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1465'. [ 1131.535020][T14969] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1465'. [ 1131.905334][T14977] key id 000004d2 not found [ 1131.924426][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 1132.372446][T14986] FAULT_INJECTION: forcing a failure. [ 1132.372446][T14986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.372481][T14986] CPU: 1 UID: 0 PID: 14986 Comm: syz.7.1470 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1132.372507][T14986] Tainted: [L]=SOFTLOCKUP [ 1132.372515][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1132.372526][T14986] Call Trace: [ 1132.372534][T14986] [ 1132.372542][T14986] dump_stack_lvl+0xe8/0x150 [ 1132.372572][T14986] should_fail_ex+0x46b/0x600 [ 1132.372599][T14986] _copy_to_user+0x31/0xb0 [ 1132.372617][T14986] simple_read_from_buffer+0xe1/0x170 [ 1132.372641][T14986] proc_fail_nth_read+0x1be/0x230 [ 1132.372665][T14986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1132.372689][T14986] ? rw_verify_area+0x250/0x4d0 [ 1132.372711][T14986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1132.372731][T14986] vfs_read+0x219/0xa90 [ 1132.372756][T14986] ? __pfx_vfs_read+0x10/0x10 [ 1132.372778][T14986] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1132.372800][T14986] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1132.372818][T14986] ? mutex_lock_nested+0x152/0x1d0 [ 1132.372831][T14986] ? fdget_pos+0x252/0x320 [ 1132.372856][T14986] ksys_read+0x156/0x270 [ 1132.372878][T14986] ? __pfx_ksys_read+0x10/0x10 [ 1132.372906][T14986] do_syscall_64+0x166/0x520 [ 1132.372925][T14986] ? trace_irq_disable+0x3b/0x140 [ 1132.372941][T14986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.372956][T14986] ? clear_bhb_loop+0x70/0xc0 [ 1132.372974][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.372989][T14986] RIP: 0033:0x7f74ff75e90e [ 1132.373003][T14986] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1132.373017][T14986] RSP: 002b:00007f74fd9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1132.373033][T14986] RAX: ffffffffffffffda RBX: 00007f74fd9f66c0 RCX: 00007f74ff75e90e [ 1132.373043][T14986] RDX: 000000000000000f RSI: 00007f74fd9f60a0 RDI: 0000000000000004 [ 1132.373053][T14986] RBP: 00007f74fd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.373062][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.373070][T14986] R13: 00007f74ffa26038 R14: 00007f74ffa25fa0 R15: 00007fff13bfcc48 [ 1132.373092][T14986] [ 1132.914926][ T200] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1133.426941][ T200] usb 9-1: Using ep0 maxpacket: 8 [ 1133.445614][ T200] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1133.462318][ T200] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1133.462360][ T200] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1133.462376][ T200] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1133.462394][ T200] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1133.462412][ T200] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1133.462442][ T200] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.661701][T14992] afs: Unknown parameter 'd&qyn' [ 1133.929189][ T200] usb 9-1: usb_control_msg returned -32 [ 1133.929222][ T200] usbtmc 9-1:16.0: can't read capabilities [ 1134.335686][T14987] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 1134.496470][T11878] usb 9-1: USB disconnect, device number 25 [ 1134.857483][ T5594] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1135.039694][ T5594] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 1135.041368][ T5594] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.041422][ T5594] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.044971][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.044997][ T5594] usb 7-1: Product: syz [ 1135.045117][ T5594] usb 7-1: Manufacturer: syz [ 1135.045135][ T5594] usb 7-1: SerialNumber: syz [ 1138.041359][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1478'. [ 1138.043580][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1478'. [ 1138.138518][ T10] usb 7-1: USB disconnect, device number 32 [ 1138.566873][T15048] Bluetooth: MGMT ver 1.23 [ 1138.779878][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1138.898940][T15058] loop9: detected capacity change from 0 to 524287997 [ 1138.952327][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1138.956190][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1138.957517][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1138.957568][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1138.957592][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1138.957617][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1138.957644][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.957680][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.419865][ T10] usb 7-1: usb_control_msg returned -32 [ 1139.419910][ T10] usbtmc 7-1:16.0: can't read capabilities [ 1139.537719][T15051] nvme nvme0: rdma connection establishment failed (-104) [ 1139.858176][T15064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1140.165222][T15054] syz.8.1483 (15054) used greatest stack depth: 18912 bytes left [ 1140.827571][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.766045][ T38] audit: type=1326 audit(1787506802.840:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.4.1488" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46c481e0d9 code=0x0 [ 1143.062562][ T10] usb 7-1: USB disconnect, device number 33 [ 1143.640058][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1495'. [ 1143.641082][T15109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1495'. [ 1143.670848][T15108] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1479'. [ 1143.670873][T15108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1147.448439][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1500'. [ 1151.296432][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.296506][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.676320][ T5715] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1151.971114][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 1151.973045][ T5715] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1151.988065][ T5715] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1151.988130][ T5715] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1151.988154][ T5715] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1151.988179][ T5715] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1151.988221][ T5715] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.988265][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.306676][ T5715] usb 3-1: GET_CAPABILITIES returned 0 [ 1152.306727][ T5715] usbtmc 3-1:16.0: can't read capabilities [ 1152.532582][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.532669][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.532742][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.571574][T10462] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1152.598712][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.598802][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.598880][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.611271][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.611486][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.659837][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.659927][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.660001][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.660838][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.660917][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.660991][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.661451][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1152.661537][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1152.795750][T10823] usb 3-1: USB disconnect, device number 18 [ 1152.918361][T10462] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1152.935347][T10462] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.935433][T10462] usb 9-1: Product: syz [ 1152.935449][T10462] usb 9-1: Manufacturer: syz [ 1152.935464][T10462] usb 9-1: SerialNumber: syz [ 1152.999137][T10462] usb 9-1: config 0 descriptor?? [ 1153.043780][T10462] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1153.740926][T10462] gspca_sunplus: reg_w_riv err -71 [ 1153.741036][T10462] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 1153.784678][T10462] usb 9-1: USB disconnect, device number 26 [ 1156.348183][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1512'. [ 1156.395695][T15189] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1512'. [ 1156.412109][T15199] ufs: You didn't specify the type of your ufs filesystem [ 1156.412109][T15199] [ 1156.412109][T15199] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1156.412109][T15199] [ 1156.412109][T15199] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1156.575776][T15199] ufs: ufs_fill_super(): bad magic number [ 1158.248440][ T6167] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1158.392563][ T6167] usb 9-1: Using ep0 maxpacket: 8 [ 1158.393548][ T6167] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1158.397864][ T6167] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1158.397927][ T6167] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1158.397953][ T6167] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1158.397981][ T6167] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1158.398007][ T6167] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.398053][ T6167] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.849485][ T6167] usb 9-1: GET_CAPABILITIES returned 0 [ 1159.849534][ T6167] usbtmc 9-1:16.0: can't read capabilities [ 1160.055585][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.055691][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.055768][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.056106][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.056178][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.056251][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.145483][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.145857][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.145936][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.146012][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.149291][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.149375][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.149450][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.149754][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.149830][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.149903][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1160.269116][ T5715] usb 9-1: USB disconnect, device number 27 [ 1161.113157][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1529'. [ 1161.125168][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1529'. [ 1163.811838][T15278] syz.2.1533 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 1163.811884][T15278] CPU: 1 UID: 0 PID: 15278 Comm: syz.2.1533 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1163.811916][T15278] Tainted: [L]=SOFTLOCKUP [ 1163.811924][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.811938][T15278] Call Trace: [ 1163.811948][T15278] [ 1163.811958][T15278] dump_stack_lvl+0xe8/0x150 [ 1163.811998][T15278] dump_header+0xd3/0x4b0 [ 1163.812034][T15278] oom_kill_process+0x3ab/0x9e0 [ 1163.812071][T15278] out_of_memory+0x1064/0x1480 [ 1163.812114][T15278] ? __pfx_out_of_memory+0x10/0x10 [ 1163.812144][T15278] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1163.812176][T15278] ? _mutex_lock_killable+0x152/0x1d0 [ 1163.812199][T15278] ? try_charge_memcg+0xbbe/0x15c0 [ 1163.812231][T15278] try_charge_memcg+0xc7d/0x15c0 [ 1163.812273][T15278] ? __pfx_try_charge_memcg+0x10/0x10 [ 1163.812307][T15278] ? percpu_ref_tryget+0x15/0x180 [ 1163.812348][T15278] ? __memcg_slab_post_alloc_hook+0x755/0xf60 [ 1163.812377][T15278] ? __memcg_slab_post_alloc_hook+0x755/0xf60 [ 1163.812405][T15278] __memcg_slab_post_alloc_hook+0x94e/0xf60 [ 1163.812452][T15278] __kmalloc_cache_noprof+0x42f/0x6b0 [ 1163.812478][T15278] ? kvm_hv_vcpu_init+0x8c/0xb00 [ 1163.812501][T15278] ? kvm_hv_vcpu_init+0x8c/0xb00 [ 1163.812534][T15278] kvm_hv_vcpu_init+0x8c/0xb00 [ 1163.812556][T15278] ? kvm_hv_get_msr_common+0xb3/0x1790 [ 1163.812585][T15278] kvm_hv_get_msr_common+0xf0/0x1790 [ 1163.812619][T15278] ? __pfx_kvm_hv_get_msr_common+0x10/0x10 [ 1163.812653][T15278] ? kvm_get_msr_common+0x1dff/0x3210 [ 1163.812716][T15278] ? vmx_get_msr+0x112b/0x1700 [ 1163.812751][T15278] __kvm_get_msr+0x31d/0x530 [ 1163.812777][T15278] ? __pfx___kvm_get_msr+0x10/0x10 [ 1163.812811][T15278] ? __pfx_do_get_msr+0x10/0x10 [ 1163.812842][T15278] kvm_get_msr_ignored_check+0x2a/0x400 [ 1163.812868][T15278] ? __pfx_do_get_msr+0x10/0x10 [ 1163.812900][T15278] msr_io+0x3f5/0x8b0 [ 1163.812933][T15278] ? __pfx_do_get_msr+0x10/0x10 [ 1163.812964][T15278] ? __pfx_msr_io+0x10/0x10 [ 1163.812996][T15278] ? __srcu_check_read_flavor+0x117/0x260 [ 1163.813026][T15278] kvm_arch_vcpu_ioctl+0x1362/0x3080 [ 1163.813061][T15278] ? kvm_arch_vcpu_ioctl+0x1325/0x3080 [ 1163.813092][T15278] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1163.813131][T15278] ? is_bpf_text_address+0x26/0x2b0 [ 1163.813189][T15278] ? is_bpf_text_address+0x26/0x2b0 [ 1163.813223][T15278] ? is_bpf_text_address+0x292/0x2b0 [ 1163.813252][T15278] ? is_bpf_text_address+0x26/0x2b0 [ 1163.813285][T15278] ? kernel_text_address+0xa5/0xe0 [ 1163.813309][T15278] ? __kernel_text_address+0xd/0x30 [ 1163.813331][T15278] ? unwind_get_return_address+0x4d/0x90 [ 1163.813356][T15278] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1163.813396][T15278] ? arch_stack_walk+0xfb/0x150 [ 1163.813435][T15278] ? stack_trace_save+0xa9/0x100 [ 1163.813457][T15278] ? __pfx_stack_trace_save+0x10/0x10 [ 1163.813477][T15278] ? kasan_save_track+0x4f/0x80 [ 1163.813502][T15278] ? stack_depot_save_flags+0x33/0x7f0 [ 1163.813537][T15278] ? __lock_acquire+0x683/0x2ce0 [ 1163.813567][T15278] ? kasan_save_track+0x4f/0x80 [ 1163.813587][T15278] ? kasan_save_track+0x3e/0x80 [ 1163.813608][T15278] ? kasan_save_free_info+0x40/0x50 [ 1163.813638][T15278] ? __kasan_slab_free+0x5c/0x80 [ 1163.813660][T15278] ? kfree+0x1c5/0x6d0 [ 1163.813692][T15278] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1163.813723][T15278] ? security_file_ioctl+0xc3/0x2a0 [ 1163.813756][T15278] ? __se_sys_ioctl+0x47/0x170 [ 1163.813776][T15278] ? do_syscall_64+0x166/0x520 [ 1163.813804][T15278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.813851][T15278] ? __lock_acquire+0x683/0x2ce0 [ 1163.813924][T15278] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1163.813957][T15278] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1163.813988][T15278] ? _mutex_lock_killable+0x152/0x1d0 [ 1163.814010][T15278] ? kvm_vcpu_ioctl+0x282/0xfe0 [ 1163.814039][T15278] kvm_vcpu_ioctl+0x7e6/0xfe0 [ 1163.814070][T15278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1163.814093][T15278] ? hook_file_ioctl+0x1f5/0x610 [ 1163.814125][T15278] ? __asan_memset+0x22/0x50 [ 1163.814158][T15278] ? smack_file_ioctl+0x335/0x370 [ 1163.814191][T15278] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1163.814234][T15278] ? __fget_files+0x2a/0x420 [ 1163.814261][T15278] ? __fget_files+0x3a8/0x420 [ 1163.814288][T15278] ? __fget_files+0x2a/0x420 [ 1163.814319][T15278] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1163.814358][T15278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1163.814410][T15278] __se_sys_ioctl+0xff/0x170 [ 1163.814436][T15278] do_syscall_64+0x166/0x520 [ 1163.814471][T15278] ? trace_irq_disable+0x3b/0x140 [ 1163.814494][T15278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.814518][T15278] ? clear_bhb_loop+0x70/0xc0 [ 1163.814547][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.814571][T15278] RIP: 0033:0x7efc3a5be0d9 [ 1163.814593][T15278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.814614][T15278] RSP: 002b:00007efc387d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.814639][T15278] RAX: ffffffffffffffda RBX: 00007efc3a846180 RCX: 00007efc3a5be0d9 [ 1163.814657][T15278] RDX: 0000200000000140 RSI: 00000000c008ae88 RDI: 0000000000000008 [ 1163.814672][T15278] RBP: 00007efc3a655024 R08: 0000000000000000 R09: 0000000000000000 [ 1163.814688][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.814702][T15278] R13: 00007efc3a846218 R14: 00007efc3a846180 R15: 00007ffe31e75568 [ 1163.814740][T15278] [ 1163.814757][T15278] memory: usage 0kB, limit 0kB, failcnt 19 [ 1163.814773][T15278] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1163.814789][T15278] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1163.814803][T15278] Memory cgroup stats for /syz2/test: [ 1163.815252][T15278] cache 0 [ 1163.815263][T15278] rss 0 [ 1163.815271][T15278] shmem 0 [ 1163.815279][T15278] mapped_file 0 [ 1163.815288][T15278] dirty 0 [ 1163.815295][T15278] writeback 0 [ 1163.815304][T15278] workingset_refault_anon 0 [ 1163.815314][T15278] workingset_refault_file 0 [ 1163.815323][T15278] swap 0 [ 1163.815331][T15278] swapcached 0 [ 1163.815340][T15278] pgpgin 0 [ 1163.815348][T15278] pgpgout 0 [ 1163.815356][T15278] pgfault 0 [ 1163.815364][T15278] pgmajfault 0 [ 1163.815385][T15278] inactive_anon 0 [ 1163.815394][T15278] active_anon 0 [ 1163.815402][T15278] inactive_file 0 [ 1163.815411][T15278] active_file 0 [ 1163.815420][T15278] unevictable 0 [ 1163.815428][T15278] hierarchical_memory_limit 0 [ 1163.815438][T15278] hierarchical_memsw_limit 9223372036854771712 [ 1163.815449][T15278] total_cache 0 [ 1163.815456][T15278] total_rss 0 [ 1163.815465][T15278] total_shmem 0 [ 1163.815473][T15278] total_mapped_file 0 [ 1163.815483][T15278] total_dirty 0 [ 1163.815491][T15278] total_writeback 0 [ 1163.815500][T15278] total_workingset_refault_anon 0 [ 1163.815509][T15278] total_workingset_refault_file 0 [ 1163.815520][T15278] total_swap 0 [ 1163.815528][T15278] total_swapcached 0 [ 1163.815537][T15278] total_pgpgin 0 [ 1163.815546][T15278] total_pgpgout 0 [ 1163.815554][T15278] total_pgfault 0 [ 1163.815563][T15278] total_pgmajfault 0 [ 1163.815572][T15278] total_inactive_anon 0 [ 1163.815581][T15278] total_active_anon 0 [ 1163.815589][T15278] total_inactive_file 0 [ 1163.815598][T15278] total_active_file 0 [ 1163.815607][T15278] total_unevictable 0 [ 1163.815616][T15278] anon_cost 0 [ 1163.815625][T15278] file_cost 0 [ 1163.815648][T15278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1533,pid=15268,uid=0 [ 1163.818456][T15278] Memory cgroup out of memory: Killed process 15268 (syz.2.1533) total-vm:104564kB, anon-rss:1440kB, file-rss:23132kB, shmem-rss:11480kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 1165.738807][ T40] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1165.738831][ T40] in_atomic(): 0, irqs_disabled(): 0, non_block: 1, pid: 40, name: oom_reaper [ 1165.738849][ T40] preempt_count: 0, expected: 0 [ 1165.738860][ T40] RCU nest depth: 0, expected: 0 [ 1165.738871][ T40] locks held by oom_reaper/40: 4, last CPU#0: [ 1165.738938][ T40] #0: ffff888011a41f30 (&mm->mmap_lock){++++}-{4:4}, at: oom_reaper+0x2b4/0xc10 [ 1165.739041][ T40] #1: ffffffff8e309620 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: zap_vma_for_reaping+0x193/0x380 [ 1165.739101][ T40] #2: ffffffff8e309678 (srcu){.+.+}-{0:0}, at: __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 1165.739154][ T40] #3: ffff88805e981360 (&kvm->mn_invalidate_lock){+.+.}-{3:3}, at: kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 1165.739221][ T40] CPU: 0 UID: 0 PID: 40 Comm: oom_reaper Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1165.739250][ T40] Tainted: [L]=SOFTLOCKUP [ 1165.739262][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1165.739276][ T40] Call Trace: [ 1165.739285][ T40] [ 1165.739295][ T40] dump_stack_lvl+0xe8/0x150 [ 1165.739348][ T40] __might_resched+0x31b/0x470 [ 1165.739385][ T40] rt_spin_lock+0xc2/0x400 [ 1165.739412][ T40] ? __pfx_rt_spin_lock+0x10/0x10 [ 1165.739438][ T40] ? __lock_acquire+0x683/0x2ce0 [ 1165.739467][ T40] kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 1165.739518][ T40] ? __pfx_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 1165.739546][ T40] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 1165.739589][ T40] __mmu_notifier_invalidate_range_start+0x709/0xb80 [ 1165.739623][ T40] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 1165.739649][ T40] ? __pfx___mmu_notifier_invalidate_range_start+0x10/0x10 [ 1165.739681][ T40] ? do_raw_spin_lock+0x12b/0x2f0 [ 1165.739723][ T40] ? zap_vma_for_reaping+0x193/0x380 [ 1165.739754][ T40] zap_vma_for_reaping+0x1f7/0x380 [ 1165.739788][ T40] ? __pfx_zap_vma_for_reaping+0x10/0x10 [ 1165.739857][ T40] oom_reaper+0x519/0xc10 [ 1165.739887][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1165.739934][ T40] ? __pfx_oom_reaper+0x10/0x10 [ 1165.739980][ T40] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1165.740017][ T40] ? __kthread_parkme+0x71/0x1f0 [ 1165.740049][ T40] ? __kthread_parkme+0x199/0x1f0 [ 1165.740086][ T40] kthread+0x38b/0x470 [ 1165.740119][ T40] ? __pfx_oom_reaper+0x10/0x10 [ 1165.740163][ T40] ? __pfx_kthread+0x10/0x10 [ 1165.740201][ T40] ret_from_fork+0x514/0xb70 [ 1165.740240][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.740275][ T40] ? __switch_to+0xc89/0x1420 [ 1165.740307][ T40] ? __pfx_kthread+0x10/0x10 [ 1165.740343][ T40] ret_from_fork_asm+0x1a/0x30 [ 1165.740386][ T40] [ 1166.106694][ T40] oom_reaper: reaped process 15268 (syz.2.1533), now anon-rss:0kB, file-rss:22096kB, shmem-rss:11480kB [ 1168.606088][ T5243] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1170.208869][ T5243] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1172.550805][ T5243] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1173.108726][ T5243] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1174.553955][ T5243] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1175.091895][ T5243] 8021q: adding VLAN 0 to HW filter on device eth12