last executing test programs: 14m59.281045301s ago: executing program 32 (id=2771): connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x8}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 14m4.703513734s ago: executing program 2 (id=3064): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa220480, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 13m53.012680484s ago: executing program 5 (id=3183): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r0, 0x25, 0x4) 13m52.563677827s ago: executing program 5 (id=3188): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x11cf, &(0x7f0000000280)={0x0, 0xfbaf, 0x1000, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 13m51.321858348s ago: executing program 5 (id=3196): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) 13m51.10358173s ago: executing program 5 (id=3199): setregid(0x0, 0xee00) r0 = syz_open_procfs(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000ac0)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) 13m51.088479055s ago: executing program 2 (id=3079): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x2, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) 13m50.787736633s ago: executing program 5 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400000002060103000000000000000002004000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000280007801800028014000400000000000000000000000000000000000c00018008000140640100fe05000500020000000500010006"], 0x74}}, 0x8000) 13m50.786999659s ago: executing program 2 (id=3203): socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x103840000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 13m49.322988555s ago: executing program 5 (id=3206): syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = socket(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r4, 0x0, 0x20008001) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2002) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 13m49.14043619s ago: executing program 2 (id=3207): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 13m48.779503553s ago: executing program 2 (id=3208): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) write$snapshot(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 13m48.281687218s ago: executing program 2 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009cc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13m46.903848469s ago: executing program 0 (id=3219): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x11cf, &(0x7f0000000280)={0x0, 0xfbaf, 0x1000, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 13m46.622369809s ago: executing program 0 (id=3220): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) 13m46.299103622s ago: executing program 0 (id=3221): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, 0x0, 0x0, 0x40) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) 13m46.175671728s ago: executing program 0 (id=3222): setregid(0x0, 0xee00) r0 = syz_open_procfs(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000ac0)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) 13m46.040778582s ago: executing program 0 (id=3223): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x18}, 0x40440c0) 13m45.850096594s ago: executing program 0 (id=3224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 13m35.930629259s ago: executing program 33 (id=3195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x3, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) 13m33.441702104s ago: executing program 34 (id=3206): syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = socket(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r4, 0x0, 0x20008001) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2002) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 13m32.44900375s ago: executing program 35 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009cc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13m30.419638532s ago: executing program 36 (id=3224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 6m37.748747722s ago: executing program 8 (id=4869): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x10, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x80000002}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0xf7, 0x8, {0xa, 0x25, 0x25, 0x0, 0xff, 0x24d8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x9, 0x3, {0xa, 0x25, 0x25, 0x2, 0x9, 0xfc01}}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028006001300"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 6m33.02070367s ago: executing program 8 (id=4877): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x20c200a2}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_emit_ethernet(0x8f, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003bbbbbbbbbbbb8847000000000000000000000000000f0f0000000c0000ab9e772a6946001924bb5f0c74c6dec78b1d8649453c720897ae21acbcec4c26ff5a67c6cf6e0b3e67525cfd63b05b3b45a0bee20414e87feb559d233c56c0c32e1225e73516a20dfd24bf5cabc4ff520430368d494740d70f057ebb82e168ae36b12ba0568a75fd1be7120c1d3cb219c2459cc2d5018bb18ef65cdf8cd20d20df79b223995339233851764f5f70928193c6b7e6d1e87816951cc8112b"], &(0x7f0000000380)={0x1, 0x4, [0xd9a, 0x8a4, 0x731, 0x8bb]}) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d00009090508"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 6m29.536594618s ago: executing program 8 (id=4885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$get_keyring_id(0x0, 0x0, 0x3) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000300000404000000ffc5dacae0431d3f32c5dd2b5c1d73accc6bac2cfe1f516e612b1cdf750bdcb1f76e559873d2fdb97d9c01003161d864e96e3f29154f3fb0d16c490db65219d5ef20813d4adff48465d85cc4d2ff8b1a450d51a7d4f8b8588cf1e00ea7a68a8314310f1819890e619cd5c13effc7f0266658ae3b2cd4b34f9f6bce6c94017bb61cb614ab1a49c64eb0db9039f4c1d6a09a2c29faef0ad4f72c5b43fdeda7267dad22d6cc08d8e6ff8fd02a6532931e6d310451e976"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) 6m29.419735595s ago: executing program 7 (id=4886): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f00000001c0)=@ethtool_dump={0x3f, 0x1, 0x800, 0x7f, "1425071a0378fc949c59ba6187cef0d3e9eb09d65b22c50262e1c12a8b6b92f87d1d63a9f8a49bc100b497e3bccae2ddbd75218c192aa2d126e849005841b1bef9eb3d1fdc76198ed8e6551b596f3519cab803c5cbd3233608f1bea751988345c4a1ad5a2a4d8b8f2c8924b6e856346bdcbb879555837ec219bd78122e6250"}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000180)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xc}}}, @hopopts_2292={{0x12, 0x29, 0x36, {0x4}}}], 0x30}, 0x440e0) 6m28.001417696s ago: executing program 8 (id=4887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, 0x0) setgroups(0x8, &(0x7f00000005c0)=[r7, 0x0, r3, r5, r7, r9, 0x0, 0x0]) 6m27.631822613s ago: executing program 7 (id=4889): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x14}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d00000000000030001280080001006873720024000280080002", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m23.496818046s ago: executing program 7 (id=4895): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0x18, 0x0, 0x0, @binary="0cac"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6m23.422007949s ago: executing program 8 (id=4896): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x20c200a2}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_emit_ethernet(0x8f, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003bbbbbbbbbbbb8847000000000000000000000000000f0f0000000c0000ab9e772a6946001924bb5f0c74c6dec78b1d8649453c720897ae21acbcec4c26ff5a67c6cf6e0b3e67525cfd63b05b3b45a0bee20414e87feb559d233c56c0c32e1225e73516a20dfd24bf5cabc4ff520430368d494740d70f057ebb82e168ae36b12ba0568a75fd1be7120c1d3cb219c2459cc2d5018bb18ef65cdf8cd20d20df79b223995339233851764f5f70928193c6b7e6d1e87816951cc8112b"], &(0x7f0000000380)={0x1, 0x4, [0xd9a, 0x8a4, 0x731, 0x8bb]}) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d00009090508"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto(r7, 0x0, 0x0, 0x80, &(0x7f0000001080)=@ll={0x11, 0x11, 0x0, 0x1, 0x8, 0x6, @local}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 6m23.101339476s ago: executing program 7 (id=4898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, 0x0) getgroups(0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xee01, 0xee00]) setgroups(0x8, &(0x7f00000005c0)=[r7, 0x0, r3, r5, r7, 0x0, r9, r9]) 6m21.775988162s ago: executing program 7 (id=4899): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f0000000540)=""/182, 0xb6}], 0x6}, 0x160) 6m21.380818953s ago: executing program 7 (id=4900): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2b6, 0x0, &(0x7f0000000680)="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", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) close(r0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfd32, &(0x7f0000000000)={&(0x7f00000000c0)=@getnexthop={0x20, 0x6a, 0xb0d, 0x0, 0x25dfdbfc, {0x3, 0x0, 0x0, 0x2}, [@NHA_MASTER={0x8, 0xe, 0x8}]}, 0x20}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 6m20.320438343s ago: executing program 8 (id=4903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x10) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6m6.26253797s ago: executing program 37 (id=4900): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2b6, 0x0, &(0x7f0000000680)="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", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) close(r0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfd32, &(0x7f0000000000)={&(0x7f00000000c0)=@getnexthop={0x20, 0x6a, 0xb0d, 0x0, 0x25dfdbfc, {0x3, 0x0, 0x0, 0x2}, [@NHA_MASTER={0x8, 0xe, 0x8}]}, 0x20}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 6m4.733294127s ago: executing program 38 (id=4903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x10) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 15.948020981s ago: executing program 6 (id=5871): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) 14.41471304s ago: executing program 6 (id=5874): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) 12.937942981s ago: executing program 4 (id=5883): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) fdatasync(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1=0x4d4, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = semget$private(0x0, 0x207, 0x0) semtimedop(r7, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1}) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) 10.142062207s ago: executing program 4 (id=5886): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000003000)='ns/uts\x00') socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.274164601s ago: executing program 3 (id=5889): openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c051fc6", @ANYRES16=r2, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) 9.125924942s ago: executing program 1 (id=5890): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) 8.9630669s ago: executing program 6 (id=5891): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x8) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002126, 0x0) 8.527637932s ago: executing program 1 (id=5892): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x74, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xa043}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 8.526780077s ago: executing program 6 (id=5893): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000300)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000040)="c2e512c476edbffe2d100000892f", 0xe}], 0x1}, 0x4000080) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x48010000}, {0x85, 0x0, 0x0, 0xcb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) poll(&(0x7f0000000080), 0x0, 0x864e) unshare(0x22020400) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000022c0)={0x14, r11, 0xba960a2220112c19, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008891}, 0x840) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000140)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x6c}}}], 0x30}}], 0x1, 0x40000000) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000000)=0xf22) r12 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000180)=0x3) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1) r13 = syz_open_dev$loop(&(0x7f00000004c0), 0xffffffff, 0x8000) ioctl$BLKALIGNOFF(r13, 0x127a, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3, 0x0, 0x2000, &(0x7f0000000180)="13"}], 0x1}) 8.418749213s ago: executing program 3 (id=5894): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "6d62bd7ddf14b33f7665f8ff264e738b7f66dba7"}, 0x15, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00'}) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x9, 0x9, 0x7, 0x3}, 0x10) r2 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$smackfs_labels_list(r2, &(0x7f00000001c0)={[{}, {'security.evm\x00'}, {'wg0\x00'}, {'##\\-'}, {'\\^)\x05*{'}, {}]}, 0x22) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000200)={0x2, 'team0\x00', {0x4}, 0x101}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0x7fffffff, @private0}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000280), r4}}, 0x18) r5 = syz_open_dev$vivid(&(0x7f0000000380), 0x3, 0x2) writev(r5, &(0x7f0000000500)=[{&(0x7f00000003c0)="f948", 0x2}, {&(0x7f0000000400)="f7116de098e8fd952c3c528788f42c05b1de1192672be47f1941d6ad9d9603a30ceac2c94698a008f37dddcfec8f87db9d157be95ae9fcfd5722f8d90ccc8bfc6fa6fcb92a1300e1a1f96eed5a75b0922b1d973de7baa8b9cd768beaed810c625665fee54b3dfa5a46bc4217ca133f51d69426b58e56f7e5beb99ecc605919381ef2ab809b8cbd18bc54acadf24a392df475bd03b05e69ba5786742c0f5c362c27f30f576795ab59c67ec49e45426d1c059a4c2ae44f361ba9bff425119f31a5c57a0103aba168bebc274f6c8a297897c2d1dab4901f7fa51052fa2b11baa7f9f02b74533bf19ae137ae3fd693bd24d21d5940ad65eb7f", 0xf7}], 0x2) syz_clone3(&(0x7f0000000780)={0x200000080, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x1b}, &(0x7f0000000600)=""/149, 0x95, &(0x7f00000006c0)=""/103, &(0x7f0000000740)=[0xffffffffffffffff], 0x1}, 0x58) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x6f}}}}, ["", ""]}, 0x28}}, 0x8000000) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000940)={0x8, @vbi={0x10, 0x80000001, 0x8, 0x3231564e, [0x400, 0x3], [0x9, 0x100], 0x1}}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0xb0fb}}, './file0\x00'}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000a80)={0xdb, 0x0, 0xfffffffffffffff7}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2c4, r9, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a4d0785}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x716c2a62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fb6847d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20e74545}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14228f25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41efbba6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2959277c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44418a63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe3f3a2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b60fd45}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x704ffdf0}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c36e1d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8fc4ea2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4896fba9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x220e62f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d43bcad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x154, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x490}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db8d5c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21c100ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ddb91f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a6119ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x319b3c70}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69000adb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9438}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bfd}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27a19acc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79145f20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d52e268}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eb83138}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa624}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d74ad52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f91368c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8a5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d7072e3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3908edf4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49315808}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb1a7e0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b8febea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f7744}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9522}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ee3523c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbab1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd21a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x132a47b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe736}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68d3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41a5}]}]}]}, 0x2c4}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1060}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004000}, 0x20040019) sendmmsg(r1, &(0x7f00000044c0)=[{{&(0x7f0000001040)=@isdn={0x22, 0x7, 0x9, 0x7, 0xe}, 0x80, &(0x7f0000001100)=[{&(0x7f00000010c0)="05b2b55f650442c901895088afc2159883", 0x11}], 0x1, &(0x7f0000001140)=[{0x80, 0x108, 0xd, "aea99a2f46b033cf5922764b00a71db57c9384591798bfcd6d9669df52f72b33ab03770752ac6e74f7608a4d0a6c31c1a8c014a3850f733f6c14ce7ae8d62ad14f7e163f965ee7f62309c916664514f6fc4e2bd2a7a34e38d23c2109e800b810f98896b7653decfd5cbe7c679e3382"}, {0x98, 0x88, 0x7e6, "124237ec41452481e4346edfda99f7403c7dcf6644e35868a50a3e8ed41dde4bd627f001738419901cbd59313da10d126f30387bd92c093dc253581cace420d085fb2fe208c7870bba28a08025d523a80fd95a2ac951bc2f81e3c490bee3cc34ccf30bf62455d3349da877f5ed0f870d4cbc4e7923ecfd6e7b1d19a5247caba970a39d91"}, {0xf0, 0x111, 0xa31, "7e424880126b4331fd519c64171ca68148742c5eb6bce88d32b93386bb84dbdd7ab7f3b90eb3410b06237c55636f3d129e376b371bf90334ca85bb502ce049a50f5d775980410a5669896bae4dacc6c200becf02d178ae6925806bb87be62348a7aeeb96b0b73bc630a9ac95b1df586ab146d036d85405351abe231da89cb49baff0010d0c8a53671fa231b12c95adf1ddf4b8c87376f4f8371601aafe3d5e9c6d40e8b72bde2c4211593bea64bfca8977b439f97ce8c067467f90320d0134942aed060a0e7ceb68fe82ff1aad72f0c1b466b71fe3c984d61b02d2"}], 0x208}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001380)="5f7738c2eca54d4eac69ee47f08c540f14582fc1adfd7794d53f6a6710d8755d47dff8bce871a19578518199d2c2797c334e16aa28ee59ae70cbd152676dddf5f0e50bad734a91b00b5a1b280e52a1078bbca56e6d18454ecf2405a6eb1eff2737ba8739afe93fa3f365d2f93ceac68b7f0b21f3b087bb8939e28e2598ac6ddfb63b63862a8f4628f3ed01225b391a74da59ef0db70ae734a4a10c1fffe9c49b72ef904a7bd914a9592b37eb22858ac6813f7f244b20b24e15c63a7a43fcf205d4f006f3451d984770e93e", 0xcb}, {&(0x7f0000001480)="5e547e39704ee3436a2f0fb5f966cc5efd0c35c23c83378dc04737e6b7ff921376cc172f4c2e", 0x26}, {&(0x7f00000014c0)="d6dd5c9812edae6e901aab9a774c6f8f15a9d6ef4049478d4acdd3fb515209", 0x1f}, {&(0x7f0000001500)="ea0afc5a5fbd8c8aed8539fe6f51d0b081248b3795d4a54050a680c7a29a41169d27a441e29cd3a7fda0d2d9a9d11d3f2fae9e873461e9ec153adfe211f309a6f86aa3355a0ef081aea9a3dde9355ef4f4a0b1505cc29db83dc851bcbb3b6e13c15eaadb186909d3ff1e8c37e1850c269dfaabcb1af5e10c14f11f6fb8c1005c", 0x80}, {&(0x7f0000001580)="fd38b3d2689368a24ec3100ab1fa047b5d1188fb07aa0a894dafa49a64aa571734c895e73ddac0c12ea18a3bbac413e74005fdb1d5d6c17ea2af4318b2286424ee51cd0c4014e92889a97413dba567d9be360f44dc6b9a90886da87f6b558e54b32dc267cd253bd682f77fc2078f882ebfde8b6248e21e106c45a6a51653d52d9fe5b4ce3385", 0x86}], 0x5, &(0x7f00000016c0)=[{0xd8, 0x10c, 0xff, "84696ef966b5d060e38e25bfccc0c1ac4a5e236b2fa01c41314a99950296038ac6e06957b0c5d4efa12c1f04e100c16024d726842f5f9f73953f5a2f89692249b07056a1547d0a9e5e5bb189c6b90a7db0fab0c25d51b4c0945a316d54959c57eaaa467b918ff5d7f7ef6218a910e6c718c265690168cc5a78a2b7d89f403e8e0e02d5bb9411df2fb7a0f09a5c38c0b68ee3b9728d5397ff36a39402fa5314f35ece7049e92bc31e48e9ac94aee5b3ec385dec0ee8d73705b44abf5d09c5a8652f21a13271de"}, {0x48, 0x1, 0x9, "6db6166a9d1602aaa340b0d93df443a74d4987f6344595894209cc2bb1e45f534fd6642e048c168e551edd53fd3a3207a4d4e2"}, {0xd8, 0x111, 0x4, "f10c340307a1fcb9aeedb618e220393698d8f0f879ee838b057e78da4337470393b1ae253e2dd8e7c56eabdfe27566922cce945c762930e6d5e0897e919ab9ed16f410cee96ec6f2242d8cc3e992465e6bf95a2431c1535c9f6751e7399c130a283c9af7bd84f04dafcf24869676977993fcfc01f8a4765c0a0fc5c51cd812e78fc1ed38b1e0bff1f306d4d068f14d5cfaf0fd7fdfa074aefc67595ee17fac6b04271411eb0551cef5516019f3b5c68a90f1c7de58cca4cfe834b1ae3b48f811db2e3cce"}], 0x1f8}}, {{&(0x7f00000018c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)="ff599c2a4ad22863b93515cd7913721c3f3ff3790d2e21097a46f1cc5e8c91fc9fd0d8b58f513808ce78ce94900ea4391a42456c954efb9e66fd2ccefbe6034d0d0d01080216d365dc94cd36aa727f8cdcc1800c815b1b605f539335f4be4ba2b74ad848577e905fdd787a3ce2d57cc2", 0x70}, {&(0x7f00000019c0)="e9a95f071f1744b9479cf1f479e0989b81ce9ea90eb2037a6114", 0x1a}, {&(0x7f0000001a00)="9f7051a59b58973bf321d3287cd3d6fb7da4051f4c627c0ad8715d8e53343cfb92", 0x21}], 0x3, &(0x7f0000001a80)=[{0x10, 0x10a, 0x5}, {0x18, 0x113, 0x4, "5b11be576796e1c4"}, {0x20, 0x113, 0x4, "8a44c1cd0d9c43ad54"}], 0x48}}, {{&(0x7f0000001b00)=@generic={0x25, "047622ac47b4aafe7fb00b366710f668921aa538b25196bd6fcc821990ecd8586054448f484349bef8b7db50f29201db62eba922f48ab3d716f4c96faa6892ffcf6aaab087953f781323ba3c3b2ee5fe2e24a6e3bd83f546d2423f45b446b4c4302b99d64f16cd34b4fb32b92b6b3164aeff951b31e05e607e954e680328"}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001b80)="13931bf3711b709d93e0801b389c846a799ef23b22e0f7e01010bda8ca27f672f1badbd3c9d2325bbdd841a839fbfa23cd7e52c70c2d8465cf4f97fd5863a9b685fb359fd93979701aa75bcc5545596a88554ec2c8502300c19bd2b982fe9c2cb3a4354fa35afb7ea253ce4348b446b1e953dfc712", 0x75}, {&(0x7f0000001c00)="6c59012ebb1ed81c6209c92d77fb76f93da2ee1f637ef87cf67cb0a5f75a79a109b546b06b168e81fe9793d0432973f3962a7cf12a2756a5a4a83cf8104889a9a32f4a5fa5ab4a1f5ad02fd2abe8f222063d7cd8f7424cfbbe6aebb7b7c492fce6793133ab0c669f53e678f76eb4f8745dadc3bedd45a12bf3737961a05c17b468cef8e444d6cb3ed40faaed8c8188109559d08601e5da2246ec49ab45aa243e156275112addd59eacbe0a878a1e7e5edd3ddeb88ece750480f3c3ddea9d380eef8a0eec1bb888d6e54d8bd422288ee3b962858c", 0xd4}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="402171827ae6663660730822ca429bb22b5c430009c0a4012e0fb0fa82a82b28dc6a5347bb37a639aa4ca60ffb8c4956b5215b87733628e75a83d18b4cf63559639d68eaa69d968c2cb1fb17b4613f7d62b5108a2e6a342855", 0x59}, {&(0x7f0000002d80)="5d17e68c6c9d31d9da7ea89945025542912e6ed0e5806ddd030a0ed60a3647d0010e56a9a047", 0x26}, {&(0x7f0000002dc0)="163fa0b7820cfc04df42d7e0ff2b1a9d2f9a67703f839dba9e113a954cf5a8ec076af3bcad4bd836fe24d5d97ed92869d2c5076c2f674d28e2906d76263d15794598ec4f7e5e0b2c39c37f4bbb447d45aee2b05d7535c74742fc173114a9c74f3e15800e29159a40e9c42d2b4983fa03b491e795172cc6412112348ee36e5329146351ae41228f143432430796514e23c62c5840c26b1bdec4ecc2799afbab0aee55d71913de19", 0xa7}, {&(0x7f0000002e80)="83f6df634e677c5e0fd1a22172957033b338b603ece209345c1f80d68792aa7229c789ed69257438a6fe3fdae146713e53d92bf645844791c06f3e3d9f346038a053b3fd528b68e8fae7b033ca377323c37a54bb799a0e928acaf75f6d6839d238a16983f1372efe6610888976b40c904de097465fa467fc", 0x78}, {&(0x7f0000002f00)="23eb0f83ae3bcad8583dee4b3215a479aa826f7736ad69380d3e71cbf23c13ccdbad6b07d1fcd161a607dc7d2058c08cb8dbf8b88a0834fba4db3ab1eb8eda31abfe892b2fc8574785f1aa465d0762139982500d754a18aaa1ebdd409e0c3cc32a9bf302f07adf16b07b9ee85a7e7f08212162d65a28e2d6143b3c1af8d7c016bed7a76bec74d250d32f5f9816dc7ca6b0d9acef8fcbc3881a932bfa2126ebb92b14c268d84047c41c32681a0b20e8ec6efe89b704b34a390c67508cab981a0761a523e12469af1c2bff052949bfcf1f38c0475f88140ba6fab88a32a292478dc02f5680cad9e5d5db2eafc2f5ed0e9c83ac649d9235d609532a8ecdbb2b170c9f3dd7f389f203f12175c9d990525f4c338003f60f1bd9fcb233bc96e57817fabc3bb1dd471b2ed615104880a1fd735a9ddcbbc1b0724363414e1d1b1ed8dacc88bcbb3a906b085f16420bd5195bcd5ece669c9a65c4144def72f8143919b4aeecd08175e34ec8f2d20bbea2470a3ba410527e836f67a11c2b29c037d5aafcde134d5b2656a5e4265459ea1fca554df5de0619a3831d897b17236d741924059140f1c2711dba1447821e48bde1b73e18806c35d49c6723b6184647cc6bba620b7c8332bcfa0c4a9c87302e7de4eb5a8523406910a49e04aac835ed5b0163d3ae3849b9c0e27ef46ef56234e84173356900569f8a33038fe8c2bd38e41f156ee4241557d6c75abfc373799fc674ba6af2ede5af1646621ef937a6bd5b9aff909dec67e03b9763ced64e3e9ca491cc294bc4f4afd4a1c16fe950af1fdb0b6cf4d2c805158dfa51dbc754797c1b822f6064423dc84c8870024fbebba9086c4b68f149deea4bd6309c6d8bddbe2b29de925f305b47b7224c87d63044d6b1df5bd716517c5a4f8040c8472308a7e18f9537b4ba0c05e62f8aa188028f0ad6aea586f9f46831486bda650f6dc269ca7b7b379f1491ff37bb3565b633605ee6c91e7a68b4746f264f7b7ed432b62ea24bebc2832cdf598ce4dce35ed8c44a2655a502195dcaac558577efd8da27ce03377d098387e539488ca6070e02215c560f2d2d607dc2be77ca7bc7ab1b2bd743040802dce2adcc5c8a1193cc2bc4054a5e8ec1cc9711c7d47ff67f49f93ccf071a6a1ec95e34c76950a209c98fd8703e36d859ea7a1b747aad86974a17ff7214c81908787f2ca3a8c3d15b2ff2e34738469a3b00a11a30523e8c6224c58894395acc979b724dd4f966b02c4fa04774a3a441d94f9ae1388fd350239ce779c477ae52b674f30c3e0ac1c4a40a964124c6b96a61bf717547955137eab8cb0d6424327c03545f9003960d8028548166d6a3e43029236f9506e286842737c1f103a6f104c28bbb32f8de8df098aafef2ee044c47cad6d08805b032c80237b8c2e4157ba29be01f776d2f730ef206fb479ce8283c0f4a7449565603a1ed8a2d4ade3e0e4d45aecdb2975adfee32dff262f843fd67137f601569c768d5ae1bfc5a41ea35b814e40d01216c7284a0487fe798d06aed18571317f4aae84410ff2cc4c1b2b26b4159401aa5a87d3d6f59084fe4922a36fd2d8dd6036a028295cea891a9bbf2b18c29e6513077b45d8599ca82e32f38eb6a830353886b5c35867b8d3ceb056fcd8d9d434ab6da50423a744c0654cfe3a3257f7a089a385c9d8cf883135da7f51acea4fd3ac1d0065487a9737416d16f9b6d4d3349dcd9c6aaedb3323f910082778f5a7eb74c292f0d5b577b98a3e201c91b13071581781f5538bcb3a5d47d9983fc84e2d66e353bd45104c6c39992ba029c8f4950c0d90ad81d60c9651217645fdb23db7481128b685821ea8b31a85c88b5f9233cd8e6d65dc364962104432fc0ea405eb9a24ea34b3386e04680968f37d272afb957a6e3615c7a704eebd04e74719f3c4c608151f0531320891ad0dfe0ccbf1cfe91702445e98b84e093e99a2c13e0db5a328e7c954ec092aedc084ab47e243bad25b06d34a67fd69a89fe9957b5c8b7cbbdd90e66ff1654fe7b21ddc9b808b9b8c46461e78d5174bf1b1de9ec1ba4ac1db15d09b7cc7edcca4ba441311a70be2d8c005c69784c3108ae709e0736e09a0743428af3f98efaa7e335425bc62a3cb7461f7a53aa42d1400f5234b83e0f204520433dc360cefdd76c8ee7fb436df92a6bc06c258c1c122be7cb0fbe56fc1f4ce7cd59322d9fc69f09f6478e834bb8e2570896b3a01a12ed3123ad1e14712b1b1b66d76e07c1578425518af996bbc8646ad417a683ec49c45cfc392a18f1e91ce9cab5d66858c20c36130d5dbee6e992a264233f7a805effc7281e258e9a71b359715f5624dbed7c239050adab73f645219b632ab14a1bd39811c05f998b255c1997340e7c26666f6af4ecb1aec8e0ac76a51d1f652bda15b02d8d1f23f8225f6142a1d14195a158514653e71aa97baf87b3e09e85751085863d55ce5b00c1eea5415de20243ce1537e75c088b3a332373a078106e87cbe6ac5203d0f90974f2929762b4c7f6492510f3f65937b817ba7e7ce0c9bce3e15a7f61a9b59f40a8bbfa7214f3cfff9128fd56667c0c8946fb25ae7747e560df58a08b6dd6e80203040b8616f10b1bb2b6d033ecc8321b86ad943abc0f2aba672c01bfd5867e79913799a5a969ab4aafe25717fed5b96142a9f6f3a3d23631bed5239a73e8809a5a6ba42ecc7b60650c8fa724b1d31fb1d64a992fce22bbbafcf2bf53503bee092d9893c5e697b191919b6a274993d148457c03fcf99189ec74513fb8685d51ea15402ec795703285b4f5e5900d5ade3ff7b4d085878b5cc5753542eb7267c8f504ae3e03492e5f1723ec8dd0f1d4f296aee69e12750461d9dd5813d03f12d14306f0fc81077826c28546088a1cbbd8b3c23956f37fef063bb56542f9e011fee3d5c9188833ad4798ae2dfec093c4255e6e34bb56db8d40000840999b5e9d5da791893eb0a171d5e007c28ee3e7330024ba492486dac034dc5cc20804eb2ad75261a6f1d1fe1cde2892d3bae8ba18f477a3fdf706cb3686be7597ae66d655d2d9ad29765025d172fcd1c8cb6b29f734387cb1733be26d9573533db35442c5444bcdf1b0719ed6e3133f21444a4de7f6b76d976dab6c6983fa55ee98a3526284bb652e47b8d361ea4bf8ab654c1526443b7db8a4510610f190857c1d03b69cf450f3502530dcac664a4299c593991ddbbe3a2649a12efa797aebbbfe4e308a6018f3c87dd321f12ac848484c0082eddbb1f07c9619a06ca301d7367495aa3fb4fa12237cf8c4c085a89406ab96e1fabb7a925d7df827b922571e346a548fefc4e64c13751838ded10e163f27f6a4e9d890ca052ab7c10ff8a1c6b41591b3e03d75174ce0863aa2b77d026cb5fe5e22e2ef0de023d29abbffc0821135649e5a599c339e6f0cfa9a3517e672ee15e3e2df18d5d3d7ee970b3151547253394211f9373c88388a2ced8947292371a01d75e1cbf9612c6d80c9904a3f40e119d1cb6087ee073d161417b333ddad0596790cc4c6645b21eb8b0993a9211c46d83595c19fa622e671cc6776fd202ca0cfd7d54ecb9a8c80f3529866633d02ec16ce87270957ceec2f38df8b0b1655e348e102d2a594f6c57664aadd9f1a8700b45ed3d8f0f21e442c8ad3f258f6bdc781f0887fabaee3a803832186fbddd6f21dfea9efc028d160c62687d14644ab055b29828573cceb26ea1c9ab7af672a0f6608752cdf81c786312fe7d27de8ce3e314d8b93ffaf6d3f607641de6de3456695105d05b8b825685680e254aded81d2c828c4b9c8d1eef44b9a3a9b3d58800e4cb3408a71a11484785f6deb3914e3553a6d4336b381610e134a60c9e50931285ccaf4c84372ea322b895ff1231efa299b32c5430484e60d084c9ad529ca8b13dbec4be572f0dbab47bcfd066471ed876fd069ce3e501a5dc8de61dac93bd480e3951c211bbd4bfe1fca36aba685814c39fec53f95a1c4795899bcdae1f9aff935aa66bd37d4dcae98d84ff6d64a7fd316dba20e56a8966f4a3c7b6377d514c17d1ee5d972fcd31385b0ea6bc994a36a8b3bd9682ae772728fc1a001bc0242fa35e6899a793b4abe47dc476300f7b32a9254e3271c5b17e1279dd3e9aab45c64e9710185a6222b660420fbe972738edc4790ccd79815361d9010a33a72e257d662b7ecab05db46072d296b48b17d8077b2358bd15476cccb4588570fb2ed2974091babb84d0062e749b501decc52bf30877eade4d52495bdcce6891f7435535ec8f68c6276a2f4f207a382b2bc9cb8a0f7becb63bb46c7c94352ee4f5bd7c426ca80c9a10bc689a48ab667a904edac749d5877e81a7ce9b87ee95b81eae6669b1d045e4c2d9cdedb8e6f4df0b78eff4573416f2d2193f6c739a16bf817f2905808ac9d41b5788f083cb2b37984a375e399536cb074ff7cc7661d164da8cb81ba381363e3bff8d3a1ab6e4dab1812e58adc37b82e2f6f00c123f2bae67d87f76888652dd4193b9f436bfa902cdf677bde5471f1ac348acb2fe925a7f7c64966acdaf17f8c006976fc4417e1e97e1ee7b3ffe43d6078f1023124c8e11ab0dc8de78028626a521cfdfdfa2d5ad5f7812c5bc294afaa67bb3fc25e8a936ec111b85540e484669dfa8cec3dae3a370df6071b868caf543364963f8d423ec00b3daa045338483c05cfca4029b13e27633e2cff940db67d226cd59ceeeb804db23516083f9220ba5a05ae1442dedb7e9fe51002cee34862d114aae728294576ba43a2db31be27e11dfc3f3d8337a8d069047aff28727adb92cfd658e79e8c7cb458245978b674876dbffd9c919dc9bdd22a17bab8fd53f98484722b3b67482fa5c70b1b3542f4f0030b1e999972e89031fd5b0e442b74837cb0aaea80e75e0801f329f8fc394b63a8079d51dfd491708b69b3f2e8b459aa7372dc05bee4199eebc1181c99887fb69bc2af4a0d6c2be11163061f3b63507ec66afd249bce16048953e515cdc31a55cd932144e2597305e24fed00e50cbc1d7bd3181dfce0e8ac1965cc69d37338b5307a6cc469f88bf03e8bb45d3adf099db2d19b0fc880c0f1158cb3351b3fc6047d85541f51f0c94c9f72659d87ec76f6deefc27bfacbfe4fb3f343d8f95a46be04c607b28aabdc011273e39999fd22e228e5c68390718603a72e2b4580f21485a21b74600e4e47906a60ccc1b2f09e8e0456787c85ec1eb4a339c535bf164a80966260019b8858ffbda40d7e5da46f1684f9d3583a056a0083c15564bae16d2afc0cb9e79d3360e3ab77d6c34b69eabf6325ce046ff621393b0c23ec064c9718a2471487730c9031b0d14bf45452b7ae269c84d23cc752a86909cc8f8569386ab966ad691f2bfaf56c04323a87be704edf99c20b6a8a513a4f49fcc8f26599bc86f2d05c34ddc967ca0018cc4e11d3b0a632ab908c4b133bcccb7234869c4a5cb9afcf963c2356b77241e775cacaea2ebfbd47b2a9e45f8b5d58c7a6820b5214f16bdbff2a35020b46bb0ec965a8ae7a239b0694f4c86ce73ebc7837d1e23928b2f225ef34cf99e941d42ec052376f36f277b7634c8e9bfac680690b53d3aaf994b36bba5a606abe99b43b931908791c94404a882ae0ff124260803f3d85868d12c436568fe3d6d405fec17ed735bcfff9d364a08529b0153bd0d04f79bff1577f60c160a138b3f46353c7dbea59451c9d15724fefbc3b36f9bcec81374843baba44351e45255884a5c51810bbfaedb51a64512e507e33fbe896fd2e74d22119557deaa1dffbfadca3023be47c4b0f0c2e", 0x1000}], 0x8, &(0x7f0000003f80)=[{0xe0, 0x10d, 0x2, "c76f73567db9fcb82c249ed3eaae98d61b10c6b7d46a645228df0a5857b538e420b8c1e1012a0c1dea42db4b59acb23f28cee80989d8e013e11b701325e23d9d5edff490606f8c7fb8aa72f31ab217db7fecfa4d02ed70f4c0ae76f4094900193becbb4696095315da3b6c2c1ef0f8cac989e8562e668658b01eb1dc8d34ee5fc67ee29cf3d43407e2118526f9193c6068ae72d947c7c816e67d0231434171ebba5e1b6e3472efcdba1a750891833f184ef5aef7dc474cc0ec562d298987f234dadb7ffd160dd847bcf9db063a"}, {0x38, 0x11, 0x10000, "db45fb29d2f12824e9c1d44bee61b161df72bf5949985e91843e24815a97013536e9c7ee4130"}], 0x118}}, {{&(0x7f00000040c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)="60962e6a626f17d040d5777420f4955e4895e43c92de73a932005283ec6cb45d57398bd7134b114bfbafc0b966bdb5aa7aac1c89e073f3114e0512a020ecbaa0ba8475e528a04e6137399cc9e33f11", 0x4f}, {&(0x7f00000041c0)="f05e6ad314ea47faaa03f840eeb3a1389333d3a1fb4bdfbbf5c456599b8864f6d9c0a6f2dd9cd9ea1ae830e79da1ee21cefe5e", 0x33}, {&(0x7f0000004200)="891aa197c87b966200285130f19678e021acd6d3d180018ac7819bde14e556ea11e2a819b237a7b77e850b69bca28f6c516f1cc98641eed75aff595b4678cfac34718cebe42c53fa832cda077a0107ad271ebc2574d11812c69daf430fd30989b611e5008522924af69989b1a3d89a763002c7c692da", 0x76}], 0x3, &(0x7f00000042c0)=[{0xf0, 0x116, 0x1a78, "d9d3065c467b1e6904865b39c8a27172c95a312be26b07b195c2887d3d25cc67ae39fa3cc6bc909720582a12b848a80b315fa390393b3541bb80c15c8f591da5e7c559576093c0766972fdf07134489239a6b68b4813a3b834a308dcac2d045dd8f57c83ece085e0231ac7c47e9d366c7ca4d40affa3e3903c7cce7a7a58bd67564b6114e8b076a67b638368a485396f5711761d5b7af2afb4cdddf26cdc2496dbc634aebacf0db02074fa39d77f399057d63062989eaa0256eb330b0f9ebb49d0e8e025537582d9375ba64bd3b2ad423977865e1d48ebecc20c428cf198639e"}, {0xd8, 0x10a, 0x2f9, "47d1e37fa123c21239950d7452b0ffded46a21e3d1e38023bd1bb718117cc4cfb23a1e07b5190286196c468dee472f85b70422d3a8ccf0852b0466431a01adff97bccd9de523c12b08eda4fcd2ac6cfc23e47a8b5de51768aa4142bda98cb98549da6d057ef3c4bacfab91b73ee9711065c9a6dacf8af31e26864ceb34f58cc818e161b41280539738f1d1dcd3da812b3c52e0e729c15dea7396f4df428e6e9b67135d22dac1463c88fed7ddb4004d4ce397ff1b8b01d4872f8eddf6af77e1ebacca"}], 0x1c8}}], 0x5, 0x20000004) sendmsg$nl_xfrm(r7, &(0x7f0000004740)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004700)={&(0x7f0000004640)=@delsa={0xb0, 0x11, 0x200, 0x70bd25, 0x25dfdbff, {@in6=@rand_addr=' \x01\x00', 0x4d6, 0xa, 0x6c}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@loopback, @in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x1, 0x0, 0x3506, 0xa, 0xa}]}, @srcaddr={0x14, 0xd, @in6=@loopback}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @tfcpad={0x8, 0x16, 0xf}, @srcaddr={0x14, 0xd, @in6=@private2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) accept$inet6(r7, &(0x7f0000004780)={0xa, 0x0, 0x0, @private1}, &(0x7f00000047c0)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000004800)={"71819476d0a5d11749e82ae7c280ff8b", 0x0, 0x0, {0x2, 0x7}, {0x81, 0x1}, 0x7fffffffffffffff, [0x9, 0x6d, 0x3, 0x2d0a, 0xfffffffffffffffb, 0x2, 0x9a, 0x7, 0x32, 0x7, 0x5, 0x1, 0x837, 0x6, 0x0, 0x101]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000004980)={{r0}, r10, 0x1e, @inherit={0x50, &(0x7f0000004900)={0x1, 0x1, 0x6, 0xc043, {0x19, 0x9, 0x21084df, 0x9, 0x738}, [0x3]}}, @devid}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000005980), 0x2, 0x0) socket$inet6_sctp(0xa, 0xa1abe04c300ce81f, 0x84) 8.369723431s ago: executing program 1 (id=5895): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) 8.348423429s ago: executing program 4 (id=5896): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) fdatasync(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1=0x4d4, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = semget$private(0x0, 0x207, 0x0) semtimedop(r7, &(0x7f00000002c0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r6) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1}) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) 8.245576638s ago: executing program 3 (id=5897): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={r3, 0xfffffffffffffffe}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.471414167s ago: executing program 1 (id=5898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40186f40, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000300)=""/161, 0xa1, 0x0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @mcast1, 0x400}}, 0x80) mknod(0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @remote, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x440e0) read$watch_queue(0xffffffffffffffff, &(0x7f00000003c0)=""/253, 0xfd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.382320982s ago: executing program 9 (id=5899): r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0x5, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000100)={[0x9]}, 0x8}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x5, 0x8, 0x2, 0x0, 0x19, "100056f200"}) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="fb90cb79b27f02000072006d9041000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116c0000000000851000000200000085000000d100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400981"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r6, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002580)=@ipv4_getnexthop={0x28, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8}]}, 0x28}}, 0x24044000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000024000900a4b5fe770992ca2100007000fcffffff0500000008"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.176044573s ago: executing program 3 (id=5900): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file7\x00', 0x24000, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x4000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0xb3) timerfd_gettime(r0, &(0x7f0000000300)) fcntl$setstatus(r2, 0x4, 0x400) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESDEC=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="350000c9", @ANYRES16, @ANYBLOB="00022abd7000fedbdf251a0000000700210061610000050092000d00000005009200100000000800010029000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x9, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='user\x00N\xac\x04\x00\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2028}, 0x1, 0x0, 0x0, 0x42814}, 0x4000000) 6.124178446s ago: executing program 4 (id=5901): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2503000000000000000016000000140001"], 0x5f}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x42, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x3631564e}) 4.90049114s ago: executing program 1 (id=5902): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x10, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x80000002}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0xf7, 0x8, {0xa, 0x25, 0x25, 0x0, 0xff, 0x24d8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x9, 0x3, {0xa, 0x25, 0x25, 0x2, 0x9, 0xfc01}}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028006001300"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 4.549646044s ago: executing program 4 (id=5903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x4) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001200050926bd700001dcdf2521094b004e224e26fcffffff23090080"], 0x4c}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000740)=[{{&(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x20000}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)="bccb228464b93610cf", 0x9}, {&(0x7f0000000280)="db4d3eaea90b593b294f8200010bca09c98380a71f5f2654c16fcb325e98657902481144475ebd1e8facff5926bad530d8ed2bd799212e1ffc8e53ebcde83a1ddf5948dd2ffd667a611dc39d25e2605dd0339eb824c4a95fd5e032d19aca30805c1ecdb8ca9792216762f6e54174c3284fe296dc5bce86d2b1cb850b8fe5", 0x7e}, {&(0x7f0000000340)="0851397655913f7c8b14237f670711f3f34b7de39d96bbbc887eda469fe1910dc3c2168a9e3304b8ff2426240b6c161665c7553252c9545888d0", 0x3a}, {&(0x7f0000000380)="db0416f88307239cde474bbd7f4348762da6f6e46c3e1a4df1f2140ba3fe619d2ebc4fc16822e05378e3a5d0e78cdf35ffc0e296ac527d2191bffd55068b09e1a27c6c76d393c88b4d78573468661783f2e51f17902f44b9dad8ead1ae01ab81807b3d245a9be67d57786634e5fafd62109826c0a7c09d13af10", 0x7a}, {&(0x7f0000000480)="7a79f90ad47657428cc68476d41b53d013297f5cef4d0092104b2f2b15c9bc78c9d3dbaf4014762c1b23fdd0e76bea3aa700f6c073fea5abf96543523a9dfb4369eb7b682f10887a99c8ec789b58952a1e82d0d41de1c47f40c6ecb72d2d4c86b92f2defe30961d88acedc93414ba0e1670ed952e6b46077e50bb8646a32d91b54e71915d2044f7c922b733c0bf93bfb48e9a2e716f6d20fa39ab47d78510ce0146cd0061eb46d423283b00e14eae265ef0f7f7d04a124bb6ed7652823c28241d1147cdcc864e5d0ea877db08f8b5c204b58ec622ff3203800ef6df1fb94899eb8f7cdf4f69dad97f31d959d791bb34a", 0xf0}, {&(0x7f0000000600)="afd5a8faf6807f9c1d958b5f7b54c8081d77dc", 0x13}, {&(0x7f0000000640)="13d99ed72790465b7ba461ad0a9360ff57e809db8d5163a0b1b0fd373c8baf3c1ca46a55654bbc79d59ee579c4941d4b7a49529256371c99406670c3bc0feaf2582261e2e79c546a24c0ab401c3b6013bbf60c7529ac81f707bcedb47629a2af3e2c66184bf1eaab9c", 0x69}], 0x7, &(0x7f0000000800)=[{0x1010, 0x121, 0x3, "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"}], 0x1010}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x806a86e76026223e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendfile(0xffffffffffffffff, r1, 0x0, 0x180000504) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.846184584s ago: executing program 3 (id=5904): openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c051fc6", @ANYRES16=r2, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) 3.098101641s ago: executing program 3 (id=5905): socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) (fail_nth: 2) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.012131156s ago: executing program 6 (id=5906): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000003000)='ns/uts\x00') socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.978197266s ago: executing program 1 (id=5907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010007000000000000000500000a3c000000090a01040000000000000000000000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0000000b0a010100000000000000000a0000050900010073797a31"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x4) socket(0x3, 0x3, 0xff) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df78005"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000000d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 2.949569057s ago: executing program 9 (id=5908): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) 1.60761219s ago: executing program 9 (id=5909): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x101400) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25GETINFO(r5, 0x89ed, 0x0) dup3(r4, r5, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x7, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/214, 0xd2, 0x1, 0x24}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xcc}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000003c0)={0x1, 0x1e, 0x6, 0xf1a, '\x00', '\x00', '\x00', 0xb0, 0x6, 0x5, 0x5, "9b700c57de5084aadc4f1f39ca3310c7"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) sendmsg$802154_dgram(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000040)={0x0}}, 0x0) 1.362270832s ago: executing program 9 (id=5910): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, 0x0) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={r3, 0xfffffffffffffffe}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.243807591s ago: executing program 4 (id=5911): getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001680)={@rand_addr, @multicast2, @empty}, &(0x7f00000016c0)=0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="411836e6f0dd669256ea957de78eac87"]}]}, 0x30}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 445.819001ms ago: executing program 9 (id=5912): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000740), 0x0, 0x0) 395.997753ms ago: executing program 6 (id=5913): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16c) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa13, 0x2000001}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x80000000000080, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="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", 0x100}], 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) 0s ago: executing program 9 (id=5914): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file7\x00', 0x24000, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x4000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0xb3) timerfd_gettime(r0, &(0x7f0000000300)) fcntl$setstatus(r2, 0x4, 0x400) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESDEC=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="350000c9", @ANYRES16, @ANYBLOB="00022abd7000fedbdf251a0000000700210061610000050092000d00000005009200100000000800010029000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x9, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='user\x00N\xac\x04\x00\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2028}, 0x1, 0x0, 0x0, 0x42814}, 0x4000000) kernel console output (not intermixed with test programs): 660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1530.915062][T23660] CPU: 0 UID: 0 PID: 23660 Comm: syz.1.5595 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1530.915089][T23660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1530.915105][T23660] Call Trace: [ 1530.915114][T23660] [ 1530.915124][T23660] dump_stack_lvl+0xe8/0x150 [ 1530.915165][T23660] should_fail_ex+0x46b/0x600 [ 1530.915201][T23660] _copy_from_user+0x2d/0xb0 [ 1530.915238][T23660] core_sys_select+0x57a/0xc30 [ 1530.915285][T23660] ? __pfx_core_sys_select+0x10/0x10 [ 1530.915339][T23660] ? __pfx_set_user_sigmask+0x10/0x10 [ 1530.915372][T23660] ? kmem_cache_free+0x185/0x6b0 [ 1530.915405][T23660] __se_sys_pselect6+0x267/0x320 [ 1530.915439][T23660] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1530.915468][T23660] ? __pfx_ksys_write+0x10/0x10 [ 1530.915508][T23660] ? __x64_sys_pselect6+0x21/0xf0 [ 1530.915538][T23660] do_syscall_64+0x14d/0xf80 [ 1530.915561][T23660] ? trace_irq_disable+0x3b/0x150 [ 1530.915588][T23660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.915628][T23660] ? clear_bhb_loop+0x40/0x90 [ 1530.915656][T23660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.915680][T23660] RIP: 0033:0x7ff0d065c799 [ 1530.915702][T23660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.915722][T23660] RSP: 002b:00007ff0ce88d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1530.915747][T23660] RAX: ffffffffffffffda RBX: 00007ff0d08d6090 RCX: 00007ff0d065c799 [ 1530.915765][T23660] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1530.915781][T23660] RBP: 00007ff0ce88d090 R08: 0000200000000280 R09: 0000000000000000 [ 1530.915797][T23660] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1530.915813][T23660] R13: 00007ff0d08d6128 R14: 00007ff0d08d6090 R15: 00007ffcc4f02788 [ 1530.915849][T23660] [ 1530.930093][T17203] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1531.095290][T17203] usb 10-1: Using ep0 maxpacket: 16 [ 1531.165175][T17203] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1531.165206][T17203] usb 10-1: config 0 has no interface number 0 [ 1531.165256][T17203] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1531.165286][T17203] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1531.168381][T17203] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1531.168412][T17203] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.168433][T17203] usb 10-1: Product: syz [ 1531.168449][T17203] usb 10-1: Manufacturer: syz [ 1531.168481][T17203] usb 10-1: SerialNumber: syz [ 1531.173468][T17203] usb 10-1: config 0 descriptor?? [ 1531.178662][T23651] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1531.178926][T23651] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1531.829063][T17275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1531.842491][T17275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1532.089450][T17203] asix 10-1:0.251: probe with driver asix failed with error -71 [ 1532.136283][T17203] usb 10-1: USB disconnect, device number 63 [ 1534.109226][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 1534.109274][ T36] audit: type=1326 audit(1774654929.562:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.109665][ T36] audit: type=1326 audit(1774654929.562:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.109983][ T36] audit: type=1326 audit(1774654929.572:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.110294][ T36] audit: type=1326 audit(1774654929.572:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.110609][ T36] audit: type=1326 audit(1774654929.572:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.110972][ T36] audit: type=1326 audit(1774654929.572:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.111285][ T36] audit: type=1326 audit(1774654929.581:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.111603][ T36] audit: type=1326 audit(1774654929.581:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.111950][ T36] audit: type=1326 audit(1774654929.581:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1534.112266][ T36] audit: type=1326 audit(1774654929.581:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1535.098969][T23687] QAT: failed to copy from user cfg_data. [ 1535.682202][T23707] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 1537.215201][ T5988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.253363][T23726] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1537.523417][ T810] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1538.341098][ T810] usb 4-1: Using ep0 maxpacket: 16 [ 1538.344151][ T810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1538.345646][ T810] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1538.396649][ T810] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1538.396684][ T810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.396708][ T810] usb 4-1: Product: syz [ 1538.396724][ T810] usb 4-1: Manufacturer: syz [ 1538.396741][ T810] usb 4-1: SerialNumber: syz [ 1538.458297][ T1522] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1538.770123][ T810] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1538.820996][ T810] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1538.926504][ T810] usb 4-1: 2:1 : can't get High Capability descriptor [ 1539.613261][T23751] QAT: failed to copy from user cfg_data. [ 1540.844656][ T810] usb 4-1: USB disconnect, device number 89 [ 1541.734132][T22831] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1542.161771][T22831] usb 7-1: Using ep0 maxpacket: 32 [ 1542.227076][T17203] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1542.331929][T22831] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1542.347001][T22831] usb 7-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 1542.347101][T22831] usb 7-1: too many endpoints for config 1 interface 2 altsetting 1: 110, using maximum allowed: 30 [ 1542.347130][T22831] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 1542.410614][T17203] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1542.412278][T17203] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.412310][T17203] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1542.415120][T17203] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1542.415184][T17203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.415200][T17203] usb 5-1: Product: syz [ 1542.415211][T17203] usb 5-1: Manufacturer: syz [ 1542.415222][T17203] usb 5-1: SerialNumber: syz [ 1542.416190][T22831] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1542.416221][T22831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.416238][T22831] usb 7-1: Product: syz [ 1542.416249][T22831] usb 7-1: Manufacturer: syz [ 1542.416260][T22831] usb 7-1: SerialNumber: syz [ 1542.771227][ T5988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1543.081835][T23778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1543.139718][T22831] usb-storage 7-1:1.2: USB Mass Storage device detected [ 1543.346222][T22831] usb 7-1: USB disconnect, device number 38 [ 1543.400191][T17203] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1543.780402][T17203] usb 5-1: USB disconnect, device number 102 [ 1543.961016][T22933] udevd[22933]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1544.138783][T17164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.725310][T23806] syz.4.5633 (23806) used greatest stack depth: 16552 bytes left [ 1546.626956][T23832] FAULT_INJECTION: forcing a failure. [ 1546.626956][T23832] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.626984][T23832] CPU: 1 UID: 0 PID: 23832 Comm: syz.4.5640 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1546.627002][T23832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1546.627012][T23832] Call Trace: [ 1546.627019][T23832] [ 1546.627026][T23832] dump_stack_lvl+0xe8/0x150 [ 1546.627055][T23832] should_fail_ex+0x46b/0x600 [ 1546.627106][T23832] should_failslab+0xa8/0x100 [ 1546.627134][T23832] __kmalloc_noprof+0xdf/0x7b0 [ 1546.627169][T23832] ? tomoyo_encode+0x28b/0x550 [ 1546.627193][T23832] tomoyo_encode+0x28b/0x550 [ 1546.627217][T23832] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1546.627247][T23832] ? tomoyo_path_number_perm+0x219/0x630 [ 1546.627276][T23832] tomoyo_path_number_perm+0x246/0x630 [ 1546.627304][T23832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1546.627332][T23832] ? __lock_acquire+0x6b5/0x2cf0 [ 1546.627374][T23832] ? __fget_files+0x2a/0x420 [ 1546.627397][T23832] ? __fget_files+0x2a/0x420 [ 1546.627417][T23832] ? __fget_files+0x3a6/0x420 [ 1546.627437][T23832] ? __fget_files+0x2a/0x420 [ 1546.627461][T23832] security_file_ioctl+0xc3/0x2a0 [ 1546.627479][T23832] __se_sys_ioctl+0x47/0x170 [ 1546.627497][T23832] do_syscall_64+0x14d/0xf80 [ 1546.627514][T23832] ? trace_irq_disable+0x3b/0x150 [ 1546.627534][T23832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.627551][T23832] ? clear_bhb_loop+0x40/0x90 [ 1546.627572][T23832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.627588][T23832] RIP: 0033:0x7fd0546ac799 [ 1546.627603][T23832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.627618][T23832] RSP: 002b:00007fd0528fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.627635][T23832] RAX: ffffffffffffffda RBX: 00007fd054925fa0 RCX: 00007fd0546ac799 [ 1546.627647][T23832] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 0000000000000003 [ 1546.627659][T23832] RBP: 00007fd0528fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.627670][T23832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.627680][T23832] R13: 00007fd054926038 R14: 00007fd054925fa0 R15: 00007fff1c08fa48 [ 1546.627705][T23832] [ 1546.663687][T23832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1547.036033][T23839] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5643'. [ 1547.153045][T23834] block nbd1: server does not support multiple connections per device. [ 1547.153443][T23834] block nbd1: shutting down sockets [ 1547.409863][T17203] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1547.429398][T22831] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1547.546948][T17203] usb 10-1: device descriptor read/64, error -71 [ 1547.547424][T23849] block nbd1: server does not support multiple connections per device. [ 1547.547815][T23849] block nbd1: shutting down sockets [ 1547.579547][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.579621][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.604189][T22831] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1547.604220][T22831] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1547.604241][T22831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1547.604293][T22831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1547.604324][T22831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1547.606536][T22831] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1547.606564][T22831] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1547.606589][T22831] usb 2-1: Product: syz [ 1547.606599][T22831] usb 2-1: Manufacturer: syz [ 1547.705632][T22831] cdc_wdm 2-1:1.0: skipping garbage [ 1547.705647][T22831] cdc_wdm 2-1:1.0: skipping garbage [ 1547.722330][T22831] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1547.722353][T22831] cdc_wdm 2-1:1.0: Unknown control protocol [ 1547.824833][T22273] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1547.837470][T17203] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1547.988125][T17203] usb 10-1: device descriptor read/64, error -71 [ 1547.992122][T22273] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1547.992152][T22273] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1547.992174][T22273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1547.992227][T22273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1547.992248][T22273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1547.995510][T22273] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1547.995538][T22273] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1547.995944][T22273] usb 4-1: Product: syz [ 1547.995962][T22273] usb 4-1: Manufacturer: syz [ 1548.104435][T17203] usb usb10-port1: attempt power cycle [ 1548.122571][T22273] cdc_wdm 4-1:1.0: skipping garbage [ 1548.122594][T22273] cdc_wdm 4-1:1.0: skipping garbage [ 1548.166057][T22273] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1548.166082][T22273] cdc_wdm 4-1:1.0: Unknown control protocol [ 1548.243175][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.465973][T17203] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1548.488364][T17203] usb 10-1: device descriptor read/8, error -71 [ 1548.744363][T17203] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1548.767180][T17203] usb 10-1: device descriptor read/8, error -71 [ 1548.829883][ T10] usb 2-1: USB disconnect, device number 105 [ 1548.883563][T17203] usb usb10-port1: unable to enumerate USB device [ 1549.593491][T23868] netlink: 'syz.1.5649': attribute type 16 has an invalid length. [ 1549.593515][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5649'. [ 1549.620379][ T6806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1549.942639][T23870] FAULT_INJECTION: forcing a failure. [ 1549.942639][T23870] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.943015][T23870] CPU: 0 UID: 0 PID: 23870 Comm: syz.1.5650 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1549.943044][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1549.943059][T23870] Call Trace: [ 1549.943069][T23870] [ 1549.943079][T23870] dump_stack_lvl+0xe8/0x150 [ 1549.943119][T23870] should_fail_ex+0x46b/0x600 [ 1549.943154][T23870] should_failslab+0xa8/0x100 [ 1549.943181][T23870] kmem_cache_alloc_noprof+0x87/0x680 [ 1549.943217][T23870] ? security_inode_alloc+0x39/0x310 [ 1549.943253][T23870] security_inode_alloc+0x39/0x310 [ 1549.943285][T23870] inode_init_always_gfp+0x9bf/0xd70 [ 1549.943324][T23870] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1549.943356][T23870] alloc_inode+0x82/0x1b0 [ 1549.943384][T23870] __sock_create+0x12d/0x9d0 [ 1549.943420][T23870] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1549.943462][T23870] __sys_socket+0xd6/0x1b0 [ 1549.943498][T23870] __x64_sys_socket+0x7a/0x90 [ 1549.943532][T23870] do_syscall_64+0x14d/0xf80 [ 1549.943556][T23870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.943580][T23870] ? clear_bhb_loop+0x40/0x90 [ 1549.943609][T23870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.943633][T23870] RIP: 0033:0x7ff0d065c799 [ 1549.943654][T23870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.943674][T23870] RSP: 002b:00007ff0ce8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1549.943698][T23870] RAX: ffffffffffffffda RBX: 00007ff0d08d5fa0 RCX: 00007ff0d065c799 [ 1549.943716][T23870] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 000000000000001d [ 1549.943731][T23870] RBP: 00007ff0ce8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.943745][T23870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.943759][T23870] R13: 00007ff0d08d6038 R14: 00007ff0d08d5fa0 R15: 00007ffcc4f02788 [ 1549.943796][T23870] [ 1549.944368][T23870] socket: no more sockets [ 1550.562526][T23874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1552.758111][ T10] usb 4-1: USB disconnect, device number 90 [ 1553.286546][T23888] FAULT_INJECTION: forcing a failure. [ 1553.286546][T23888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.286625][T23888] CPU: 1 UID: 0 PID: 23888 Comm: syz.6.5656 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1553.286652][T23888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.286665][T23888] Call Trace: [ 1553.286675][T23888] [ 1553.286685][T23888] dump_stack_lvl+0xe8/0x150 [ 1553.286724][T23888] should_fail_ex+0x46b/0x600 [ 1553.286759][T23888] _copy_from_user+0x2d/0xb0 [ 1553.286803][T23888] kstrtouint_from_user+0xd6/0x180 [ 1553.286835][T23888] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1553.286863][T23888] ? lockdep_hardirqs_on+0x7a/0x110 [ 1553.286888][T23888] ? rcu_is_watching+0x15/0xb0 [ 1553.286924][T23888] proc_fail_nth_write+0x8e/0x210 [ 1553.286951][T23888] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1553.286985][T23888] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1553.287015][T23888] vfs_write+0x2a3/0xba0 [ 1553.287058][T23888] ? __pfx_vfs_write+0x10/0x10 [ 1553.287096][T23888] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1553.287121][T23888] ? lockdep_hardirqs_on+0x7a/0x110 [ 1553.287143][T23888] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1553.287167][T23888] ? mutex_lock_nested+0x152/0x1d0 [ 1553.287195][T23888] ? fdget_pos+0x252/0x320 [ 1553.287235][T23888] ksys_write+0x156/0x270 [ 1553.287271][T23888] ? __pfx_ksys_write+0x10/0x10 [ 1553.287319][T23888] do_syscall_64+0x14d/0xf80 [ 1553.287343][T23888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.287368][T23888] ? clear_bhb_loop+0x40/0x90 [ 1553.287397][T23888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.287421][T23888] RIP: 0033:0x7efd87d9cfce [ 1553.287442][T23888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1553.287461][T23888] RSP: 002b:00007efd86035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1553.287486][T23888] RAX: ffffffffffffffda RBX: 00007efd860366c0 RCX: 00007efd87d9cfce [ 1553.287503][T23888] RDX: 0000000000000001 RSI: 00007efd860360a0 RDI: 0000000000000004 [ 1553.287518][T23888] RBP: 00007efd86036090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.287532][T23888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.287546][T23888] R13: 00007efd88056038 R14: 00007efd88055fa0 R15: 00007ffc656c6f98 [ 1553.287584][T23888] [ 1554.332581][T17203] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1554.397037][T17164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1554.518178][T17203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.518250][T17203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1554.518279][T17203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.518305][T17203] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1554.518353][T17203] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1554.518380][T17203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.593757][T17203] usb 4-1: config 0 descriptor?? [ 1554.801687][T23914] m1Ie5èÿ: entered promiscuous mode [ 1554.969170][T23919] loop9: detected capacity change from 0 to 4096 [ 1555.136745][T17203] usbhid 4-1:0.0: can't add hid device: -71 [ 1555.136879][T17203] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1555.173557][T17203] usb 4-1: USB disconnect, device number 91 [ 1555.323247][T23922] 8021q: VLANs not supported on ip_vti0 [ 1555.343612][T23925] hub 8-0:1.0: USB hub found [ 1555.388843][T23925] hub 8-0:1.0: 1 port detected [ 1555.836649][T17203] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1555.838981][ T44] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1556.010289][T17203] usb 4-1: Using ep0 maxpacket: 32 [ 1556.012751][T17203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.012807][T17203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.012838][T17203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.012863][T17203] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1556.012910][T17203] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1556.012936][T17203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.248027][T17203] usb 4-1: config 0 descriptor?? [ 1557.376250][ T810] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1557.615170][T23935] block nbd1: server does not support multiple connections per device. [ 1557.615676][T23935] block nbd1: shutting down sockets [ 1557.681495][ T810] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1557.681539][ T810] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1557.681561][ T810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1557.681612][ T810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1557.681652][ T810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1557.687218][ T810] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1557.687252][ T810] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1557.687275][ T810] usb 5-1: Product: syz [ 1557.687292][ T810] usb 5-1: Manufacturer: syz [ 1557.784418][T23945] FAULT_INJECTION: forcing a failure. [ 1557.784418][T23945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.784456][T23945] CPU: 1 UID: 0 PID: 23945 Comm: syz.1.5666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1557.784483][T23945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1557.784497][T23945] Call Trace: [ 1557.784506][T23945] [ 1557.784516][T23945] dump_stack_lvl+0xe8/0x150 [ 1557.784556][T23945] should_fail_ex+0x46b/0x600 [ 1557.784591][T23945] _copy_from_user+0x2d/0xb0 [ 1557.784626][T23945] memdup_user+0x5e/0xd0 [ 1557.784659][T23945] security_setselfattr+0x8d/0x830 [ 1557.784693][T23945] __x64_sys_lsm_set_self_attr+0x9a/0xb0 [ 1557.784722][T23945] do_syscall_64+0x14d/0xf80 [ 1557.784746][T23945] ? trace_irq_disable+0x3b/0x150 [ 1557.784773][T23945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.784798][T23945] ? clear_bhb_loop+0x40/0x90 [ 1557.784827][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.784850][T23945] RIP: 0033:0x7ff0d065c799 [ 1557.784871][T23945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.784892][T23945] RSP: 002b:00007ff0ce8ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 1557.784917][T23945] RAX: ffffffffffffffda RBX: 00007ff0d08d5fa0 RCX: 00007ff0d065c799 [ 1557.784935][T23945] RDX: 00000000000000f1 RSI: 0000000000000000 RDI: 0000000000000064 [ 1557.784950][T23945] RBP: 00007ff0ce8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.784966][T23945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.784980][T23945] R13: 00007ff0d08d6038 R14: 00007ff0d08d5fa0 R15: 00007ffcc4f02788 [ 1557.785016][T23945] [ 1557.790532][ T810] cdc_wdm 5-1:1.0: skipping garbage [ 1557.790552][ T810] cdc_wdm 5-1:1.0: skipping garbage [ 1557.790591][T17203] betop 0003:20BC:5500.0029: unknown main item tag 0x3 [ 1557.790623][T17203] betop 0003:20BC:5500.0029: item fetching failed at offset 4/5 [ 1557.791450][T17203] betop 0003:20BC:5500.0029: parse failed [ 1557.791525][T17203] betop 0003:20BC:5500.0029: probe with driver betop failed with error -22 [ 1558.009200][ T810] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1558.009225][ T810] cdc_wdm 5-1:1.0: Unknown control protocol [ 1558.277972][T23954] FAULT_INJECTION: forcing a failure. [ 1558.277972][T23954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1558.278011][T23954] CPU: 1 UID: 0 PID: 23954 Comm: syz.6.5670 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1558.278038][T23954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1558.278052][T23954] Call Trace: [ 1558.278062][T23954] [ 1558.278072][T23954] dump_stack_lvl+0xe8/0x150 [ 1558.278112][T23954] should_fail_ex+0x46b/0x600 [ 1558.278148][T23954] _copy_from_iter+0x1d3/0x1670 [ 1558.278194][T23954] ? __pfx__copy_from_iter+0x10/0x10 [ 1558.278226][T23954] ? smack_socket_sendmsg+0x1a9/0x590 [ 1558.278255][T23954] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1558.278291][T23954] bcm_sendmsg+0x172/0x6c0 [ 1558.278327][T23954] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1558.278364][T23954] ? unwind_get_return_address+0x4d/0x90 [ 1558.278392][T23954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1558.278431][T23954] ____sys_sendmsg+0x94c/0x9c0 [ 1558.278463][T23954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1558.278498][T23954] ? import_iovec+0x73/0xa0 [ 1558.278535][T23954] ___sys_sendmsg+0x2a5/0x360 [ 1558.278566][T23954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1558.278628][T23954] ? __fget_files+0x2a/0x420 [ 1558.278658][T23954] ? __fget_files+0x3a6/0x420 [ 1558.278708][T23954] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1558.278737][T23954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1558.278774][T23954] ? __pfx_ksys_write+0x10/0x10 [ 1558.278822][T23954] do_syscall_64+0x14d/0xf80 [ 1558.278846][T23954] ? trace_irq_disable+0x3b/0x150 [ 1558.278874][T23954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.278898][T23954] ? clear_bhb_loop+0x40/0x90 [ 1558.278928][T23954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.278953][T23954] RIP: 0033:0x7efd87ddc799 [ 1558.278974][T23954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.278994][T23954] RSP: 002b:00007efd86036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1558.279019][T23954] RAX: ffffffffffffffda RBX: 00007efd88055fa0 RCX: 00007efd87ddc799 [ 1558.279036][T23954] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1558.279051][T23954] RBP: 00007efd86036090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.279067][T23954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.279082][T23954] R13: 00007efd88056038 R14: 00007efd88055fa0 R15: 00007ffc656c6f98 [ 1558.279119][T23954] [ 1558.817377][ T46] usb 5-1: USB disconnect, device number 103 [ 1559.431356][T23964] QAT: failed to copy from user cfg_data. [ 1559.761976][ T5806] usb 4-1: USB disconnect, device number 92 [ 1560.545573][T23991] 9p: Bad value for 'wfdno' [ 1560.559682][ T202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1560.829679][T22248] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 1560.995997][T22248] usb 10-1: Invalid ep0 maxpacket: 9 [ 1561.129064][T23996] tipc: Resetting bearer [ 1561.136174][T23996] tipc: Resetting bearer [ 1561.136282][T23996] team0 (unregistering): Port device team_slave_0 removed [ 1561.141328][T22248] usb 10-1: new full-speed USB device number 69 using dummy_hcd [ 1561.172248][T23998] FAULT_INJECTION: forcing a failure. [ 1561.172248][T23998] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.172285][T23998] CPU: 1 UID: 0 PID: 23998 Comm: syz.3.5683 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1561.172311][T23998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1561.172326][T23998] Call Trace: [ 1561.172336][T23998] [ 1561.172346][T23998] dump_stack_lvl+0xe8/0x150 [ 1561.172386][T23998] should_fail_ex+0x46b/0x600 [ 1561.172423][T23998] should_failslab+0xa8/0x100 [ 1561.172449][T23998] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1561.172487][T23998] ? __alloc_skb+0x1d0/0x7d0 [ 1561.172519][T23998] ? lockdep_hardirqs_on+0x7a/0x110 [ 1561.172549][T23998] __alloc_skb+0x1d0/0x7d0 [ 1561.172590][T23998] netlink_sendmsg+0x5d4/0xb40 [ 1561.172634][T23998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.172670][T23998] ? unwind_get_return_address+0x4d/0x90 [ 1561.172700][T23998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1561.172740][T23998] ____sys_sendmsg+0x94c/0x9c0 [ 1561.172772][T23998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1561.172807][T23998] ? import_iovec+0x73/0xa0 [ 1561.172846][T23998] ___sys_sendmsg+0x2a5/0x360 [ 1561.172877][T23998] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.172939][T23998] ? __fget_files+0x2a/0x420 [ 1561.172985][T23998] ? __fget_files+0x3a6/0x420 [ 1561.173033][T23998] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1561.173063][T23998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1561.173100][T23998] ? __pfx_ksys_write+0x10/0x10 [ 1561.173147][T23998] do_syscall_64+0x14d/0xf80 [ 1561.173171][T23998] ? trace_irq_disable+0x3b/0x150 [ 1561.173199][T23998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.173225][T23998] ? clear_bhb_loop+0x40/0x90 [ 1561.173253][T23998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.173277][T23998] RIP: 0033:0x7f63489fc799 [ 1561.173299][T23998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.173319][T23998] RSP: 002b:00007f6346c4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.173345][T23998] RAX: ffffffffffffffda RBX: 00007f6348c75fa0 RCX: 00007f63489fc799 [ 1561.173364][T23998] RDX: 000000002000a804 RSI: 0000200000000180 RDI: 0000000000000007 [ 1561.173380][T23998] RBP: 00007f6346c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.173395][T23998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.173409][T23998] R13: 00007f6348c76038 R14: 00007f6348c75fa0 R15: 00007ffca67b23c8 [ 1561.173446][T23998] [ 1561.180259][T23996] team0 (unregistering): Port device team_slave_1 removed [ 1561.349703][T23996] veth1_vlan: left allmulticast mode [ 1561.424636][T22248] usb 10-1: Invalid ep0 maxpacket: 9 [ 1561.434305][T22248] usb usb10-port1: attempt power cycle [ 1561.494028][T23996] team0 (unregistering): Port device macvlan0 removed [ 1561.975203][T23998] team0 (unregistering): Port device team_slave_0 removed [ 1562.163570][ T1179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1562.218893][T22248] usb 10-1: new full-speed USB device number 70 using dummy_hcd [ 1562.481955][T24007] QAT: failed to copy from user cfg_data. [ 1562.786295][T23998] team0 (unregistering): Port device team_slave_1 removed [ 1562.869768][T24009] veth0: entered promiscuous mode [ 1562.935159][T22248] usb 10-1: device descriptor read/8, error -71 [ 1563.202113][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1563.362324][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1563.367151][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.367209][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1563.367264][ T10] usb 7-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1563.367291][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.442358][ T10] usb 7-1: config 0 descriptor?? [ 1563.493035][T24013] block nbd1: server does not support multiple connections per device. [ 1563.493446][T24013] block nbd1: shutting down sockets [ 1563.640216][ T810] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1563.667937][ T36] kauditd_printk_skb: 165 callbacks suppressed [ 1563.667958][ T36] audit: type=1326 audit(1774654957.402:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.668254][ T36] audit: type=1326 audit(1774654957.402:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.668578][ T36] audit: type=1326 audit(1774654957.402:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.668972][ T36] audit: type=1326 audit(1774654957.402:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.669425][ T36] audit: type=1326 audit(1774654957.402:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.669480][ T36] audit: type=1326 audit(1774654957.402:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.817602][ T36] audit: type=1326 audit(1774654957.543:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.817857][ T36] audit: type=1326 audit(1774654957.543:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.818201][ T36] audit: type=1326 audit(1774654957.543:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.818522][ T36] audit: type=1326 audit(1774654957.543:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24023 comm="syz.1.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1563.974227][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974275][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974308][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974340][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974372][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974406][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974438][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974470][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974503][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1563.974536][ T10] chicony 0003:04F2:1123.002A: unknown main item tag 0x0 [ 1564.067891][ T810] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1564.067916][ T810] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1564.067932][ T810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1564.067972][ T810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1564.067994][ T810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1564.076176][ T810] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1564.076217][ T810] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1564.076244][ T810] usb 5-1: Product: syz [ 1564.076257][ T810] usb 5-1: Manufacturer: syz [ 1564.158245][T24009] veth0: left promiscuous mode [ 1564.204208][ T10] chicony 0003:04F2:1123.002A: hidraw0: USB HID v0.0c Device [HID 04f2:1123] on usb-dummy_hcd.6-1/input0 [ 1564.760947][T24009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.761338][T24009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.811119][ T810] cdc_wdm 5-1:1.0: skipping garbage [ 1564.811142][ T810] cdc_wdm 5-1:1.0: skipping garbage [ 1564.858749][ T810] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1564.858774][ T810] cdc_wdm 5-1:1.0: Unknown control protocol [ 1564.922922][T14912] usb 7-1: USB disconnect, device number 39 [ 1564.989281][T24032] fido_id[24032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1565.574299][ T46] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1566.371024][ T206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1566.433372][ T5806] usb 5-1: USB disconnect, device number 104 [ 1566.471859][ T46] usb 10-1: Using ep0 maxpacket: 32 [ 1566.474672][ T46] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1566.477776][ T46] usb 10-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 1566.477860][ T46] usb 10-1: too many endpoints for config 1 interface 2 altsetting 1: 110, using maximum allowed: 30 [ 1566.477903][ T46] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 1566.480997][ T46] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1566.481028][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.481051][ T46] usb 10-1: Product: syz [ 1566.481067][ T46] usb 10-1: Manufacturer: syz [ 1566.481084][ T46] usb 10-1: SerialNumber: syz [ 1567.928944][ T46] usb-storage 10-1:1.2: USB Mass Storage device detected [ 1568.526829][T17164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1569.204282][ T46] usb 10-1: USB disconnect, device number 72 [ 1569.333431][T22933] udevd[22933]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1569.348773][T24052] QAT: failed to copy from user cfg_data. [ 1569.955016][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 1569.955035][ T36] audit: type=1326 audit(1774654963.279:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.955106][ T36] audit: type=1326 audit(1774654963.279:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.955158][ T36] audit: type=1326 audit(1774654963.279:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.955206][ T36] audit: type=1326 audit(1774654963.279:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.955259][ T36] audit: type=1326 audit(1774654963.279:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.955307][ T36] audit: type=1326 audit(1774654963.279:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.955355][ T36] audit: type=1326 audit(1774654963.279:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.976977][ T36] audit: type=1326 audit(1774654963.279:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.977034][ T36] audit: type=1326 audit(1774654963.279:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1569.977116][ T36] audit: type=1326 audit(1774654963.279:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24066 comm="syz.4.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0546ac799 code=0x7ffc0000 [ 1570.115862][T22273] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1570.303881][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1570.303909][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1570.596188][T22273] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1570.596229][T22273] usb 4-1: can't read configurations, error -71 [ 1570.797109][T24078] bond9: entered promiscuous mode [ 1570.797761][T24078] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1572.630903][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1572.855937][T24084] block nbd1: server does not support multiple connections per device. [ 1572.856347][T24084] block nbd1: shutting down sockets [ 1572.949234][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1573.446968][T24111] QAT: failed to copy from user cfg_data. [ 1573.601955][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1573.601988][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1573.602010][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1573.602062][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1573.602092][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1573.604632][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1573.604654][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1573.604670][ T10] usb 2-1: Product: syz [ 1573.604681][ T10] usb 2-1: Manufacturer: syz [ 1573.632113][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1573.632175][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1573.746270][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1573.746289][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 1574.241162][ T202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1574.642627][ T10] usb 2-1: USB disconnect, device number 107 [ 1574.946749][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5724'. [ 1576.849435][T24158] QAT: failed to copy from user cfg_data. [ 1577.339642][ T10] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1577.731221][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1577.731251][ T10] usb 5-1: config 0 has no interface number 0 [ 1577.731301][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1577.731327][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.765010][ T10] usb 5-1: config 0 descriptor?? [ 1577.783162][ T10] usb 5-1: selecting invalid altsetting 1 [ 1577.784910][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1577.784930][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1577.918421][ T36] kauditd_printk_skb: 296 callbacks suppressed [ 1577.918441][ T36] audit: type=1326 audit(1774654970.738:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.918492][ T36] audit: type=1326 audit(1774654970.738:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.918541][ T36] audit: type=1326 audit(1774654970.738:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.918588][ T36] audit: type=1326 audit(1774654970.738:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.918647][ T36] audit: type=1326 audit(1774654970.738:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.918948][ T36] audit: type=1326 audit(1774654970.738:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.919607][ T36] audit: type=1326 audit(1774654970.738:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.949455][ T36] audit: type=1326 audit(1774654970.766:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.961139][ T36] audit: type=1326 audit(1774654970.766:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1577.962407][ T36] audit: type=1326 audit(1774654970.775:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24171 comm="syz.1.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d065c799 code=0x7ffc0000 [ 1578.220635][ T10] DVB: Unable to find symbol cx22700_attach() [ 1578.274508][ T10] DVB: Unable to find symbol tda10046_attach() [ 1578.274520][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1578.336904][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1578.392758][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5739'. [ 1578.438905][T24186] vlan2: entered allmulticast mode [ 1578.438926][T24186] bridge1: entered allmulticast mode [ 1578.762155][T24192] block nbd1: server does not support multiple connections per device. [ 1578.762547][T24192] block nbd1: shutting down sockets [ 1578.986726][ T46] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1579.545731][ T810] usb 5-1: USB disconnect, device number 105 [ 1579.546493][ T46] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1579.546521][ T46] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1579.546543][ T46] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1579.546596][ T46] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1579.546626][ T46] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1579.841860][T24210] QAT: failed to copy from user cfg_data. [ 1580.100076][ T46] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1580.100113][ T46] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1580.100136][ T46] usb 10-1: Product: syz [ 1580.100153][ T46] usb 10-1: Manufacturer: syz [ 1580.257577][ T46] cdc_wdm 10-1:1.0: skipping garbage [ 1580.257593][ T46] cdc_wdm 10-1:1.0: skipping garbage [ 1580.295423][ T46] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1580.295446][ T46] cdc_wdm 10-1:1.0: Unknown control protocol [ 1580.422183][T17275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1580.807715][T24224] FAULT_INJECTION: forcing a failure. [ 1580.807715][T24224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1580.807754][T24224] CPU: 1 UID: 0 PID: 24224 Comm: syz.6.5751 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1580.807779][T24224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1580.807793][T24224] Call Trace: [ 1580.807802][T24224] [ 1580.807812][T24224] dump_stack_lvl+0xe8/0x150 [ 1580.807858][T24224] should_fail_ex+0x46b/0x600 [ 1580.807891][T24224] _copy_from_user+0x2d/0xb0 [ 1580.807923][T24224] sctp_setsockopt+0x1c4/0x12c0 [ 1580.807952][T24224] ? sock_common_setsockopt+0x36/0xc0 [ 1580.807980][T24224] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1580.808010][T24224] do_sock_setsockopt+0x17c/0x1b0 [ 1580.808035][T24224] __x64_sys_setsockopt+0x143/0x1b0 [ 1580.808060][T24224] do_syscall_64+0x14d/0xf80 [ 1580.808080][T24224] ? trace_irq_disable+0x3b/0x150 [ 1580.808104][T24224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.808125][T24224] ? clear_bhb_loop+0x40/0x90 [ 1580.808149][T24224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.808169][T24224] RIP: 0033:0x7efd87ddc799 [ 1580.808189][T24224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.808208][T24224] RSP: 002b:00007efd86036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1580.808230][T24224] RAX: ffffffffffffffda RBX: 00007efd88055fa0 RCX: 00007efd87ddc799 [ 1580.808246][T24224] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000009 [ 1580.808259][T24224] RBP: 00007efd86036090 R08: 000000000001000f R09: 0000000000000000 [ 1580.808273][T24224] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 1580.808286][T24224] R13: 00007efd88056038 R14: 00007efd88055fa0 R15: 00007ffc656c6f98 [ 1580.808317][T24224] [ 1581.452033][T22831] usb 10-1: USB disconnect, device number 73 [ 1583.636974][T24253] FAULT_INJECTION: forcing a failure. [ 1583.636974][T24253] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.637013][T24253] CPU: 0 UID: 0 PID: 24253 Comm: syz.9.5761 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1583.637040][T24253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1583.637055][T24253] Call Trace: [ 1583.637064][T24253] [ 1583.637075][T24253] dump_stack_lvl+0xe8/0x150 [ 1583.637116][T24253] should_fail_ex+0x46b/0x600 [ 1583.637163][T24253] should_failslab+0xa8/0x100 [ 1583.637189][T24253] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 1583.637216][T24253] ? __get_vm_area_node+0x171/0x350 [ 1583.637255][T24253] __get_vm_area_node+0x171/0x350 [ 1583.637296][T24253] __vmalloc_node_range_noprof+0x372/0x1730 [ 1583.637333][T24253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1583.637380][T24253] ? __lock_acquire+0x6b5/0x2cf0 [ 1583.637414][T24253] ? kernel_text_address+0xa5/0xe0 [ 1583.637446][T24253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1583.637482][T24253] ? arch_stack_walk+0xfb/0x150 [ 1583.637520][T24253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1583.637550][T24253] __vmalloc_noprof+0xd2/0x120 [ 1583.637585][T24253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1583.637618][T24253] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1583.637657][T24253] bpf_prog_alloc+0x3c/0x1a0 [ 1583.637691][T24253] bpf_prog_load+0x7ba/0x1ae0 [ 1583.637738][T24253] ? __pfx_bpf_prog_load+0x10/0x10 [ 1583.637794][T24253] ? bpf_lsm_bpf+0x9/0x20 [ 1583.637818][T24253] ? security_bpf+0x7e/0x2d0 [ 1583.637851][T24253] __sys_bpf+0x618/0x950 [ 1583.637883][T24253] ? __pfx___sys_bpf+0x10/0x10 [ 1583.637910][T24253] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1583.637961][T24253] ? ksys_write+0x248/0x270 [ 1583.637998][T24253] ? __pfx_ksys_write+0x10/0x10 [ 1583.638043][T24253] __x64_sys_bpf+0x7c/0x90 [ 1583.638070][T24253] do_syscall_64+0x14d/0xf80 [ 1583.638094][T24253] ? trace_irq_disable+0x3b/0x150 [ 1583.638121][T24253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.638153][T24253] ? clear_bhb_loop+0x40/0x90 [ 1583.638182][T24253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.638207][T24253] RIP: 0033:0x7f184903c799 [ 1583.638229][T24253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.638248][T24253] RSP: 002b:00007f184728e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1583.638274][T24253] RAX: ffffffffffffffda RBX: 00007f18492b5fa0 RCX: 00007f184903c799 [ 1583.638292][T24253] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1583.638308][T24253] RBP: 00007f184728e090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.638324][T24253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.638338][T24253] R13: 00007f18492b6038 R14: 00007f18492b5fa0 R15: 00007ffeebe839c8 [ 1583.638374][T24253] [ 1583.638493][T24253] syz.9.5761: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1583.638564][T24253] CPU: 0 UID: 0 PID: 24253 Comm: syz.9.5761 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1583.638590][T24253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1583.638604][T24253] Call Trace: [ 1583.638613][T24253] [ 1583.638623][T24253] dump_stack_lvl+0xe8/0x150 [ 1583.638657][T24253] warn_alloc+0x263/0x3e0 [ 1583.638690][T24253] ? __pfx_warn_alloc+0x10/0x10 [ 1583.638714][T24253] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1583.638738][T24253] ? __get_vm_area_node+0x171/0x350 [ 1583.638782][T24253] ? __get_vm_area_node+0x2e1/0x350 [ 1583.638824][T24253] __vmalloc_node_range_noprof+0x397/0x1730 [ 1583.638880][T24253] ? __lock_acquire+0x6b5/0x2cf0 [ 1583.638912][T24253] ? kernel_text_address+0xa5/0xe0 [ 1583.638945][T24253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1583.638981][T24253] ? arch_stack_walk+0xfb/0x150 [ 1583.639019][T24253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1583.639047][T24253] __vmalloc_noprof+0xd2/0x120 [ 1583.639079][T24253] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1583.639114][T24253] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1583.639158][T24253] bpf_prog_alloc+0x3c/0x1a0 [ 1583.639193][T24253] bpf_prog_load+0x7ba/0x1ae0 [ 1583.639241][T24253] ? __pfx_bpf_prog_load+0x10/0x10 [ 1583.639296][T24253] ? bpf_lsm_bpf+0x9/0x20 [ 1583.639318][T24253] ? security_bpf+0x7e/0x2d0 [ 1583.639348][T24253] __sys_bpf+0x618/0x950 [ 1583.639379][T24253] ? __pfx___sys_bpf+0x10/0x10 [ 1583.639405][T24253] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1583.639455][T24253] ? ksys_write+0x248/0x270 [ 1583.639492][T24253] ? __pfx_ksys_write+0x10/0x10 [ 1583.639540][T24253] __x64_sys_bpf+0x7c/0x90 [ 1583.639566][T24253] do_syscall_64+0x14d/0xf80 [ 1583.639589][T24253] ? trace_irq_disable+0x3b/0x150 [ 1583.639615][T24253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.639639][T24253] ? clear_bhb_loop+0x40/0x90 [ 1583.639669][T24253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.639693][T24253] RIP: 0033:0x7f184903c799 [ 1583.639713][T24253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.639734][T24253] RSP: 002b:00007f184728e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1583.639756][T24253] RAX: ffffffffffffffda RBX: 00007f18492b5fa0 RCX: 00007f184903c799 [ 1583.639773][T24253] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1583.639787][T24253] RBP: 00007f184728e090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.639801][T24253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.639813][T24253] R13: 00007f18492b6038 R14: 00007f18492b5fa0 R15: 00007ffeebe839c8 [ 1583.639848][T24253] [ 1583.640062][T24253] Mem-Info: [ 1583.640074][T24253] active_anon:3158 inactive_anon:7728 isolated_anon:0 [ 1583.640074][T24253] active_file:27866 inactive_file:37709 isolated_file:0 [ 1583.640074][T24253] unevictable:768 dirty:404 writeback:0 [ 1583.640074][T24253] slab_reclaimable:14206 slab_unreclaimable:159116 [ 1583.640074][T24253] mapped:31905 shmem:4267 pagetables:1932 [ 1583.640074][T24253] sec_pagetables:0 bounce:0 [ 1583.640074][T24253] kernel_misc_reclaimable:0 [ 1583.640074][T24253] free:1235798 free_pcp:4962 free_cma:0 [ 1583.640145][T24253] Node 0 active_anon:12632kB inactive_anon:30912kB active_file:111268kB inactive_file:150836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127620kB dirty:1616kB writeback:0kB shmem:15532kB kernel_stack:16404kB pagetables:7592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1583.640200][T24253] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1583.640247][T24253] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.640314][T24253] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1583.640354][T24253] Node 0 DMA32 free:1057472kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12632kB inactive_anon:30912kB active_file:111268kB inactive_file:150836kB unevictable:1536kB writepending:1616kB zspages:0kB present:3129332kB managed:2566476kB mlocked:0kB bounce:0kB free_pcp:19848kB local_pcp:13384kB free_cma:0kB [ 1583.640426][T24253] lowmem_reserve[]: 0 0 0 0 0 [ 1583.640464][T24253] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:416kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.640531][T24253] lowmem_reserve[]: 0 0 0 0 0 [ 1583.640569][T24253] Node 1 Normal free:3870360kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1583.640639][T24253] lowmem_reserve[]: 0 0 0 0 0 [ 1583.640679][T24253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1583.640812][T24253] Node 0 DMA32: 1673*4kB (UME) 3846*8kB (UME) 2204*16kB (UME) 713*32kB (UME) 475*64kB (UME) 231*128kB (UM) 281*256kB (UM) 257*512kB (UME) 78*1024kB (UME) 48*2048kB (UME) 127*4096kB (UM) = 1057396kB [ 1583.641010][T24253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1583.641229][T24253] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 7*16kB (UM) 9*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 943*4096kB (UM) = 3870360kB [ 1583.641408][T24253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.641429][T24253] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1583.641449][T24253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1583.641468][T24253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1583.641488][T24253] 69836 total pagecache pages [ 1583.641503][T24253] 0 pages in swap cache [ 1583.641512][T24253] Free swap = 124996kB [ 1583.641521][T24253] Total swap = 124996kB [ 1583.641531][T24253] 2097051 pages RAM [ 1583.641540][T24253] 0 pages HighMem/MovableOnly [ 1583.641553][T24253] 423713 pages reserved [ 1583.641561][T24253] 0 pages cma reserved [ 1583.713783][T14912] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1584.309733][T24254] QAT: failed to copy from user cfg_data. [ 1584.312131][T14912] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1584.312189][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1584.312222][T14912] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1584.312251][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1584.312280][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1584.316762][T14912] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1584.316815][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1584.316847][T14912] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1584.316876][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1584.316907][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1584.354753][T14912] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1584.354859][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1584.354891][T14912] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1584.354920][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1584.354950][T14912] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1584.493172][T17124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1584.541999][T14912] usb 2-1: string descriptor 0 read error: -22 [ 1584.542107][T14912] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1584.542126][T14912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.325403][T14912] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1585.636020][T14912] usb 2-1: USB disconnect, device number 108 [ 1585.938799][ T9571] failed to send hello msg [ 1585.938815][ T9571] failed while handling packet from 1:60042 [ 1585.997371][T24262] FAULT_INJECTION: forcing a failure. [ 1585.997371][T24262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.997411][T24262] CPU: 1 UID: 0 PID: 24262 Comm: syz.4.5762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1585.997440][T24262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1585.997455][T24262] Call Trace: [ 1585.997464][T24262] [ 1585.997474][T24262] dump_stack_lvl+0xe8/0x150 [ 1585.997516][T24262] should_fail_ex+0x46b/0x600 [ 1585.997552][T24262] _copy_from_user+0x2d/0xb0 [ 1585.997589][T24262] do_sock_getsockopt+0x165/0x3f0 [ 1585.997619][T24262] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1585.997644][T24262] ? __fget_files+0x3a6/0x420 [ 1585.997674][T24262] ? __fget_files+0x2a/0x420 [ 1585.997711][T24262] __x64_sys_getsockopt+0x1aa/0x250 [ 1585.997746][T24262] do_syscall_64+0x14d/0xf80 [ 1585.997770][T24262] ? trace_irq_disable+0x3b/0x150 [ 1585.997799][T24262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.997823][T24262] ? clear_bhb_loop+0x40/0x90 [ 1585.997852][T24262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.997876][T24262] RIP: 0033:0x7fd0546ac799 [ 1585.997899][T24262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.997919][T24262] RSP: 002b:00007fd0528dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1585.997944][T24262] RAX: ffffffffffffffda RBX: 00007fd054926090 RCX: 00007fd0546ac799 [ 1585.997962][T24262] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 000000000000000b [ 1585.997976][T24262] RBP: 00007fd0528dd090 R08: 0000200000000080 R09: 0000000000000000 [ 1585.997993][T24262] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1585.998009][T24262] R13: 00007fd054926128 R14: 00007fd054926090 R15: 00007fff1c08fa48 [ 1585.998046][T24262] [ 1586.198444][ T46] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1586.362294][T22831] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1586.388293][ T46] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1586.388349][ T46] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1586.388378][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.426182][ T46] usb 10-1: config 0 descriptor?? [ 1586.458412][ T46] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1586.502562][T24260] block device autoloading is deprecated and will be removed. [ 1586.521523][T22831] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1586.521581][T22831] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1586.521629][T22831] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1586.521655][T22831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.527176][T22831] usb 4-1: config 0 descriptor?? [ 1586.578944][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.661434][T22831] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1587.170883][T14912] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 1587.344934][T14912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1587.347885][T14912] usb 5-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1587.347923][T14912] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1587.389043][T14912] usb 5-1: string descriptor 0 read error: -22 [ 1587.389198][T14912] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1587.389223][T14912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.459798][T14912] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input34 [ 1587.994730][ T5149] bcm5974 5-1:1.0: could not read from device [ 1588.044702][T14912] usb 5-1: USB disconnect, device number 106 [ 1588.080005][T24285] block nbd1: server does not support multiple connections per device. [ 1588.080381][T24285] block nbd1: shutting down sockets [ 1589.432079][T14912] usb 10-1: USB disconnect, device number 74 [ 1589.447407][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1589.507238][ T5980] usb 4-1: USB disconnect, device number 95 [ 1589.632816][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1589.632851][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1589.632875][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1589.632928][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1589.632958][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1589.637352][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1589.637386][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1589.637410][ T10] usb 7-1: Product: syz [ 1589.637427][ T10] usb 7-1: Manufacturer: syz [ 1589.705897][T24300] FAULT_INJECTION: forcing a failure. [ 1589.705897][T24300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.706017][T24300] CPU: 1 UID: 0 PID: 24300 Comm: syz.1.5774 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1589.706095][T24300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1589.706134][T24300] Call Trace: [ 1589.706156][T24300] [ 1589.706185][T24300] dump_stack_lvl+0xe8/0x150 [ 1589.706280][T24300] should_fail_ex+0x46b/0x600 [ 1589.706377][T24300] _copy_to_user+0x31/0xb0 [ 1589.706469][T24300] simple_read_from_buffer+0xe1/0x170 [ 1589.706559][T24300] proc_fail_nth_read+0x1be/0x230 [ 1589.706642][T24300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1589.706709][T24300] ? rw_verify_area+0x2ac/0x4e0 [ 1589.706809][T24300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1589.706883][T24300] vfs_read+0x212/0xa80 [ 1589.706990][T24300] ? __pfx_vfs_read+0x10/0x10 [ 1589.707101][T24300] ? fdget+0x14e/0x1f0 [ 1589.707188][T24300] ? do_fanotify_mark+0x49e/0xff0 [ 1589.707254][T24300] ? do_sys_openat2+0x14c/0x200 [ 1589.707361][T24300] ksys_read+0x156/0x270 [ 1589.707452][T24300] ? __pfx_ksys_read+0x10/0x10 [ 1589.707573][T24300] do_syscall_64+0x14d/0xf80 [ 1589.707633][T24300] ? trace_irq_disable+0x3b/0x150 [ 1589.707698][T24300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.707761][T24300] ? clear_bhb_loop+0x40/0x90 [ 1589.707834][T24300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.707895][T24300] RIP: 0033:0x7ff0d061cfce [ 1589.707947][T24300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1589.707991][T24300] RSP: 002b:00007ff0ce8adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1589.708055][T24300] RAX: ffffffffffffffda RBX: 00007ff0ce8ae6c0 RCX: 00007ff0d061cfce [ 1589.708105][T24300] RDX: 000000000000000f RSI: 00007ff0ce8ae0a0 RDI: 0000000000000003 [ 1589.708139][T24300] RBP: 00007ff0ce8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.708184][T24300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.708217][T24300] R13: 00007ff0d08d6038 R14: 00007ff0d08d5fa0 R15: 00007ffcc4f02788 [ 1589.708309][T24300] [ 1589.885896][ T9571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1589.970292][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 1589.970327][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 1589.998761][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1589.998787][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 1590.196729][T22273] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1590.413577][T22273] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1590.413617][T22273] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1590.413646][T22273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1590.413681][T22273] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 1590.413705][T22273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.489602][T22273] usb 5-1: config 0 descriptor?? [ 1590.490871][T24301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1593.457963][ T206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1593.463458][T22273] hid_parser_main: 29 callbacks suppressed [ 1593.463483][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463516][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463544][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463572][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463600][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463628][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463656][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463684][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463711][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.463739][T22273] apple 0003:05AC:0292.002B: unknown main item tag 0x0 [ 1593.924656][T24313] syz.4.5777 (24313): drop_caches: 2 [ 1594.424276][T22273] apple 0003:05AC:0292.002B: unknown global tag 0xe [ 1594.424304][T22273] apple 0003:05AC:0292.002B: item 0 2 1 14 parsing failed [ 1594.425224][T22273] apple 0003:05AC:0292.002B: parse failed [ 1594.425402][T22273] apple 0003:05AC:0292.002B: probe with driver apple failed with error -22 [ 1594.486270][T22273] usb 5-1: USB disconnect, device number 107 [ 1594.529763][ T46] usb 7-1: USB disconnect, device number 40 [ 1594.589644][T16696] Bluetooth: hci3: command 0x0406 tx timeout [ 1594.796054][T24324] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5784'. [ 1594.958288][T24327] input: syz0 as /devices/virtual/input/input35 [ 1594.996022][ T36] kauditd_printk_skb: 172 callbacks suppressed [ 1594.996042][ T36] audit: type=1326 audit(1774654986.712:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24326 comm="syz.3.5785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x0 [ 1595.107338][T14912] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1595.196214][T10383] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1595.292126][T14912] usb 10-1: Using ep0 maxpacket: 16 [ 1595.296830][T14912] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1595.298507][T14912] usb 10-1: config 1 has an invalid interface number: 93 but max is 0 [ 1595.298533][T14912] usb 10-1: config 1 has no interface number 0 [ 1595.298581][T14912] usb 10-1: config 1 interface 93 has no altsetting 0 [ 1595.301235][T14912] usb 10-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a [ 1595.301263][T14912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.301285][T14912] usb 10-1: Product: syz [ 1595.301300][T14912] usb 10-1: Manufacturer: syz [ 1595.301315][T14912] usb 10-1: SerialNumber: syz [ 1595.356261][T10383] usb 7-1: Using ep0 maxpacket: 8 [ 1595.359626][T10383] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1595.367692][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1595.367727][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1595.367751][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1595.367780][T10383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1595.367805][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1595.367829][T10383] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 1595.367857][T10383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 120 [ 1595.431035][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1595.438768][ T206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.464641][T10383] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1595.464674][T10383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.464697][T10383] usb 7-1: Product: syz [ 1595.464713][T10383] usb 7-1: Manufacturer: syz [ 1595.464730][T10383] usb 7-1: SerialNumber: syz [ 1595.538129][T10383] usb 7-1: config 0 descriptor?? [ 1595.540175][T24324] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1595.540555][T24324] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1595.589044][T10383] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1595.654244][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1595.654356][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1595.654383][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.750242][ T10] usb 2-1: config 0 descriptor?? [ 1595.819979][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1596.036444][T14912] option 10-1:1.93: GSM modem (1-port) converter detected [ 1596.083499][T14912] usb 10-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1596.090687][T14912] usb 10-1: USB disconnect, device number 75 [ 1596.116169][T14912] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1596.120777][T14912] option 10-1:1.93: device disconnected [ 1596.249000][T10383] usb 7-1: USB disconnect, device number 41 [ 1597.500596][T23085] udevd[23085]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1598.318738][T24358] block nbd1: server does not support multiple connections per device. [ 1598.319636][T24358] block nbd1: shutting down sockets [ 1598.626247][T14912] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1598.788813][T14912] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1598.788843][T14912] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1598.788864][T14912] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1598.788912][T14912] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1598.788940][T14912] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1598.790874][T14912] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1598.790904][T14912] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1598.790927][T14912] usb 7-1: Product: syz [ 1598.790943][T14912] usb 7-1: Manufacturer: syz [ 1598.899252][T14912] cdc_wdm 7-1:1.0: skipping garbage [ 1598.899276][T14912] cdc_wdm 7-1:1.0: skipping garbage [ 1598.916133][T14912] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1598.916155][T14912] cdc_wdm 7-1:1.0: Unknown control protocol [ 1599.343312][T24374] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5797'. [ 1599.535127][ T206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.874423][ T5980] usb 2-1: USB disconnect, device number 109 [ 1599.994369][T22273] usb 7-1: USB disconnect, device number 42 [ 1600.004810][T14912] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1600.177912][T14912] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1600.177941][T14912] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1600.177960][T14912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1600.178021][T14912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1600.178048][T14912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1600.184011][T14912] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1600.184044][T14912] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1600.184067][T14912] usb 4-1: Product: syz [ 1600.184084][T14912] usb 4-1: Manufacturer: syz [ 1600.325764][T14912] cdc_wdm 4-1:1.0: skipping garbage [ 1600.325786][T14912] cdc_wdm 4-1:1.0: skipping garbage [ 1600.329203][T14912] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1600.329226][T14912] cdc_wdm 4-1:1.0: Unknown control protocol [ 1600.501672][T24396] netlink: 'syz.1.5801': attribute type 10 has an invalid length. [ 1600.643744][T24396] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1600.817375][ T44] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1600.838242][T22273] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1601.002465][T22273] usb 2-1: Using ep0 maxpacket: 8 [ 1601.050802][T22273] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1601.050838][T22273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1601.050862][T22273] usb 2-1: Product: syz [ 1601.050879][T22273] usb 2-1: Manufacturer: syz [ 1601.050895][T22273] usb 2-1: SerialNumber: syz [ 1601.093445][T22273] usb 2-1: config 0 descriptor?? [ 1601.104327][T22273] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1601.140493][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 1601.320472][T22273] gspca_sn9c2028: read1 error -32 [ 1601.321617][T22273] gspca_sn9c2028: read1 error -32 [ 1602.300477][T24423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5809'. [ 1602.809803][T14912] usb 4-1: USB disconnect, device number 96 [ 1602.859965][ T5980] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1603.030295][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1603.030333][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1603.030363][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1603.030393][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1603.030440][ T5980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1603.030466][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.032374][T24434] block nbd1: server does not support multiple connections per device. [ 1603.032714][T24434] block nbd1: shutting down sockets [ 1603.137091][ T5980] usb 5-1: config 0 descriptor?? [ 1603.138520][T24427] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1603.445622][T22831] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1603.611236][T22831] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1603.611271][T22831] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1603.611294][T22831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1603.611350][T22831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1603.611381][T22831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1603.615075][T22831] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1603.615107][T22831] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1603.615130][T22831] usb 4-1: Product: syz [ 1603.615147][T22831] usb 4-1: Manufacturer: syz [ 1603.759459][T22831] cdc_wdm 4-1:1.0: skipping garbage [ 1603.759483][T22831] cdc_wdm 4-1:1.0: skipping garbage [ 1603.781020][T22831] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1603.781044][T22831] cdc_wdm 4-1:1.0: Unknown control protocol [ 1603.784465][ T5980] hid_parser_main: 362 callbacks suppressed [ 1603.784488][ T5980] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1603.784520][ T5980] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1603.784548][ T5980] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1603.784578][ T5980] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1603.784606][ T5980] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1603.861971][ T5980] plantronics 0003:047F:FFFF.002C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1603.918014][T22831] usb 2-1: USB disconnect, device number 110 [ 1604.064715][T24452] FAULT_INJECTION: forcing a failure. [ 1604.064715][T24452] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.064753][T24452] CPU: 0 UID: 0 PID: 24452 Comm: syz.6.5817 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1604.064780][T24452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1604.064794][T24452] Call Trace: [ 1604.064804][T24452] [ 1604.064814][T24452] dump_stack_lvl+0xe8/0x150 [ 1604.064852][T24452] should_fail_ex+0x46b/0x600 [ 1604.064888][T24452] should_failslab+0xa8/0x100 [ 1604.064914][T24452] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1604.064950][T24452] ? __alloc_skb+0x1d0/0x7d0 [ 1604.064983][T24452] ? lockdep_hardirqs_on+0x7a/0x110 [ 1604.065013][T24452] __alloc_skb+0x1d0/0x7d0 [ 1604.065053][T24452] netlink_sendmsg+0x5d4/0xb40 [ 1604.065101][T24452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1604.065137][T24452] ? unwind_get_return_address+0x4d/0x90 [ 1604.065166][T24452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1604.065213][T24452] ____sys_sendmsg+0x94c/0x9c0 [ 1604.065243][T24452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1604.065279][T24452] ? import_iovec+0x73/0xa0 [ 1604.065316][T24452] ___sys_sendmsg+0x2a5/0x360 [ 1604.065347][T24452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1604.065410][T24452] ? __fget_files+0x2a/0x420 [ 1604.065439][T24452] ? __fget_files+0x3a6/0x420 [ 1604.065480][T24452] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1604.065509][T24452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1604.065544][T24452] ? __pfx_ksys_write+0x10/0x10 [ 1604.065590][T24452] do_syscall_64+0x14d/0xf80 [ 1604.065613][T24452] ? trace_irq_disable+0x3b/0x150 [ 1604.065640][T24452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.065664][T24452] ? clear_bhb_loop+0x40/0x90 [ 1604.065693][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.065717][T24452] RIP: 0033:0x7efd87ddc799 [ 1604.065739][T24452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.065759][T24452] RSP: 002b:00007efd86036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1604.065784][T24452] RAX: ffffffffffffffda RBX: 00007efd88055fa0 RCX: 00007efd87ddc799 [ 1604.065801][T24452] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1604.065816][T24452] RBP: 00007efd86036090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.065844][T24452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.065858][T24452] R13: 00007efd88056038 R14: 00007efd88055fa0 R15: 00007ffc656c6f98 [ 1604.065892][T24452] [ 1604.519331][T24455] fuse: Unknown parameter '€¶ë?±¨¦³ [ 1604.519331][T24455] E2Ë' [ 1604.764718][ T46] usb 4-1: USB disconnect, device number 97 [ 1604.806899][T22831] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1604.995768][T24465] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5821'. [ 1605.021976][T22831] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1605.022007][T22831] usb 2-1: config 0 has no interface number 0 [ 1605.022055][T22831] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1605.022085][T22831] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 21179, setting to 64 [ 1605.024333][T22831] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1605.024367][T22831] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1605.024392][T22831] usb 2-1: Product: syz [ 1605.024477][T22831] usb 2-1: SerialNumber: syz [ 1605.100520][T22831] usb 2-1: config 0 descriptor?? [ 1605.107146][T24455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1605.138657][T22831] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 1605.162623][T22831] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input37 [ 1605.336784][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1605.612312][T14912] usb 5-1: USB disconnect, device number 108 [ 1605.740101][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.374117][ T9571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.536253][ C1] cm109_urb_ctl_callback: 527 callbacks suppressed [ 1606.536280][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.536532][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.536779][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.537036][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.537284][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.537538][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.537796][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.538051][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.538297][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.538555][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.567533][ T10] usb 2-1: USB disconnect, device number 111 [ 1606.567593][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1606.712863][ T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1606.950890][T14912] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1607.036368][T24483] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5826'. [ 1607.118263][T14912] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1607.118296][T14912] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1607.118319][T14912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1607.118374][T14912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1607.118405][T14912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1607.120825][T14912] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1607.120856][T14912] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1607.120978][T14912] usb 4-1: Product: syz [ 1607.120996][T14912] usb 4-1: Manufacturer: syz [ 1607.257917][T14912] cdc_wdm 4-1:1.0: skipping garbage [ 1607.257941][T14912] cdc_wdm 4-1:1.0: skipping garbage [ 1607.281475][T14912] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1607.281497][T14912] cdc_wdm 4-1:1.0: Unknown control protocol [ 1607.335287][ T10] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1607.604781][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1607.616554][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1607.620917][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.621059][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1607.644025][ T10] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1607.644118][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.644172][ T10] usb 10-1: Product: syz [ 1607.644219][ T10] usb 10-1: Manufacturer: syz [ 1607.644260][ T10] usb 10-1: SerialNumber: syz [ 1609.049900][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1609.049959][ T10] usb 10-1: MIDIStreaming interface descriptor not found [ 1609.236984][ T10] usb 10-1: USB disconnect, device number 76 [ 1609.384022][T23085] udevd[23085]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1609.440479][T22831] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1609.600774][T22831] usb 2-1: Using ep0 maxpacket: 16 [ 1609.604075][T22831] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1609.609373][T22831] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1609.609406][T22831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.609491][T22831] usb 2-1: Product: syz [ 1609.609509][T22831] usb 2-1: Manufacturer: syz [ 1609.609526][T22831] usb 2-1: SerialNumber: syz [ 1609.683692][T22831] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1609.683712][T22831] r8152-cfgselector 2-1: config 0 descriptor?? [ 1611.101264][T24500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.101855][T24500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.335840][ T810] r8152-cfgselector 2-1: USB disconnect, device number 112 [ 1611.486666][T22831] usb 4-1: USB disconnect, device number 98 [ 1611.842293][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5832'. [ 1611.842334][T24509] netlink: 'syz.9.5832': attribute type 30 has an invalid length. [ 1611.864924][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.036595][ T69] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1612.051693][ T69] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1612.051746][ T69] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1612.051800][ T69] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1612.294894][T24514] block nbd1: server does not support multiple connections per device. [ 1612.300096][T24514] block nbd1: shutting down sockets [ 1612.533165][T13396] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.560824][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1612.603543][ T46] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1612.681236][T24524] loop5: detected capacity change from 0 to 3 [ 1612.685268][T24524] loop5: [POWERTEC] p1 p2 p3 p4 p5 [ 1612.685519][T24524] loop5: p1 start 101253120 is beyond EOD, truncated [ 1612.685543][T24524] loop5: p2 start 327680 is beyond EOD, truncated [ 1612.685561][T24524] loop5: p3 start 8650759 is beyond EOD, truncated [ 1612.685580][T24524] loop5: p4 size 1048576 extends beyond EOD, truncated [ 1612.705737][T24524] loop5: p5 start 4294901760 is beyond EOD, truncated [ 1612.751632][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1612.751665][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1612.751687][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1612.751741][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1612.751771][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1612.768301][ T46] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1612.768393][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1612.768424][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1612.768462][ T46] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1612.768566][ T46] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1612.768592][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.782691][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1612.782723][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1612.782746][ T10] usb 2-1: Product: syz [ 1612.782762][ T10] usb 2-1: Manufacturer: syz [ 1612.924927][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1612.924947][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1612.928076][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1612.928098][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 1612.929200][ T46] usb 10-1: config 0 descriptor?? [ 1612.930599][T24519] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1612.957621][T24527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5836'. [ 1612.957657][T24527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5836'. [ 1613.029446][T24527] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1613.091328][T24530] netlink: 'syz.6.5838': attribute type 1 has an invalid length. [ 1613.193561][T24530] bond1: entered promiscuous mode [ 1613.194460][T24530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1613.223376][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.223452][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.227921][T22933] udevd[22933]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1613.439900][T24530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1613.440450][T24530] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1613.440478][T24530] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1613.537028][T24530] bond1: (slave ip6gre1): making interface the new active one [ 1613.554696][T24530] ip6gre1: entered promiscuous mode [ 1613.557226][T24530] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1613.666306][ T46] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1613.666344][ T46] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1613.666375][ T46] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1613.666405][ T46] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1613.666434][ T46] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1613.747782][T24543] fuse: Bad value for 'fd' [ 1613.815061][ T46] plantronics 0003:047F:FFFF.002D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1614.003368][ T10] usb 2-1: USB disconnect, device number 113 [ 1614.215080][T24551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1614.227817][ T46] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1614.441564][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 1614.444013][ T46] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1614.447159][ T46] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1614.447189][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.447212][ T46] usb 5-1: Product: syz [ 1614.447294][ T46] usb 5-1: Manufacturer: syz [ 1614.447312][ T46] usb 5-1: SerialNumber: syz [ 1614.633270][T22831] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1615.233403][ T46] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1615.233432][ T46] r8152-cfgselector 5-1: config 0 descriptor?? [ 1615.307135][T22831] usb 4-1: Using ep0 maxpacket: 32 [ 1615.313704][T22831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1615.535271][T22831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.535334][T22831] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1615.567515][T22831] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1615.567546][T22831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.567569][T22831] usb 4-1: Product: syz [ 1615.567585][T22831] usb 4-1: Manufacturer: syz [ 1615.567602][T22831] usb 4-1: SerialNumber: syz [ 1615.808340][T24546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.809083][T24546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.868365][ T10] r8152-cfgselector 5-1: USB disconnect, device number 109 [ 1615.884365][T22831] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1615.884425][T22831] usb 4-1: MIDIStreaming interface descriptor not found [ 1616.066977][T22831] usb 4-1: USB disconnect, device number 99 [ 1616.170777][ T810] usb 10-1: USB disconnect, device number 77 [ 1616.924060][T24571] fuse: Bad value for 'fd' [ 1616.975608][T24575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5852'. [ 1616.975642][T24575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5852'. [ 1617.031260][T24569] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1617.540811][T24588] block nbd1: server does not support multiple connections per device. [ 1617.541252][T24588] block nbd1: shutting down sockets [ 1617.751420][ T810] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1617.906091][ T810] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1617.906125][ T810] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1617.906148][ T810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1617.906200][ T810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1617.906229][ T810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1617.908510][ T810] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1617.908540][ T810] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1617.908562][ T810] usb 5-1: Product: syz [ 1617.908578][ T810] usb 5-1: Manufacturer: syz [ 1617.997510][ T810] cdc_wdm 5-1:1.0: skipping garbage [ 1617.997531][ T810] cdc_wdm 5-1:1.0: skipping garbage [ 1618.002994][T17164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.011389][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.068905][ T810] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1618.068932][ T810] cdc_wdm 5-1:1.0: Unknown control protocol [ 1618.192543][T22248] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1618.246009][T24600] netlink: 'syz.9.5861': attribute type 7 has an invalid length. [ 1618.246032][T24600] netlink: 'syz.9.5861': attribute type 8 has an invalid length. [ 1618.246048][T24600] netlink: 'syz.9.5861': attribute type 13 has an invalid length. [ 1618.357044][T22248] usb 4-1: Using ep0 maxpacket: 16 [ 1618.359589][T22248] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1618.364566][T22248] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1618.364597][T22248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.364619][T22248] usb 4-1: Product: syz [ 1618.364635][T22248] usb 4-1: Manufacturer: syz [ 1618.364651][T22248] usb 4-1: SerialNumber: syz [ 1618.374045][T22831] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1618.420277][T22248] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1618.420304][T22248] r8152-cfgselector 4-1: config 0 descriptor?? [ 1618.534354][T22831] usb 7-1: Using ep0 maxpacket: 32 [ 1618.539821][T22831] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1618.541409][T22831] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.541466][T22831] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1618.582569][T22831] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1618.582603][T22831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.582627][T22831] usb 7-1: Product: syz [ 1618.582659][T22831] usb 7-1: Manufacturer: syz [ 1618.582676][T22831] usb 7-1: SerialNumber: syz [ 1619.250404][T22831] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1619.250452][T22831] usb 7-1: MIDIStreaming interface descriptor not found [ 1619.343156][T24593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.344216][T24593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.473266][T22831] usb 7-1: USB disconnect, device number 43 [ 1619.499677][T14912] usb 5-1: USB disconnect, device number 110 [ 1619.514174][ T10] r8152-cfgselector 4-1: USB disconnect, device number 100 [ 1619.790961][T23085] udevd[23085]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1619.926331][T24612] fuse: Bad value for 'fd' [ 1619.991645][T24614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1620.041110][ T6008] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1620.201339][ T6008] usb 10-1: Using ep0 maxpacket: 32 [ 1620.222013][ T6008] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1620.222045][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.265997][ T6008] usb 10-1: config 0 descriptor?? [ 1620.293354][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1620.354607][T24624] FAULT_INJECTION: forcing a failure. [ 1620.354607][T24624] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.354647][T24624] CPU: 0 UID: 0 PID: 24624 Comm: syz.6.5869 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1620.354679][T24624] Tainted: [L]=SOFTLOCKUP [ 1620.354689][T24624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1620.354703][T24624] Call Trace: [ 1620.354713][T24624] [ 1620.354723][T24624] dump_stack_lvl+0xe8/0x150 [ 1620.354772][T24624] should_fail_ex+0x46b/0x600 [ 1620.354809][T24624] should_failslab+0xa8/0x100 [ 1620.354835][T24624] __kmalloc_noprof+0xdf/0x7b0 [ 1620.354872][T24624] ? tomoyo_encode+0x28b/0x550 [ 1620.354908][T24624] tomoyo_encode+0x28b/0x550 [ 1620.354943][T24624] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1620.354983][T24624] ? tomoyo_path_number_perm+0x219/0x630 [ 1620.355021][T24624] tomoyo_path_number_perm+0x246/0x630 [ 1620.355061][T24624] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1620.355102][T24624] ? sb_end_write+0xe9/0x1c0 [ 1620.355131][T24624] ? vfs_write+0x9ce/0xba0 [ 1620.355202][T24624] ? ksys_write+0x202/0x270 [ 1620.355246][T24624] security_file_ioctl+0xc3/0x2a0 [ 1620.355273][T24624] __se_sys_ioctl+0x47/0x170 [ 1620.355300][T24624] do_syscall_64+0x14d/0xf80 [ 1620.355323][T24624] ? trace_irq_disable+0x3b/0x150 [ 1620.355352][T24624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.355377][T24624] ? clear_bhb_loop+0x40/0x90 [ 1620.355406][T24624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.355431][T24624] RIP: 0033:0x7efd87ddc799 [ 1620.355452][T24624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.355472][T24624] RSP: 002b:00007efd86036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1620.355497][T24624] RAX: ffffffffffffffda RBX: 00007efd88055fa0 RCX: 00007efd87ddc799 [ 1620.355514][T24624] RDX: 0000000000000000 RSI: 00000000000007a9 RDI: 0000000000000003 [ 1620.355528][T24624] RBP: 00007efd86036090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.355543][T24624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.355556][T24624] R13: 00007efd88056038 R14: 00007efd88055fa0 R15: 00007ffc656c6f98 [ 1620.355593][T24624] [ 1620.355615][T24624] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1620.468596][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1620.485733][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1620.543259][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.543321][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1620.543351][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1620.621439][ T6008] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1620.672201][ T10] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1620.672234][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.672257][ T10] usb 2-1: Product: syz [ 1620.672271][ T10] usb 2-1: Manufacturer: syz [ 1620.672286][ T10] usb 2-1: SerialNumber: syz [ 1620.683425][T24608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.724159][T24608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.733832][T24614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1620.804323][ T6008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1620.806997][ T6008] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1620.807063][ T6008] usb 10-1: media controller created [ 1620.944325][ T6008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.013640][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1621.013701][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 1621.257435][ T6008] az6027: usb out operation failed. (-71) [ 1621.260323][ T6008] az6027: usb out operation failed. (-71) [ 1621.260342][ T6008] stb0899_attach: Driver disabled by Kconfig [ 1621.260353][ T6008] az6027: no front-end attached [ 1621.260353][ T6008] [ 1621.260794][ T6008] az6027: usb out operation failed. (-71) [ 1621.260811][ T6008] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1621.268755][ T6008] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input39 [ 1621.276733][ T6008] dvb-usb: schedule remote query interval to 400 msecs. [ 1621.276796][ T6008] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1621.312159][ T6008] usb 10-1: USB disconnect, device number 78 [ 1622.105439][ T36] audit: type=1326 audit(1774655012.091:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.105822][ T36] audit: type=1326 audit(1774655012.091:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.106244][ T36] audit: type=1326 audit(1774655012.091:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.106310][ T36] audit: type=1326 audit(1774655012.091:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.137512][ T36] audit: type=1326 audit(1774655012.119:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.139129][ T36] audit: type=1326 audit(1774655012.119:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.171338][ T36] audit: type=1326 audit(1774655012.119:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.172297][ T36] audit: type=1326 audit(1774655012.147:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.173055][ T36] audit: type=1326 audit(1774655012.147:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.173120][ T36] audit: type=1326 audit(1774655012.147:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.3.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1622.620796][ T10] usb 2-1: USB disconnect, device number 114 [ 1622.785932][T23085] udevd[23085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1623.158789][ T6008] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1623.477729][ T6806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1623.525126][T24657] block nbd1: server does not support multiple connections per device. [ 1623.525584][T24657] block nbd1: shutting down sockets [ 1624.405821][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1624.449383][ T6806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1624.585355][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1624.585389][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1624.585412][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1624.585465][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1624.585495][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1624.587987][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1624.588018][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1624.588042][ T10] usb 4-1: Product: syz [ 1624.588059][ T10] usb 4-1: Manufacturer: syz [ 1624.768062][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1624.768078][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1625.644291][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1625.644318][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 1626.349284][T24676] QAT: failed to copy from user cfg_data. [ 1626.726107][ T6008] usb 4-1: USB disconnect, device number 101 [ 1627.149480][T14912] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1627.307604][T14912] usb 10-1: Using ep0 maxpacket: 8 [ 1627.311755][T14912] usb 10-1: config 0 has an invalid interface number: 4 but max is 0 [ 1627.311785][T14912] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1627.311808][T14912] usb 10-1: config 0 has no interface number 0 [ 1627.311930][T14912] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1627.311956][T14912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.414873][T14912] usb 10-1: config 0 descriptor?? [ 1627.943623][T14912] usb 10-1: string descriptor 0 read error: -32 [ 1627.973752][T14912] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1627.976465][T14912] gspca_vc032x: reg_r err -71 [ 1627.976566][T14912] vc032x 10-1:0.4: probe with driver vc032x failed with error -71 [ 1628.004885][T14912] usb 10-1: USB disconnect, device number 79 [ 1629.682857][ T6008] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1630.167831][ T6806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1630.307655][T24718] QAT: failed to copy from user cfg_data. [ 1630.327664][ T206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1630.349864][ T6008] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1630.349895][ T6008] usb 7-1: config 0 has no interface number 0 [ 1630.364989][ T6008] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1630.365083][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.365147][ T6008] usb 7-1: Product: syz [ 1630.365189][ T6008] usb 7-1: Manufacturer: syz [ 1630.365230][ T6008] usb 7-1: SerialNumber: syz [ 1630.470708][ T6008] usb 7-1: config 0 descriptor?? [ 1630.900179][T24705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5893'. [ 1630.901550][T24705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5893'. [ 1630.911856][ T6008] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1630.963343][ T10] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1631.581118][ T6008] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1631.581639][ T6008] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1631.581692][ T6008] usb 7-1: media controller created [ 1631.809237][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1631.809270][ T10] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1631.809292][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1631.809344][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1631.809374][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1631.813243][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1631.813274][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1631.813297][ T10] usb 10-1: Product: syz [ 1631.813314][ T10] usb 10-1: Manufacturer: syz [ 1631.862188][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 1631.862235][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 1631.879662][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1631.879686][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 1632.014739][ T6008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1632.047073][T24728] block nbd1: server does not support multiple connections per device. [ 1632.054332][T24728] block nbd1: shutting down sockets [ 1632.306524][ T36] kauditd_printk_skb: 171 callbacks suppressed [ 1632.306546][ T36] audit: type=1326 audit(1774655021.626:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.307896][ T36] audit: type=1326 audit(1774655021.626:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.307949][ T36] audit: type=1326 audit(1774655021.626:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.308256][ T36] audit: type=1326 audit(1774655021.626:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.315481][ T36] audit: type=1326 audit(1774655021.636:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.315541][ T36] audit: type=1326 audit(1774655021.636:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.318805][ T36] audit: type=1326 audit(1774655021.636:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.340737][ T10] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1632.360073][ T36] audit: type=1326 audit(1774655021.682:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.405728][ T36] audit: type=1326 audit(1774655021.720:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.405857][ T36] audit: type=1326 audit(1774655021.729:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24730 comm="syz.3.5900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63489fc799 code=0x7ffc0000 [ 1632.610220][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1632.610264][ T10] usb 2-1: can't read configurations, error -71 [ 1632.897189][ T5806] usb 10-1: USB disconnect, device number 80 [ 1633.223196][ T6008] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1633.495437][T24749] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5903'. [ 1633.660627][ T6008] usb 7-1: USB disconnect, device number 44 [ 1633.883986][T24759] FAULT_INJECTION: forcing a failure. [ 1633.883986][T24759] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.884042][T24759] CPU: 0 UID: 0 PID: 24759 Comm: syz.3.5905 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1633.884076][T24759] Tainted: [L]=SOFTLOCKUP [ 1633.884084][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1633.884099][T24759] Call Trace: [ 1633.884108][T24759] [ 1633.884119][T24759] dump_stack_lvl+0xe8/0x150 [ 1633.884161][T24759] should_fail_ex+0x46b/0x600 [ 1633.884198][T24759] should_failslab+0xa8/0x100 [ 1633.884225][T24759] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1633.884262][T24759] ? __alloc_skb+0x1d0/0x7d0 [ 1633.884296][T24759] ? lockdep_hardirqs_on+0x7a/0x110 [ 1633.884326][T24759] __alloc_skb+0x1d0/0x7d0 [ 1633.884367][T24759] netlink_sendmsg+0x5d4/0xb40 [ 1633.884411][T24759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1633.884454][T24759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1633.884493][T24759] ____sys_sendmsg+0x94c/0x9c0 [ 1633.884526][T24759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1633.884561][T24759] ? import_iovec+0x73/0xa0 [ 1633.884609][T24759] ___sys_sendmsg+0x2a5/0x360 [ 1633.884641][T24759] ? __pfx____sys_sendmsg+0x10/0x10 [ 1633.884672][T24759] ? __schedule+0x1569/0x5240 [ 1633.884748][T24759] ? __fget_files+0x2a/0x420 [ 1633.884779][T24759] ? __fget_files+0x3a6/0x420 [ 1633.884820][T24759] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1633.884844][T24759] ? irqentry_exit+0x59e/0x620 [ 1633.884870][T24759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1633.884893][T24759] ? rcu_is_watching+0x15/0xb0 [ 1633.884945][T24759] do_syscall_64+0x14d/0xf80 [ 1633.884968][T24759] ? trace_irq_disable+0x3b/0x150 [ 1633.884996][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.885021][T24759] ? clear_bhb_loop+0x40/0x90 [ 1633.885050][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.885075][T24759] RIP: 0033:0x7f63489fc799 [ 1633.885097][T24759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.885117][T24759] RSP: 002b:00007f6346c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1633.885143][T24759] RAX: ffffffffffffffda RBX: 00007f6348c76180 RCX: 00007f63489fc799 [ 1633.885161][T24759] RDX: 0000000000000800 RSI: 00002000000029c0 RDI: 0000000000000007 [ 1633.885177][T24759] RBP: 00007f6346c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1633.885192][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.885207][T24759] R13: 00007f6348c76218 R14: 00007f6348c76180 R15: 00007ffca67b23c8 [ 1633.885245][T24759] [ 1634.594870][T24758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5907'. [ 1635.546563][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1635.695625][T24775] QAT: failed to copy from user cfg_data. [ 1635.712763][T17124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1635.835076][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1636.245394][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1636.246393][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1636.246420][ T10] usb 2-1: can't read configurations, error -71 [ 1636.499885][T13396] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1637.296377][ T10] ================================================================== [ 1637.296397][ T10] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1637.296435][ T10] Read of size 8 at addr ffffc90011ce9008 by task kworker/0:1/10 [ 1637.296456][ T10] [ 1637.296472][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1637.296504][ T10] Tainted: [L]=SOFTLOCKUP [ 1637.296512][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1637.296529][ T10] Workqueue: usb_hub_wq hub_event [ 1637.296557][ T10] Call Trace: [ 1637.296567][ T10] [ 1637.296577][ T10] dump_stack_lvl+0xe8/0x150 [ 1637.296611][ T10] print_report+0xba/0x230 [ 1637.296642][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1637.296668][ T10] kasan_report+0x117/0x150 [ 1637.296693][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1637.296725][ T10] __list_add_valid_or_report+0x4e/0x130 [ 1637.296756][ T10] kcov_remote_stop+0x457/0x680 [ 1637.296788][ T10] hub_event+0x49d8/0x4f60 [ 1637.296842][ T10] ? __pfx_hub_event+0x10/0x10 [ 1637.296872][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1637.296903][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1637.296935][ T10] process_scheduled_works+0xb6e/0x18c0 [ 1637.296985][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1637.297020][ T10] ? assign_work+0x3d5/0x5e0 [ 1637.297053][ T10] worker_thread+0xa53/0xfc0 [ 1637.297101][ T10] kthread+0x388/0x470 [ 1637.297136][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1637.297165][ T10] ? __pfx_kthread+0x10/0x10 [ 1637.297189][ T10] ret_from_fork+0x51e/0xb90 [ 1637.297221][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1637.297257][ T10] ? __switch_to+0xc7d/0x1450 [ 1637.297286][ T10] ? __pfx_kthread+0x10/0x10 [ 1637.297310][ T10] ret_from_fork_asm+0x1a/0x30 [ 1637.297341][ T10] [ 1637.297350][ T10] [ 1637.297356][ T10] The buggy address belongs to a vmalloc virtual mapping [ 1637.297375][ T10] Memory state around the buggy address: [ 1637.297387][ T10] ffffc90011ce8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1637.297404][ T10] ffffc90011ce8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1637.297419][ T10] >ffffc90011ce9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1637.297431][ T10] ^ [ 1637.297443][ T10] ffffc90011ce9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1637.297458][ T10] ffffc90011ce9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1637.297471][ T10] ================================================================== [ 1637.297497][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1637.297516][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1637.297546][ T10] Tainted: [L]=SOFTLOCKUP [ 1637.297556][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1637.297570][ T10] Workqueue: usb_hub_wq hub_event [ 1637.297612][ T10] Call Trace: [ 1637.297621][ T10] [ 1637.297630][ T10] vpanic+0x56c/0xa60 [ 1637.297665][ T10] ? __pfx_vpanic+0x10/0x10 [ 1637.297705][ T10] panic+0xc5/0xd0 [ 1637.297737][ T10] ? __pfx_panic+0x10/0x10 [ 1637.297773][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1637.297800][ T10] ? rcu_is_watching+0x15/0xb0 [ 1637.297830][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1637.297856][ T10] check_panic_on_warn+0x89/0xb0 [ 1637.297882][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1637.297908][ T10] end_report+0x73/0x180 [ 1637.297930][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1637.297956][ T10] kasan_report+0x128/0x150 [ 1637.297979][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 1637.298012][ T10] __list_add_valid_or_report+0x4e/0x130 [ 1637.298041][ T10] kcov_remote_stop+0x457/0x680 [ 1637.298072][ T10] hub_event+0x49d8/0x4f60 [ 1637.298141][ T10] ? __pfx_hub_event+0x10/0x10 [ 1637.298176][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1637.298206][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 1637.298262][ T10] process_scheduled_works+0xb6e/0x18c0 [ 1637.298312][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1637.298349][ T10] ? assign_work+0x3d5/0x5e0 [ 1637.298382][ T10] worker_thread+0xa53/0xfc0 [ 1637.298430][ T10] kthread+0x388/0x470 [ 1637.298453][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1637.298485][ T10] ? __pfx_kthread+0x10/0x10 [ 1637.298510][ T10] ret_from_fork+0x51e/0xb90 [ 1637.298544][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1637.298575][ T10] ? __switch_to+0xc7d/0x1450 [ 1637.298604][ T10] ? __pfx_kthread+0x10/0x10 [ 1637.298629][ T10] ret_from_fork_asm+0x1a/0x30 [ 1637.298661][ T10] [ 1637.299264][ T10] Kernel Offset: disabled