last executing test programs: 8m41.460292089s ago: executing program 2 (id=78): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, 0x0, 0x0, 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) r4 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) tkill(0x0, 0x7) stat(&(0x7f000000a380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = getegid() sendmsg$netlink(r1, &(0x7f000000b500)={0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000001280)={0x210, 0x3d, 0x300, 0x70bd29, 0x25dfdbfb, "", [@typed={0x10, 0xbd, 0x0, 0x0, @str='^\xaa{#+-(/.[\xc5\x00'}, @generic="df0ca016113dc95af3af9fa112840782e418b18aba24a6e949dc", @nested={0x127, 0xa, 0x0, 0x1, [@typed={0x14, 0x70, 0x0, 0x0, @ipv6=@empty}, @generic="95d929dfad386b9153abf878de157f58e7afd9df351c3fcb5ecc212f593ae4a3eec52bd76d36324efe2f61484e7b0a0e81ae16240ec23819132603748d1ca7e2a390388102ce90c74ad7425e0f241ca1223a5a8ccaa0cc08b03aa260fa6aa57521507306bb78598568a5d9e46f63", @typed={0x8, 0x13e, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x24}, @generic="0cb97e360c2671288ba1ec5352838dd7f6d1ed8b2b34964f4c6d38174cd7b6240660546d92e5a3e1d98feabc99c108bb47f9d4a5edfac1d33b1ac00027b094df98e1393af5e518bd98009b890bcf5d5215ab1789d7feccf39547417603cda635aab0a79a0dab2d5e55e2ff3d0c1f539a6c91f8ea804c63e0d7a1d4dc7ad2b9a7ac157419d3b8015aa4f0de7418adcac3f731bf3137"]}, @typed={0x4, 0xb7}, @typed={0x8, 0x46, 0x0, 0x0, @pid}, @generic="a8774c5c970ea444cfc07d6026dcb8663481863a6f9671a5f8219e7e2104f5fd87c57a24b6179cf97fbb313ef0f8d7e21633f91739715a03301c13654bcabc78c3b266a29a9a48f790378b6cc9ae33e7abe9f0f21964b687034d338c2e53b6ea332b7644a3732c80b3ba0556e949379a36c417a97ca787d358b5959f2686dfe70af690a0898d43c6436f0abe53edd7b13cb87c4f5641b9dcfe", @typed={0x8, 0xd6, 0x0, 0x0, @ipv4=@remote}]}, 0x210}, {&(0x7f0000004040)={0x29c, 0x38, 0x400, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xf8, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x12a, 0x69, 0x0, 0x1, [@generic="67797233a5ba3b8ec336e14ceeb63620e9a5682aaab9cb9900db32624fe7cd704058cd78074b81f2d48c38037eb8f8048b1e31d7c381c71b30e179238da4bc8518f9987f297d9b60aa3afa880dbf217f2070b2d85544fee1f2", @generic="7e65e0303adccdff8ade01bdc513b39509bf9c6f382662f5ce8b0241ed123eca2df5f2dbe0a66905f8e87af52bd326f86557f1ac8cbe5e4f5f12c953ce9f5f14342ded969f8294d002b803b1fd58152ae2087375dd3ffe038d0ca3a2b168e91e30b16e332f2b7a9505201b85e1b5309c7713245b341b0f403d13f011275c9bb48bb63b8f4c43c649f17d929f23bdedc26269e76bc4730f4ab07659725daa82334dbe88625b4c5e13911e2d730af91c502176a24c767e562ac575f62c338ab0337977426f4648d1318e7571dbdf"]}, @generic, @typed={0x8, 0x10b, 0x0, 0x0, @u32}, @generic="1422c48ddee00046c831fc4082655b9b8b7b8bcd20a1e4273185168e955b43844d6003cb58794ab569f9fc971db3ab4ed1d88d83d87b6942de60e788fb166b3f0bc733c28c107c14e0f4193a780aaf4b03b7df9227a045705f6fd07ade68d3861206000000d55dfca5777f4f02f2a6d69452ba0db193f85eb91cbebee382f74e782259328c0aff175c1b05956df155", @generic, @nested={0xbd, 0x87, 0x0, 0x1, [@generic="a772cde311e12b7cf5aa1f6ee98fc493ac030645e26bce2066c2922590a2c4b2575ec299c8b1c3b5b67d0c55c810fba59e5b73bc0d18b0e096e2d554dab28bb5da7e286c6d0abb921d3eec38270d86835b95ba815e54795e06ec730e8bd41fefac30a6f3ddaef19d602b54bc214a2967e2e02d92de9cfe70d18ee97d2d9cbb23a0de6b16feb1aea266a53aebe79ec4d7c252ea782acec07f48d6adbdc41ffd9935ea0caf201295163253b45d9c81b1ca865a66f091de87342a"]}]}, 0x29c}, {&(0x7f0000005340)={0x10, 0x19, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, {&(0x7f0000006440)={0x10, 0x36, 0x2, 0x70bd26, 0x25dfdbfd}, 0x10}, {&(0x7f0000006840)={0x114, 0x3b, 0x2, 0x70bd28, 0x25dfdbff, "", [@nested={0x4, 0x4d}, @typed={0x8, 0xa3, 0x0, 0x0, @pid}, @generic="fd97afe199008c5ba92469a3b9b9d9101abe61d60d20fc2277de022d0023d36368dc0fb3e7546ddab2240084d96556ab04a9645023237bac85868b47ff4f713eb69c803a887f4fe039fa93a226f2eec616db4a4ae5cb3a404675e6045012f89216b2d64b50931bac840f162584423a8bdcda6298cf2ec576d1fe762b5086f54491bbe6a877406a577239e77239b08f56ab8cd01a48d85cbd1843050e06ef8a2e42e211", @nested={0x41, 0x51, 0x0, 0x1, [@typed={0x6, 0x7a, 0x0, 0x0, @str='@\x00'}, @generic="f17fd8dbfe750c5b27e5f6de17a67a37f1630e91418067a9efd99cfca8cbb7f11674cd5d754bfbd492a2e04a94f211dbbe410a4555"]}, @typed={0x6, 0x71, 0x0, 0x0, @str='@\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x2000}]}, 0x114}, {&(0x7f0000006c80)=ANY=[@ANYBLOB="b40000003600000427bd7000fddbdf25f3444a724d4d330c721d5ddc8ce540e2bf9e471d037bee8c135b9dde61834d392b60bc8fd1853c231c8ea66a24fb5e4ae866c5b1d9863e73c957f560e0cf21238c0b8ae65fb54b27f9b2cd929a3a61810d48b4471263d5111f77b71e5433d6ab43de27a77d25528bb31b5c7f52ac7cae2ae342cb3270ba2e8da2b1fb902c50067ccf8a0f3e55101eed04750186bc1400cd00"/175], 0xb4}], 0x6, &(0x7f000000b400)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r4, r4, r2, r1, r0]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x10}}], 0xb0, 0x4001}, 0x400c000) unshare(0x2c020400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8m39.384700013s ago: executing program 2 (id=84): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x141, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m36.766073118s ago: executing program 2 (id=89): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, 0x0, 0x0, 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) r4 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) tkill(0x0, 0x7) stat(&(0x7f000000a380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = getegid() sendmsg$netlink(r1, &(0x7f000000b500)={0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000001280)={0x178, 0x3d, 0x300, 0x70bd29, 0x25dfdbfb, "", [@typed={0x10, 0xbd, 0x0, 0x0, @str='^\xaa{#+-(/.[\xc5\x00'}, @generic="df0ca016113dc95af3af9fa112840782e418b18aba24a6e949dc", @nested={0x127, 0xa, 0x0, 0x1, [@typed={0x14, 0x70, 0x0, 0x0, @ipv6=@empty}, @generic="95d929dfad386b9153abf878de157f58e7afd9df351c3fcb5ecc212f593ae4a3eec52bd76d36324efe2f61484e7b0a0e81ae16240ec23819132603748d1ca7e2a390388102ce90c74ad7425e0f241ca1223a5a8ccaa0cc08b03aa260fa6aa57521507306bb78598568a5d9e46f63", @typed={0x8, 0x13e, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x24}, @generic="0cb97e360c2671288ba1ec5352838dd7f6d1ed8b2b34964f4c6d38174cd7b6240660546d92e5a3e1d98feabc99c108bb47f9d4a5edfac1d33b1ac00027b094df98e1393af5e518bd98009b890bcf5d5215ab1789d7feccf39547417603cda635aab0a79a0dab2d5e55e2ff3d0c1f539a6c91f8ea804c63e0d7a1d4dc7ad2b9a7ac157419d3b8015aa4f0de7418adcac3f731bf3137"]}, @typed={0x4, 0xb7}, @typed={0x8, 0x46, 0x0, 0x0, @pid}, @typed={0x8, 0xd6, 0x0, 0x0, @ipv4=@remote}]}, 0x178}, {&(0x7f0000004040)={0x1188, 0x38, 0x400, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xf8, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x118, 0x69, 0x0, 0x1, [@generic="67797233a5ba3b8ec336e14ceeb63620e9a5682aaab9cb9900db32624fe7cd704058cd78074b81f2d48c38037eb8f8048b1e31d7c381c71b30e179238da4bc8518f9987f297d9b60aa3afa880dbf217f2070b2d85544fee1f2", @generic="7e65e0303adccdff8ade01bdc513b39509bf9c6f382662f5ce8b0241ed123eca2df5f2dbe0a66905f8e87af52bd326f86557f1ac8cbe5e4f5f12c953ce9f5f14342ded969f8294d002b803b1fd58152ae2087375dd3ffe038d0ca3a2b168e91e30b16e332f2b7a9505201b85e1b5309c7713245b341b0f403d13f011275c9bb48bb63b8f4c43c649f17d929f23bdedc26269e76bc4730f4ab07659725daa82334dbe88625b4c5e13911e2d730af91c502176a24c767e562ac575f6"]}, @generic="d55aa35ecd42d579c9c34a4d3442482bd6e374d9869ae4a53195aafb7b4914c3b2b069c9b23167440e7866e8a721a2a4c265a422023e935dde497676ab43f3d771f4e2e49a994a6c6fea8ea0d22fb237e8ccd034073a9d4c7fa214eff630617779164f3ddaabf10a18734cd81cf5ec1c6bd043d5fb49dfcefb91be9837f64a60e7add9f3eed433d417174923d2a3a6bbd91777da46fb1e432f0f7b161d06dc9a5e264890311c096d4f111009e687aa3f9b9fd78f3bc1f1cdf56811a5d24fc27b5338c9ea4d1d4a32273f4a43cda96d60780c4e005211f4e56430b1985ae58a7704b2b18e18f08ffb950f35675d34d858e6e41fde030ecea92306cef56c305a774b16cf8bdbad3b82e779442a6944ec76bf101d7caa35b1edfa43a34b67346c09d9d37f710aba0168d6244ab8bdba5b6d2b2c229d6e6d6cf508455ab3d65e58c28e67cdceccbb0a2d5db97cd8c592106417c9c15aebe51a3d40fb22911e8b27b7c207fda7f78901b97c611b377c9aede78f72afcf66574752b5536dd5e5db176c3cdb821b2b3f48c0c14b128c169dd77b9ac37bd97ecdd6f09a2bcbde2d913f15f4007a6da9d1fd6030424d454312f9b77b058f4e891a96fe992338096e3e7856cc59fe27ef4e8a449b95c825d9003d581bd5cc9aec0521fc307f547526d61ce23db80a528e5eb59796cd1acfc80b53bea6302d4793380c14dd4b40d1de7158338d01f4601c16ffdfd080a28381236ce9c48fdc197d583fdba5a566078cd22c583b321f682c208f244ba5c6d79926bccf642531920228e77573d0409ad9345ca7e3a9834c62e464992992f68e2c4ea0c709d739ff5d412de60d02f808d3c5e7e6bfbb278f9dc05ee4008a4957d366b6fd9a36e18342db2e324f265c9781905e9f97f83c6100cd9c56cb1c3b15f78880d9d2e0fd855abf9d260937c1bdd00a74486f7da71572c83945db28cb9d0ddfc827e2c43481a7471e7d0244314476a48973ceca4269f97b24af71e6fb54ff5b5ae4270f2ff971ce1c85d65a2dff1c24602405f4c9bb6f1fda391479a22618cc91f6fab593514daca2e4a611e337d6a4a6b1e4eec05e649da55b26ed55275889b0f4d365902f220de4f448e12575d2439ebf228d792937c88a671af0e934b1fa32a464893372792106f454fc3e20bc239dc18116b44a8291247d84a8379eceb18c438c0388865b308d88a0f78762bf87c5ecddd96314ac98c4155f522c624cbf3ba6f7dc37d2c54fae5927a3d5b18b3f7090d119a7eb3e4344055799df1951ddfd89ccb995abcf6dc3a49b26cf12734f4b0e419fafc94064edfbe0850f864fe16f8c1131d793fb8d057941fdbaea2935978a2fdf6c2b0aa9009ade1d7caddf648c18e67d99a8c141cdda02dfbbe12f16c797bfaa2b5b38b98eddd1e8e6449df49ffbe881ce478845107464df58cfb857e286f674233c234b0cd326f457264ad05c21b6743c4978fa9b3e7f5ef6c365d1e07d4ed18c7f7dac5180891007ff75109bb995ef27662f59c4bbe76f650f0acedc705c6fdcc1d12eb89cc16fcb062c0fe243f1af5e47828ea601c9c57a160f27e51a458064a49d5a105d08427a08852b70897cb9f3e16cec736abac659b935781776d9164464f35573f9ffee7a6fd7480fd5b602acaa1426b8b8d59833b84dae84e1324f05f88f3306ec3691b4fc60141754e67a9f0d0b6d4afafdd98ee34c37c72e4739c17554597206038b548e51e03331c11063ae0738dc4fc13ab4fe3e3d04231122df9a765d9799f63ef5b36aaff09977bd2f861bd6e0971592a6b74e113c0e7890964010c18beb9d307d66af807fc54a2bf5cb8341c90e185738cecbd4432becf8de36c49caa0d257bb2f61ec0b5078d7dcafe4e9a3228dab7102423d535a0ae5faa96850992d93489967edc9cc4d726efc0296d73125eaea5a7a2abd3c1c731b20dc2e428eaccee1eedd39fbf1bb87fd6b086b1814e583f2db84d4b24eb9217f5e32aa9f7538e5aa3fa0bb3681d7c000c88bd85f94ac8f53d0e3792740991ec6a4d2f3b38a33d610c360269daf211e5bbd661281cbba6e4bdf473832601f42d4a8f4ca5cf82aa4d2a3bdaa287debe0b7e0b86c402b399a9d93cdfcec270044b69fba1f24c3d33e8a05406db3bc6d0dda7cdaf073a0132bfc5516903b5be3139278770ea08d1c11d2519f698be9d4e40502391ce153acde8571aa69b460baea4b657007484dca72b9405173257ec29a985a1a0779276acede15ce20ce65775b2b8d903b8dc780410c1fbad18c2d11d227ca732dc967df6b88d594ed6bf22bb4b492be3757a47395305cbf17208f5773b6efc85bd80676a2ae5e252a57f3d6a890c562e330301d868472d2d5ee6dd81813f5b12836eb23afdc0b304d990d879ebdcce5aec3e950c37c1443b4674b8fb404ab2cfbee1396d03db2345294ef53792495f73bb387ac4e95fc6799ff4b07dae202bfb38193a3d70a7e37153bafeb7d54fe3fedc38fcb28724481328dd972707f81310c8aa0413cc1c58a2b5601df920e39f5ce20d2638c474c2b17e1a0aa5acd83492de3503cf9aab08662d5fece48701c577eb401b3e583de56b86ce78ccbf07645e3850d39de2e0934355367bfe4b892018fe0e2c6debe294c791fd7fcf32e23ff4d999748d97b7784abe55d149adb8bdb7f468811b2736f309cf55846ce64115af253e885f908cd497c5b534e1701aa5c122678d8ce5dddc01135a87cae8530aa4c9662bdc8f796b500393878ce02cd6e11b1547e7c4943e90a19d67ff69ac063bcdff9d44b1df64ef0f073be9ad4d0d97f8a8ae288bf0afc2054506740d43cf11f40991baf2a2ac119d8a87c773914bd5f38ca895e16bb297d97037fec45e0d69f82700f1ef965bdb88316e849154274f486be86620031ec27ca77102b4f644c8799eb40af6b8e745d7800f38ef3b24da6261e050f9d686abed0b1ef86393888a799edac517941db42df7d3c435baa956ab7684bc3e36e76e7f1b0758a5193827520041eb323c4c987c502eb8f6ba5229fcab5a92b2b1ad10085ca3119ad14a8ccd2e356a7341dc8f50da0429233d41893301e6b4f495a406efb2dfdd6712ba1c5399147b6d42bfe8e76ad03a83c157c280416a3c9e8a268313d4b0a908875fb277990c00741ee2154fc359b34895907cb51538f04a7dd0d6f8047f7758a9d2ca176012d90e6e43544242af908164710314f6e1fa011fd00bf87b0b0906cfa3cf44a6c7a55594708b28b1ea22db92b8faa78e3338b333d2a24f402caece4324e53182d9eb414348481172df044c1369ff00f4629e6abc32873988fdbe581a375df39d9f50f7dd47da65ecc2f447469264c2755062ea60a84591c51edabc49ca7101af8951d997d89cce9c14273b45761b357938065ff4eecab387f5da912a4c315fff7af53dba17da70f5402b125f4836cce86d8da859ad635ec9a7c430879c7ada079fc99587d8f93d6ab12b67872ab82b7f06ff5d020951e56639031cc2b6315bf5ce01f316d5e5d8e41e5e62c63e531af9b434366828b26bd4303ff55e44b5bb3e74c97c1e15968c2ce5f091fd6bf531a5ecf8b6ea6f56afca0d98e48b083a693fd371736c6fd39e8008ec35ddb0bfe58c8e8c3a9425112990b054cfe1ce86f944d2e5171723e1a98b2ad9fbdbda1d8edfab65dbf1064e8e18e6ed471c245e0992ae544017ced011c04f714fa4f02ae99c3280bba974204b9ceb875355af8a8cc36740f9463b3076ff49b02fe49913ddea15aa54f7595544409fc91e7f0defbaea842ebe473ac64ac2bfe416b504af923f5074ccc46505e58feda4bf9aeac2d5a7ae8522c50ddb5b318ddd7edade47f15fc3deff7cf6571545c25644a0ae7db86d6b393ca99a86a2141f30bd6fecb2ddb68781b2a027de417bf6b82fad520b824f64277513f7798d6ffd537d37e778b7a2f2685e212504496c0a4c024c1abf8e46205a3a76d356c17f0490593b4e897bd37c71fc9af083a84f291173948f2858f28c03aa1da974d48243f9e95f5e839b31351c63e8ee1be528038283cea6f27da1b8b9d31e4548913da86751b91f3955eb8caf731022c64c1dc95640f37334d1b04287152b349cd235bfc61a0b4f5719c0fb1b73cbe88b71a3ae18f453caca95b7d557ed9d3f6bc72345ebdd877e0ee41d88eeebf1ce744e488118ff4d12f84c31904751149ecbf1a88335ea51ffac38260999e5ca0b9ea17a0b4a27494ce0f77bb09d75d818c4f4296cfe9cbbbbe4f6f073cb2e2a744d0d97efb05b0aa04cb258abc53bc97a98d381a7091878e41ff4efdd0d802377554234332edb19b2c27f576b87f0371a626ffa9772d32d04453f94457d5c43c8b9bcfb8220530f6daa7e4ad56f87d17fc868c7ae8cd7b2e7aa220d26c36bd3cf144905c139582e1519c210fab23a787f7a48cb189580eec3d797699a6fa44275f5129ed68cf35af38879285cff1ce3e4c0475409ff33f1b259c05f3d7c1c3a3d5d2c83898ea8e892489beba5133297ad92179b7daaf4ce7059aa401cb149f3ebce83ae118c0701e688a09272c805b9c1e0359eb9d0bcef78fc957fb24cf0c535e968dc2fd68a9adc8b6f9f6602df21fb829eea2a3a2ec05d2aca0d250494cf2e5c0593f38b7da9aa76ce7a1f311268f1be10cc7c05665fba338b02cc7789a1ce6027c02566a4023ab9c6a374ffd28dffd386d012b208b961a32143356b03e68f2fa83251dc1282aabdb3aacd8227f7c96acedc2b408f3fc24a6005cb870fafafc0445e80dd3a2abe6afa87359cd7624c5c8446583f703fa6ccbbb57959d35f7dc8e753171be19bae521db7c4d4e678993674172f2fc841e36f5bf599589a0c668c0f70657d93c31a0b4b4d62e899c6af12df707d73ed066c2e7ad10709fb20b293bb1a1e00799ac1edfa63faf0d08f3c7c0c2b166345273b3b732c42e6d927800efefff5f9c4302349add706c7782562071f27a349e2daf1f54b6bbadacec8ac6c254c031e8ef98af3e19f6513a1d43af6804a7fd013fcb78f9357680a23e1dd3f0691e47c53785807641c4a1d8c286cc008abf610b8a3af72dfcf3c59c9dd2ca04d921b39fc5599581fd2e0ab431cab84591430ed97ce67a0ae2675fcad9b45d702bd8c864a2f8b75a20cca07518a478242eb6798561e49b359d794b5bf4fb78f91b874335822022624263c6a91eec2ecc37ec5eb48e6e1ede763352118ae325631f737823f35ec62ba3164202a19d4ce54bdfd3d2f7b6d3c187111cdbb68daf817a1a9d5a2021f2e3f748342817b9bfb5ed4b09eef3c72585794d39f3245844f1be2b809bd39afb463d02c5ec9bde8c76208fe28eb7789e4a8ea532302b5828f8ba9b64b3275238de1f17eed717c5ac407a2f6f7edff523534fd51ae068da2bea591d787d2f984572105206dc4e5c112dec062a1", @typed={0x8, 0x10b, 0x0, 0x0, @u32}, @generic="1422c48ddee00046c831fc4082655b9b8b7b8bcd20a1e4273185168e955b43844d6003cb58794ab569f9fc971db3ab4ed1d88d83d87b6942de60e788fb166b3f0bc733c28c107c14e0f4193a780aaf4b03b7df9227a045705f6fd07ade68d3861206000000d55dfca5777f4f02f2a6d69452ba0db193f85eb91cbebee382f74e782259328c0aff175c1b05956df155", @generic, @nested={0xbd, 0x87, 0x0, 0x1, [@generic="a772cde311e12b7cf5aa1f6ee98fc493ac030645e26bce2066c2922590a2c4b2575ec299c8b1c3b5b67d0c55c810fba59e5b73bc0d18b0e096e2d554dab28bb5da7e286c6d0abb921d3eec38270d86835b95ba815e54795e06ec730e8bd41fefac30a6f3ddaef19d602b54bc214a2967e2e02d92de9cfe70d18ee97d2d9cbb23a0de6b16feb1aea266a53aebe79ec4d7c252ea782acec07f48d6adbdc41ffd9935ea0caf201295163253b45d9c81b1ca865a66f091de87342a"]}]}, 0x1188}, {&(0x7f0000005340)={0x10, 0x19, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, {&(0x7f0000006440)={0x10, 0x36, 0x2, 0x70bd26, 0x25dfdbfd}, 0x10}, {&(0x7f0000006840)={0x114, 0x3b, 0x2, 0x70bd28, 0x25dfdbff, "", [@nested={0x4, 0x4d}, @typed={0x8, 0xa3, 0x0, 0x0, @pid}, @generic="fd97afe199008c5ba92469a3b9b9d9101abe61d60d20fc2277de022d0023d36368dc0fb3e7546ddab2240084d96556ab04a9645023237bac85868b47ff4f713eb69c803a887f4fe039fa93a226f2eec616db4a4ae5cb3a404675e6045012f89216b2d64b50931bac840f162584423a8bdcda6298cf2ec576d1fe762b5086f54491bbe6a877406a577239e77239b08f56ab8cd01a48d85cbd1843050e06ef8a2e42e211", @nested={0x41, 0x51, 0x0, 0x1, [@typed={0x6, 0x7a, 0x0, 0x0, @str='@\x00'}, @generic="f17fd8dbfe750c5b27e5f6de17a67a37f1630e91418067a9efd99cfca8cbb7f11674cd5d754bfbd492a2e04a94f211dbbe410a4555"]}, @typed={0x6, 0x71, 0x0, 0x0, @str='@\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x2000}]}, 0x114}, {&(0x7f0000006c80)=ANY=[@ANYBLOB="b40000003600000427bd7000fddbdf25f3444a724d4d330c721d5ddc8ce540e2bf9e471d037bee8c135b9dde61834d392b60bc8fd1853c231c8ea66a24fb5e4ae866c5b1d9863e73c957f560e0cf21238c0b8ae65fb54b27f9b2cd929a3a61810d48b4471263d5111f77b71e5433d6ab43de27a77d25528bb31b5c7f52ac7cae2ae342cb3270ba2e8da2b1fb902c50067ccf8a0f3e55101eed04750186bc1400cd00"/175], 0xb4}], 0x6, &(0x7f000000b400)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r4, r4, r2, r1, r0]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x10}}], 0xb0, 0x4001}, 0x400c000) unshare(0x2c020400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8m35.830658838s ago: executing program 2 (id=90): r0 = socket(0x39, 0x0, 0x7) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000f070b6ea779389b6130fa831c1f31a07850a31756e89224c2b7c52862eefa93504b66dbdd9f98bc1e05b0c8543784df3422ea94ceb6f7c15b03db90b2ff43a43cd1ed391ba081058f543586b5cf5dffa1ab36c306b47f3c698a401d71d0694f69e81014d2078ac9f4bc2139b5ecb20f7277baec1d085", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25060000000800030004000000050005000800000005", @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000400200100"/20], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video(0x0, 0x101, 0xab02) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1e, 0xb205, @mcast1, 0x1}, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = io_uring_setup(0x1de1, &(0x7f0000000180)={0x0, 0x2c42, 0x10, 0x3ffffd, 0xb}) r7 = epoll_create1(0x0) epoll_pwait2(r7, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000340)={0x20000005}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 8m23.161500927s ago: executing program 2 (id=119): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x141, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8m18.635379946s ago: executing program 2 (id=129): r0 = socket(0x39, 0x0, 0x7) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000f070b6ea779389b6130fa831c1f31a07850a31756e89224c2b7c52862eefa93504b66dbdd9f98bc1e05b0c8543784df3422ea94ceb6f7c15b03db90b2ff43a43cd1ed391ba081058f543586b5cf5dffa1ab36c306b47f3c698a401d71d0694f69e81014d2078ac9f4bc2139b5ecb20f7277baec1d085", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25060000000800030004000000050005000800000005", @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000400200100"/20], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video(0x0, 0x101, 0xab02) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1e, 0xb205, @mcast1, 0x1}, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = io_uring_setup(0x1de1, &(0x7f0000000180)={0x0, 0x2c42, 0x10, 0x3ffffd, 0xb}) r7 = epoll_create1(0x0) epoll_pwait2(r7, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000340)={0x20000005}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 8m2.753546323s ago: executing program 32 (id=129): r0 = socket(0x39, 0x0, 0x7) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000f070b6ea779389b6130fa831c1f31a07850a31756e89224c2b7c52862eefa93504b66dbdd9f98bc1e05b0c8543784df3422ea94ceb6f7c15b03db90b2ff43a43cd1ed391ba081058f543586b5cf5dffa1ab36c306b47f3c698a401d71d0694f69e81014d2078ac9f4bc2139b5ecb20f7277baec1d085", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25060000000800030004000000050005000800000005", @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000400200100"/20], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video(0x0, 0x101, 0xab02) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1e, 0xb205, @mcast1, 0x1}, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = io_uring_setup(0x1de1, &(0x7f0000000180)={0x0, 0x2c42, 0x10, 0x3ffffd, 0xb}) r7 = epoll_create1(0x0) epoll_pwait2(r7, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000340)={0x20000005}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 13.101806563s ago: executing program 1 (id=1397): openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000032c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) syz_open_dev$loop(0x0, 0x7, 0xe0942) r2 = socket$igmp6(0xa, 0x3, 0x3a) syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @empty, 0xa3c}, {0xa, 0xbffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, 0x1000, {[0x9, 0x0, 0x5, 0xfffffef9, 0x0, 0x6, 0x2]}}, 0x5c) memfd_create(&(0x7f0000000740)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1OT\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89I\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d\xe1\xed@\x17r$\x8e\t\x00\x00\x00\x00\x00\x00\x00\xef\x15\x8b\xad8\x02M\x8b\x91JS+\xa23lkz\xf3\xb5\xcb\xd7\xa9\xf8$W\x9a\xe8[\x92\x15\xc6x1A\xa20u\"\xd2\x15\xb4\xe6p\xbf\x84\nm\xbe\xf3Q\xee\xa2\x8cK)i\x80\xc9*\xb0A\xb4\x82\x82#(\x15w`m\xcc\xd4\xe3\xbd\xe9\xf6L\xa9ut\\\x1f\x13\xb5\xd9>;L\x1c\x9c\xab\xa5\xa2Y\xe3-n>_\xe2h\xa1\xbd\'\x8d^)\xf6\x00\x9b\x024\xfa\xccq\xa2\xeb9$\x9fv\x9ec\x87\xfebGt\xb1\xe0\xc6\xbf\xaf\xf1\x14 \xb8\x0e\x18FsBE\x1bA^]\x04\xba\xb7P\xdd\xbe(\x96\x1e\xd9.\xb8o|\xb9\xc3(\xc9\x9a\x16N\xb4\x10s\f\xa8\xe4\xfaVl\x0e\r\x93i\x8f~X\x00\x00\x00\x00\x00\x88\x9e()}\xa5\xb9r\x02\x11\xd0^*8\xce\x84%\x95\xbd*\xac\xe76{\xdb\x02\xbf\x9d#\xc1\xf8\xde,\xcf\xf1\xa0\x19\x1ds\x8d\xe3\xad\x04\xabR\n\x05\x9bf\x18kG2\xa2\xd0u\xbc\r\x12Lg-n;wt\x81\xb3\x0f\t\xca\x1b\xc2\xf2n\x86v\xf5\xf3\x10\xccq\x1fl9a\'\x9c.\xfa\x8a0k\x89\xcb\xc7`\x16y0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) unshare(0x100000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r1, &(0x7f0000000000)=""/134, 0x86) unshare(0x20000) 11.63764317s ago: executing program 0 (id=1404): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000200)=[{0x31, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x24, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0x54}, {0x1, @uvalue=0x34b}, {0x1, @uvalue=0x5}]}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x6}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x80, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0xd12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd2, 0x1, {0xa, 0x25, 0x25, 0x7, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0xa, 0x1, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="f80000005400010025bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000500ff02000000000000000000000000000186dd00"], 0xf8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000140)) lseek(r1, 0x10001, 0x0) 11.591314912s ago: executing program 1 (id=1406): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000004180)=0x12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone3(&(0x7f0000001900)={0x254001100, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x11}, &(0x7f00000004c0)=""/124, 0x7c, &(0x7f00000008c0)=""/4096, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r1}}, 0x58) move_pages(r4, 0x8, &(0x7f0000001980)=[&(0x7f0000cfc000/0x3000)=nil, &(0x7f0000e18000/0x4000)=nil, &(0x7f0000d6a000/0x3000)=nil, &(0x7f0000c14000/0x1000)=nil, &(0x7f000088e000/0x2000)=nil, &(0x7f0000def000/0x1000)=nil, &(0x7f0000e88000/0x1000)=nil, &(0x7f00008df000/0x2000)=nil], &(0x7f0000001a00)=[0x6], &(0x7f0000001a40)=[0x0, 0x0], 0x4) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) r5 = getpgrp(0x0) ioprio_get$pid(0x207e1e73da1d2d72, r5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3f7, 0xb14, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file1', './file1'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 11.557788669s ago: executing program 4 (id=1407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e25, @local}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x20, 0x2000003}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x4, {0xa, 0x4e24, 0x2, @private0, 0x100}}}, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.566816229s ago: executing program 3 (id=1408): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000340)=0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xfe46) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.731833243s ago: executing program 1 (id=1410): r0 = semget(0x1, 0x4, 0x202) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xf}, {0x4, 0x60c2, 0x1800}, {0x0, 0xc51, 0x800}, {0x4, 0x6}, {0x2, 0x8001}], 0x5, &(0x7f0000000300)) semctl$SETVAL(r0, 0x3, 0x10, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aedb7e19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007d0efb7e91a9dbde2353f035347270d076c93f1b1a810cb2c7d72ee9ce76e6da15600893bc36f6502f00"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005b00)={r2, 0x0, 0x0, 0xfffffffffffffe3e, 0x0, 0x0, 0x600, 0x0, 0x1, 0x0, &(0x7f0000000040)='\x00', 0x0}, 0x50) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=""/73) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000040000701fcffbeff00000100017c0000040042800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000851"], 0x50) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="e02c0e00080211ff01000000000000fffb894ec5ffffd86bef4e9404da976f06baf570308b6dde5aa5f8bace120e35bdc051b4ad9450c395e575dd3cc01ef777b80e605d2f86c12f51f22192d5e118158a097dfffad3a8af7f35dbfef3701234056e5a0a5bde2adb9da5fcd38f68ba88a137df5c2b51aa1f8ffbc561fa6829a01668d2d5f5f1ac9d630f404081555727ae348c9c9c9e26ecdb0f0000000000000063e7290450165a3a921e6cc34d2325246a0f04544101814749bb8ab4969968ae8e9037d131df38669402cb51062c1b86ee000000"], 0x1d) 8.6314953s ago: executing program 3 (id=1412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) setreuid(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0xfffc, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}}, 0x0) 7.306735904s ago: executing program 3 (id=1413): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xaee82824b555c3ad}, 0x4008851) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x299, 0x0, 0x7fff}]}) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.249917679s ago: executing program 1 (id=1414): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x0, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, 0x1, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_PAYLOAD={0x94, 0xa, "449b2d9cbaa6ec7fd8cc8a1532b70e1fd5f14b6c55a5f95ffb2523c276f6377d5f16880b912e4409076d11950fa556bd638844819ae7b913f3eaf373ff4557cd3db85a9596b695fcc1f49d520829fa6ab0d3d9aedf941518210e88069ff0b2e87a2d2902c2f7d4fd526bbdb504f6f55f10797acb84341965b6435c7c65a4ede8c3f6f7639497c9c600de2d2a2a9e7bfb"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x325}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_PAYLOAD={0x7b, 0xa, "c6aaa35bccaa3db3411ca9b0366adde369a65332bfe01ad6550e342b3238b04090d71c50779c30f9d89690c25a88b961bfe98229a9684e0d3b7557dc51c444ae62e0e743e4753125d34c0cd7f9e8d8c258d66fdafa51e9146b1c3bbc3991be479b469617e5e60415d18df941e4105280c493c9c96ee144"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x20010085) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) 7.220655008s ago: executing program 0 (id=1415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f00000009c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 7.151352118s ago: executing program 5 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b541a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 6.956870714s ago: executing program 4 (id=1417): msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffdd6, &(0x7f0000000200)}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 r'], 0x9) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, 'cgr\x01\x00 \x00q\xc84\x04\x04'}], 0xa, "e39a0e756a544899b89745f153c7c1c96c278c96dfcaab0708a6f284a288e43543d88ad14ab762f70fa9767be1e09e311fd5884b0e6022a8ad7250e9264800c7a5fd22ff7179e4fb5f0d671701899b1df99257f076e77378022e279b84ad754650e725cb22c0925690b0d5d0377040446c69ec43c571c85238b12c2f97247a30e8ab7d6b3b55406f026ed4e6765b907df1fff091a12cd66bd5ddc7f05a7ea764afa5cc6c98ec9b3ef6cbe8fb51a783b23209309091bc8dc0d5265fda181248159b6d0f3c38121f35adabe1bc35e7c12b4c32e657c69ed698a130c1035c95093cbd7331504a71653789137d8cab32ac32ca29"}, 0x113) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac0827c8b021fbb1fa832462ea175ae6dae31e42bbb3ce3469c6323fe898175fd9331455266e5f70a167d59e2a4a3dad4a44311f4c69292d304b2dd0e09872e408c6f25a2aed49c6c5a60debbce6c7b743a9124b8e5d", 0x88}, {&(0x7f0000000240)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49632042e317ae", 0x1a}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.941604373s ago: executing program 0 (id=1418): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7ffff5bd}]}) pipe2$9p(&(0x7f00000002c0), 0x0) 5.769435763s ago: executing program 3 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x11, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) 5.703142387s ago: executing program 5 (id=1420): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000004180)=0x12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone3(&(0x7f0000001900)={0x254001100, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x0, {0x11}, &(0x7f00000004c0)=""/124, 0x7c, &(0x7f00000008c0)=""/4096, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r1}}, 0x58) move_pages(r4, 0x8, &(0x7f0000001980)=[&(0x7f0000cfc000/0x3000)=nil, &(0x7f0000e18000/0x4000)=nil, &(0x7f0000d6a000/0x3000)=nil, &(0x7f0000c14000/0x1000)=nil, &(0x7f000088e000/0x2000)=nil, &(0x7f0000def000/0x1000)=nil, &(0x7f0000e88000/0x1000)=nil, &(0x7f00008df000/0x2000)=nil], &(0x7f0000001a00)=[0x6], &(0x7f0000001a40)=[0x0, 0x0], 0x4) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) r5 = getpgrp(0x0) ioprio_get$pid(0x207e1e73da1d2d72, r5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3f7, 0xb14, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file1', './file1'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 5.652773865s ago: executing program 4 (id=1421): socket$inet(0x2, 0x4000000000000001, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.638169806s ago: executing program 0 (id=1422): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xaee82824b555c3ad}, 0x4008851) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x299, 0x0, 0x7fff}]}) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.965568416s ago: executing program 4 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) setreuid(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0xfffc, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}}, 0x0) 3.67923135s ago: executing program 0 (id=1424): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7, 0x25c, 0x0, r4}) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000001c0)=0x2, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) listen(r0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) wait4(0x0, 0x0, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000000)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 3.579366005s ago: executing program 3 (id=1425): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000200)=[{0x31, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x24, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0x54}, {0x1, @uvalue=0x34b}, {0x1, @uvalue=0x5}]}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x80, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0xd12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd2, 0x1, {0xa, 0x25, 0x25, 0x7, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0xa, 0x1, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="f80000005400010025bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000500ff02000000000000000000000000000186dd00"], 0xf8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000140)) lseek(0xffffffffffffffff, 0x10001, 0x0) 3.47385566s ago: executing program 5 (id=1426): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) listen(r2, 0x7fff) shutdown(r4, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) r6 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r6, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 2.048337569s ago: executing program 4 (id=1427): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) unshare(0x100000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r0, &(0x7f0000000000)=""/134, 0x86) unshare(0x20000) 1.048226104s ago: executing program 5 (id=1428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f00000009c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 848.253723ms ago: executing program 0 (id=1429): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x141, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 777.475799ms ago: executing program 4 (id=1430): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x141, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 737.550467ms ago: executing program 5 (id=1431): msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffdd6, &(0x7f0000000200)}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 r'], 0x9) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, 'cgr\x01\x00 \x00q\xc84\x04\x04'}], 0xa, "e39a0e756a544899b89745f153c7c1c96c278c96dfcaab0708a6f284a288e43543d88ad14ab762f70fa9767be1e09e311fd5884b0e6022a8ad7250e9264800c7a5fd22ff7179e4fb5f0d671701899b1df99257f076e77378022e279b84ad754650e725cb22c0925690b0d5d0377040446c69ec43c571c85238b12c2f97247a30e8ab7d6b3b55406f026ed4e6765b907df1fff091a12cd66bd5ddc7f05a7ea764afa5cc6c98ec9b3ef6cbe8fb51a783b23209309091bc8dc0d5265fda181248159b6d0f3c38121f35adabe1bc35e7c12b4c32e657c69ed698a130c1035c95093cbd7331504a71653789137d8cab32ac32ca29"}, 0x113) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000540)="aa2e07a43ecaa4f030dff111e923219d3a5a00904a9bce005907230e8f75cfc68bd31e61698c6114ffdd856898d814b616a5ac0827c8b021fbb1fa832462ea175ae6dae31e42bbb3ce3469c6323fe898175fd9331455266e5f70a167d59e2a4a3dad4a44311f4c69292d304b2dd0e09872e408c6f25a2aed49c6c5a60debbce6c7b743a9124b8e5d", 0x88}, {&(0x7f0000000240)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49632042e317ae", 0x1a}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 423.996333ms ago: executing program 5 (id=1432): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, &(0x7f0000000440)) r2 = syz_ublk_setup_io_uring(0x5d0a, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@other={'unlock', ' ', 'none'}, 0xc) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc807, 0x20, 0x3, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f90f, 0x1, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4, 0x2, 0x1e6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x4000) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000500)={{0x0, @empty, 0x4e22, 0x0, 'dh\x00', 0xc, 0x0, 0x21}, {@multicast2, 0x4e23, 0x1, 0x3, 0x3ff, 0x2}}, 0x44) fchdir(r10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701", 0x27}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000009000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) read$msr(r9, &(0x7f0000000580)=""/112, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x80000001, 0xc, 0x2801a, 0x103, &(0x7f0000000040)="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"}) 71.297101ms ago: executing program 3 (id=1433): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040880}, 0x20004044) socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(0x0, 0x40) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) unshare(0x28000080) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181b, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x850a, 0x1, 0x9, 0x502, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x8001, 0x48a, 0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) sched_getscheduler(r7) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) read$msr(r6, &(0x7f0000002280)=""/4096, 0x1000) 0s ago: executing program 1 (id=1434): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xaee82824b555c3ad}, 0x4008851) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x299, 0x0, 0x7fff}]}) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 506][ T821] asix 2-1:0.34: probe with driver asix failed with error -71 [ 496.040645][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.860'. [ 496.244572][ T821] usb 2-1: USB disconnect, device number 15 [ 496.886473][ T9201] binder: BINDER_SET_CONTEXT_MGR already set [ 496.886490][ T9201] binder: 9200:9201 ioctl 4018620d 200000004a80 returned -16 [ 497.156243][ T9202] capability: warning: `syz.5.861' uses deprecated v2 capabilities in a way that may be insecure [ 497.390921][ T5961] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 497.390956][ T5961] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 497.391229][ T5961] asix 4-1:0.34: probe with driver asix failed with error -71 [ 497.422755][ T9205] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 497.526237][ T5961] usb 4-1: USB disconnect, device number 9 [ 499.134581][ T4982] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 499.284594][ T4982] usb 6-1: Using ep0 maxpacket: 16 [ 499.289246][ T4982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 499.291498][ T4982] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 499.331684][ T4982] usb 6-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 499.331717][ T4982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.331742][ T4982] usb 6-1: Product: syz [ 499.331758][ T4982] usb 6-1: Manufacturer: syz [ 499.331774][ T4982] usb 6-1: SerialNumber: syz [ 499.467763][ T9231] netlink: 232 bytes leftover after parsing attributes in process `syz.1.870'. [ 499.469347][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 499.470612][ T9230] FAULT_INJECTION: forcing a failure. [ 499.470612][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 499.470651][ T9230] CPU: 1 UID: 0 PID: 9230 Comm: syz.4.872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 499.470683][ T9230] Tainted: [L]=SOFTLOCKUP [ 499.470691][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.470704][ T9230] Call Trace: [ 499.470712][ T9230] [ 499.470722][ T9230] dump_stack_lvl+0xe8/0x150 [ 499.470765][ T9230] should_fail_ex+0x467/0x600 [ 499.470804][ T9230] should_failslab+0xa8/0x100 [ 499.470832][ T9230] __kmalloc_cache_noprof+0xa0/0x6b0 [ 499.470856][ T9230] ? vhost_task_create+0x123/0x380 [ 499.470895][ T9230] ? vhost_task_create+0x123/0x380 [ 499.470936][ T9230] vhost_task_create+0x123/0x380 [ 499.470969][ T9230] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 499.470995][ T9230] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 499.471024][ T9230] ? __pfx_vhost_task_create+0x10/0x10 [ 499.471066][ T9230] ? __pfx_vhost_task_fn+0x10/0x10 [ 499.471141][ T9230] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 499.471174][ T9230] ? lockdep_hardirqs_on+0x7a/0x110 [ 499.471205][ T9230] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 499.471237][ T9230] ? mutex_lock_nested+0x152/0x1d0 [ 499.471259][ T9230] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 499.471291][ T9230] kvm_mmu_post_init_vm+0x147/0x2b0 [ 499.471324][ T9230] kvm_arch_vcpu_ioctl_run+0x11f/0x2070 [ 499.471365][ T9230] ? look_up_lock_class+0x57/0x110 [ 499.471403][ T9230] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 499.471432][ T9230] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.471478][ T9230] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 499.471508][ T9230] ? lockdep_hardirqs_on+0x7a/0x110 [ 499.471539][ T9230] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 499.471569][ T9230] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 499.471596][ T9230] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.471625][ T9230] ? lock_acquire+0x106/0x350 [ 499.471650][ T9230] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 499.471683][ T9230] ? rt_write_unlock+0x19c/0x360 [ 499.471714][ T9230] ? rt_write_unlock+0x1a8/0x360 [ 499.471743][ T9230] kvm_vcpu_ioctl+0xa64/0xfe0 [ 499.471777][ T9230] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 499.471801][ T9230] ? hook_file_ioctl+0x1f3/0x600 [ 499.471837][ T9230] ? __asan_memset+0x22/0x50 [ 499.471869][ T9230] ? smack_file_ioctl+0x331/0x360 [ 499.471907][ T9230] ? __pfx_smack_file_ioctl+0x10/0x10 [ 499.471951][ T9230] ? __fget_files+0x2a/0x420 [ 499.471971][ T9230] ? __fget_files+0x3a8/0x420 [ 499.471993][ T9230] ? __fget_files+0x2a/0x420 [ 499.472019][ T9230] ? bpf_lsm_file_ioctl+0x9/0x20 [ 499.472052][ T9230] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 499.472079][ T9230] __se_sys_ioctl+0xff/0x170 [ 499.472115][ T9230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.472139][ T9230] do_syscall_64+0x174/0x580 [ 499.472170][ T9230] ? trace_irq_disable+0x3b/0x140 [ 499.472191][ T9230] ? clear_bhb_loop+0x40/0x90 [ 499.472220][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.472241][ T9230] RIP: 0033:0x7f281968de59 [ 499.472263][ T9230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.472284][ T9230] RSP: 002b:00007f28178c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.472318][ T9230] RAX: ffffffffffffffda RBX: 00007f2819916090 RCX: 00007f281968de59 [ 499.472334][ T9230] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 499.472347][ T9230] RBP: 00007f28178c5090 R08: 0000000000000000 R09: 0000000000000000 [ 499.472361][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.472374][ T9230] R13: 00007f2819916128 R14: 00007f2819916090 R15: 00007fff4a809918 [ 499.472409][ T9230] [ 500.049680][ T4982] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 500.139403][ T4982] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 500.231183][ T4982] usb 6-1: USB disconnect, device number 6 [ 500.340217][ T9238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 501.269913][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.612451][ T9258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.642454][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.642527][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.542335][ T9270] netlink: 232 bytes leftover after parsing attributes in process `syz.4.886'. [ 502.542372][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 508.804467][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 508.924438][ T5613] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 509.086393][ T5613] usb 1-1: Using ep0 maxpacket: 16 [ 509.094676][ T5613] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 509.094706][ T5613] usb 1-1: config 0 has no interface number 0 [ 509.094751][ T5613] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 509.094779][ T5613] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 509.149634][ T5613] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 509.149669][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.149693][ T5613] usb 1-1: Product: syz [ 509.149708][ T5613] usb 1-1: Manufacturer: syz [ 509.149723][ T5613] usb 1-1: SerialNumber: syz [ 509.193733][ T5613] usb 1-1: config 0 descriptor?? [ 509.226674][ T9311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.226824][ T9311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.478577][ T9311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.478719][ T9311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.712294][ T5613] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 509.849930][ T9328] netlink: 232 bytes leftover after parsing attributes in process `syz.4.900'. [ 509.849966][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 511.448224][ T5613] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 511.448259][ T5613] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 511.448544][ T5613] asix 1-1:0.34: probe with driver asix failed with error -71 [ 511.499263][ T5613] usb 1-1: USB disconnect, device number 16 [ 511.513167][ T9349] FAULT_INJECTION: forcing a failure. [ 511.513167][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 511.513208][ T9349] CPU: 1 UID: 0 PID: 9349 Comm: syz.4.907 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 511.513238][ T9349] Tainted: [L]=SOFTLOCKUP [ 511.513245][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.513258][ T9349] Call Trace: [ 511.513266][ T9349] [ 511.513275][ T9349] dump_stack_lvl+0xe8/0x150 [ 511.513317][ T9349] should_fail_ex+0x467/0x600 [ 511.513354][ T9349] should_failslab+0xa8/0x100 [ 511.513381][ T9349] __kmalloc_noprof+0xfe/0x780 [ 511.513401][ T9349] ? rcu_is_watching+0x15/0xb0 [ 511.513428][ T9349] ? tomoyo_realpath_from_path+0xef/0x640 [ 511.513454][ T9349] ? tomoyo_realpath_from_path+0xef/0x640 [ 511.513490][ T9349] tomoyo_realpath_from_path+0xef/0x640 [ 511.513527][ T9349] ? tomoyo_path_number_perm+0x219/0x5f0 [ 511.513576][ T9349] tomoyo_path_number_perm+0x246/0x5f0 [ 511.513615][ T9349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 511.513652][ T9349] ? __lock_acquire+0x683/0x2ce0 [ 511.513691][ T9349] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 511.513721][ T9349] ? hook_file_ioctl+0x1f3/0x600 [ 511.513751][ T9349] ? lockdep_hardirqs_on+0x7a/0x110 [ 511.513802][ T9349] ? __fget_files+0x2a/0x420 [ 511.513827][ T9349] ? __fget_files+0x2a/0x420 [ 511.513847][ T9349] ? __fget_files+0x3a8/0x420 [ 511.513868][ T9349] ? __fget_files+0x2a/0x420 [ 511.513894][ T9349] security_file_ioctl+0xc3/0x2a0 [ 511.513920][ T9349] __se_sys_ioctl+0x47/0x170 [ 511.513947][ T9349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.513973][ T9349] do_syscall_64+0x174/0x580 [ 511.514004][ T9349] ? trace_irq_disable+0x3b/0x140 [ 511.514027][ T9349] ? clear_bhb_loop+0x40/0x90 [ 511.514055][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.514078][ T9349] RIP: 0033:0x7f281968de59 [ 511.514099][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.514118][ T9349] RSP: 002b:00007f28178e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.514142][ T9349] RAX: ffffffffffffffda RBX: 00007f2819915fa0 RCX: 00007f281968de59 [ 511.514159][ T9349] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 511.514174][ T9349] RBP: 00007f28178e6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.514187][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.514201][ T9349] R13: 00007f2819916038 R14: 00007f2819915fa0 R15: 00007fff4a809918 [ 511.514237][ T9349] [ 511.529963][ T9349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.823114][ T7973] udevd[7973]: setting mode of /dev/bus/usb/001/016 to 020664 failed: No such file or directory [ 511.823249][ T7973] udevd[7973]: setting owner of /dev/bus/usb/001/016 to uid=0, gid=0 failed: No such file or directory [ 511.851907][ T9349] loop8: detected capacity change from 0 to 8 [ 511.958487][ T9349] Dev loop8: unable to read RDB block 8 [ 511.958541][ T9349] loop8: unable to read partition table [ 511.958753][ T9349] loop8: partition table beyond EOD, truncated [ 511.958773][ T9349] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 512.046298][ T821] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 512.234583][ T821] usb 6-1: Using ep0 maxpacket: 16 [ 512.238415][ T821] usb 6-1: config 16 has an invalid interface number: 222 but max is 0 [ 512.238447][ T821] usb 6-1: config 16 contains an unexpected descriptor of type 0x1, skipping [ 512.238469][ T821] usb 6-1: config 16 has no interface number 0 [ 512.238516][ T821] usb 6-1: config 16 interface 222 altsetting 83 has a duplicate endpoint with address 0x7, skipping [ 512.238543][ T821] usb 6-1: config 16 interface 222 altsetting 83 has a duplicate endpoint with address 0x8, skipping [ 512.238568][ T821] usb 6-1: config 16 interface 222 altsetting 83 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 512.238597][ T821] usb 6-1: config 16 interface 222 altsetting 83 has a duplicate endpoint with address 0x8, skipping [ 512.238622][ T821] usb 6-1: config 16 interface 222 altsetting 83 endpoint 0xD has an invalid bInterval 92, changing to 7 [ 512.238764][ T821] usb 6-1: config 16 interface 222 altsetting 83 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 512.238795][ T821] usb 6-1: config 16 interface 222 altsetting 83 has a duplicate endpoint with address 0xA, skipping [ 512.238819][ T821] usb 6-1: config 16 interface 222 altsetting 83 has an invalid descriptor for endpoint zero, skipping [ 512.238843][ T821] usb 6-1: config 16 interface 222 altsetting 83 endpoint 0x4 has an invalid bInterval 253, changing to 11 [ 512.238872][ T821] usb 6-1: config 16 interface 222 altsetting 83 has a duplicate endpoint with address 0x3, skipping [ 512.238897][ T821] usb 6-1: config 16 interface 222 altsetting 83 has a duplicate endpoint with address 0xE, skipping [ 512.238922][ T821] usb 6-1: config 16 interface 222 altsetting 83 has a duplicate endpoint with address 0x4, skipping [ 512.238946][ T821] usb 6-1: config 16 interface 222 has no altsetting 0 [ 512.248298][ T821] usb 6-1: Dual-Role OTG device on HNP port [ 512.249984][ T821] usb 6-1: New USB device found, idVendor=07b8, idProduct=200c, bcdDevice=c8.eb [ 512.250015][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.250036][ T821] usb 6-1: Product: syz [ 512.250052][ T821] usb 6-1: Manufacturer: syz [ 512.250067][ T821] usb 6-1: SerialNumber: syz [ 512.467446][ T9351] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 512.471994][ T9356] FAULT_INJECTION: forcing a failure. [ 512.471994][ T9356] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 512.472592][ T9356] CPU: 1 UID: 0 PID: 9356 Comm: syz.4.911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.472625][ T9356] Tainted: [L]=SOFTLOCKUP [ 512.472633][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.472646][ T9356] Call Trace: [ 512.472654][ T9356] [ 512.472664][ T9356] dump_stack_lvl+0xe8/0x150 [ 512.472707][ T9356] should_fail_ex+0x467/0x600 [ 512.472745][ T9356] _copy_from_user+0x2d/0xb0 [ 512.472771][ T9356] keyctl_dh_compute+0xd4/0x180 [ 512.472805][ T9356] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 512.472845][ T9356] ? __seccomp_filter+0xafb/0x1e00 [ 512.472878][ T9356] __se_sys_keyctl+0x44c/0x9d0 [ 512.472905][ T9356] ? __pfx___se_sys_keyctl+0x10/0x10 [ 512.472928][ T9356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 512.472961][ T9356] ? rt_mutex_slowunlock+0x219/0x460 [ 512.472986][ T9356] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 512.473019][ T9356] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 512.473056][ T9356] ? fput+0xa0/0xd0 [ 512.473096][ T9356] ? __pfx_ksys_write+0x10/0x10 [ 512.473128][ T9356] ? __secure_computing+0xe7/0x2b0 [ 512.473151][ T9356] ? __x64_sys_keyctl+0x20/0xc0 [ 512.473174][ T9356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.473199][ T9356] do_syscall_64+0x174/0x580 [ 512.473231][ T9356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.473255][ T9356] ? clear_bhb_loop+0x40/0x90 [ 512.473291][ T9356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.473314][ T9356] RIP: 0033:0x7f281968de59 [ 512.473335][ T9356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.473355][ T9356] RSP: 002b:00007f28178e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 512.473379][ T9356] RAX: ffffffffffffffda RBX: 00007f2819915fa0 RCX: 00007f281968de59 [ 512.473395][ T9356] RDX: ffffffffffffffff RSI: 00002000000000c0 RDI: 0000000000000017 [ 512.473411][ T9356] RBP: 00007f28178e6090 R08: 0000200000000000 R09: 0000000000000000 [ 512.473426][ T9356] R10: 000000000000008d R11: 0000000000000246 R12: 0000000000000001 [ 512.473439][ T9356] R13: 00007f2819916038 R14: 00007f2819915fa0 R15: 00007fff4a809918 [ 512.473480][ T9356] [ 512.799253][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.806206][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.601198][ T821] pegasus 6-1:16.222: Missing or invalid endpoints [ 514.729335][ T821] usb 6-1: USB disconnect, device number 7 [ 515.128543][ T9380] vivid-000: ================= START STATUS ================= [ 515.128714][ T9380] vivid-000: Radio HW Seek Mode: Bounded [ 515.128750][ T9380] vivid-000: Radio Programmable HW Seek: false [ 515.128770][ T9380] vivid-000: RDS Rx I/O Mode: Block I/O [ 515.128789][ T9380] vivid-000: Generate RBDS Instead of RDS: false [ 515.128809][ T9380] vivid-000: RDS Reception: true [ 515.128827][ T9380] vivid-000: RDS Program Type: 0 inactive [ 515.128850][ T9380] vivid-000: RDS PS Name: inactive [ 515.128881][ T9380] vivid-000: RDS Radio Text: inactive [ 515.128903][ T9380] vivid-000: RDS Traffic Announcement: false inactive [ 515.128927][ T9380] vivid-000: RDS Traffic Program: false inactive [ 515.128951][ T9380] vivid-000: RDS Music: false inactive [ 515.128975][ T9380] vivid-000: ================== END STATUS ================== [ 515.286150][ T9385] binder: 9382:9385 ioctl 4018620d 0 returned -22 [ 515.364466][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 515.515074][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 515.520627][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.520655][ T9] usb 6-1: config 0 has no interfaces? [ 515.560401][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 515.560434][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.560468][ T9] usb 6-1: Product: syz [ 515.560483][ T9] usb 6-1: Manufacturer: syz [ 515.560498][ T9] usb 6-1: SerialNumber: syz [ 515.628338][ T9] usb 6-1: config 0 descriptor?? [ 515.872354][ T4982] usb 6-1: USB disconnect, device number 8 [ 516.077394][ T9396] netlink: 232 bytes leftover after parsing attributes in process `syz.0.925'. [ 516.813894][ T36] audit: type=1326 audit(1783335415.733:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.932" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f281968de59 code=0x0 [ 516.871715][ T9415] binder: 9414:9415 ioctl 4018620d 0 returned -22 [ 517.006461][ T9419] ======================================================= [ 517.006461][ T9419] WARNING: The mand mount option has been deprecated and [ 517.006461][ T9419] and is ignored by this kernel. Remove the mand [ 517.006461][ T9419] option from the mount to silence this warning. [ 517.006461][ T9419] ======================================================= [ 519.261142][ T5618] block nbd1: Receive control failed (result -32) [ 519.285079][ T5961] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 519.285226][ T821] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 519.435244][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 519.437651][ T5961] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 519.437679][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.437699][ T5961] usb 1-1: config 0 has no interface number 0 [ 519.437740][ T5961] usb 1-1: config 0 interface 34 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.440376][ T5961] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 519.440405][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.440427][ T5961] usb 1-1: Product: syz [ 519.440441][ T5961] usb 1-1: Manufacturer: syz [ 519.440460][ T5961] usb 1-1: SerialNumber: syz [ 519.474757][ T821] usb 4-1: Using ep0 maxpacket: 16 [ 519.538982][ T821] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 519.539012][ T821] usb 4-1: config 0 has no interface number 0 [ 519.539060][ T821] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 519.539088][ T821] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 519.560613][ T5961] usb 1-1: config 0 descriptor?? [ 519.562600][ T821] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 519.562684][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.562740][ T821] usb 4-1: Product: syz [ 519.562782][ T821] usb 4-1: Manufacturer: syz [ 519.562825][ T821] usb 4-1: SerialNumber: syz [ 519.658255][ T821] usb 4-1: config 0 descriptor?? [ 519.660098][ T9440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 519.660297][ T9440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 519.689539][ T5961] asix 1-1:0.34: probe with driver asix failed with error -22 [ 519.935463][ T5961] usb 1-1: USB disconnect, device number 17 [ 519.938431][ T9440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 519.938562][ T9440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 519.978583][ T9424] block nbd1: shutting down sockets [ 520.049398][ T9451] binder: 9450:9451 ioctl 4018620d 0 returned -22 [ 520.141483][ T821] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 520.578638][ T9460] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 520.578918][ T9460] overlayfs: missing 'lowerdir' [ 521.120950][ T9471] FAULT_INJECTION: forcing a failure. [ 521.120950][ T9471] name failslab, interval 1, probability 0, space 0, times 0 [ 521.121351][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.4.954 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.121386][ T9471] Tainted: [L]=SOFTLOCKUP [ 521.121394][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.121408][ T9471] Call Trace: [ 521.121417][ T9471] [ 521.121427][ T9471] dump_stack_lvl+0xe8/0x150 [ 521.121468][ T9471] should_fail_ex+0x467/0x600 [ 521.121507][ T9471] should_failslab+0xa8/0x100 [ 521.121536][ T9471] __kvmalloc_node_noprof+0x17a/0x8a0 [ 521.121563][ T9471] ? io_ring_ctx_alloc+0x1d1/0xc60 [ 521.121584][ T9471] ? io_ring_ctx_alloc+0x1d1/0xc60 [ 521.121613][ T9471] io_ring_ctx_alloc+0x1d1/0xc60 [ 521.121655][ T9471] io_uring_create+0x50/0x990 [ 521.121685][ T9471] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 521.121720][ T9471] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 521.121748][ T9471] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 521.121780][ T9471] ? __pfx_ksys_write+0x10/0x10 [ 521.121826][ T9471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.121851][ T9471] do_syscall_64+0x174/0x580 [ 521.121881][ T9471] ? trace_irq_disable+0x3b/0x140 [ 521.121903][ T9471] ? clear_bhb_loop+0x40/0x90 [ 521.121932][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.121955][ T9471] RIP: 0033:0x7f281968de59 [ 521.121976][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.121995][ T9471] RSP: 002b:00007f28178e5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 521.122018][ T9471] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f281968de59 [ 521.122034][ T9471] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 521.122049][ T9471] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000101 [ 521.122064][ T9471] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 521.122079][ T9471] R13: 0000200000000890 R14: 00007f28178e5fd8 R15: 0000000000000000 [ 521.122113][ T9471] [ 521.727584][ T821] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 521.727608][ T821] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 521.727807][ T821] asix 4-1:0.34: probe with driver asix failed with error -71 [ 521.801385][ T821] usb 4-1: USB disconnect, device number 10 [ 521.892648][ T9478] binder: BINDER_SET_CONTEXT_MGR already set [ 521.892665][ T9478] binder: 9477:9478 ioctl 4018620d 200000004a80 returned -16 [ 521.952125][ T9481] binder: BINDER_SET_CONTEXT_MGR already set [ 521.954845][ T9481] binder: 9480:9481 ioctl 4018620d 200000004a80 returned -16 [ 523.210540][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 523.321209][ T9508] binder: BINDER_SET_CONTEXT_MGR already set [ 523.321221][ T9508] binder: 9507:9508 ioctl 4018620d 200000004a80 returned -16 [ 524.552242][ T9528] FAULT_INJECTION: forcing a failure. [ 524.552242][ T9528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 524.552283][ T9528] CPU: 1 UID: 0 PID: 9528 Comm: syz.5.976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 524.552314][ T9528] Tainted: [L]=SOFTLOCKUP [ 524.552322][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.552334][ T9528] Call Trace: [ 524.552343][ T9528] [ 524.552353][ T9528] dump_stack_lvl+0xe8/0x150 [ 524.552394][ T9528] should_fail_ex+0x467/0x600 [ 524.552432][ T9528] prepare_alloc_pages+0x223/0x690 [ 524.552465][ T9528] __alloc_frozen_pages_noprof+0x12f/0x380 [ 524.552497][ T9528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 524.552537][ T9528] ? __pfx_policy_nodemask+0x10/0x10 [ 524.552561][ T9528] ? filemap_get_entry+0x374/0x3f0 [ 524.552595][ T9528] ? __pfx_filemap_get_entry+0x10/0x10 [ 524.552629][ T9528] alloc_pages_mpol+0xce/0x280 [ 524.552661][ T9528] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 524.552692][ T9528] shmem_get_folio_gfp+0x6ee/0x1c40 [ 524.552757][ T9528] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 524.552797][ T9528] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 524.552827][ T9528] shmem_write_begin+0x166/0x320 [ 524.552855][ T9528] generic_perform_write+0x2ad/0x8b0 [ 524.552904][ T9528] ? __pfx_generic_perform_write+0x10/0x10 [ 524.552939][ T9528] ? generic_write_checks_count+0x426/0x530 [ 524.552980][ T9528] ? file_update_time_flags+0x3b9/0x4b0 [ 524.553012][ T9528] shmem_file_write_iter+0xfb/0x120 [ 524.553044][ T9528] vfs_write+0x61e/0xbb0 [ 524.553081][ T9528] ? __pfx_vfs_write+0x10/0x10 [ 524.553110][ T9528] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.553142][ T9528] ? lockdep_hardirqs_on+0x7a/0x110 [ 524.553174][ T9528] ? mutex_lock_nested+0x152/0x1d0 [ 524.553197][ T9528] ? fdget_pos+0x252/0x320 [ 524.553229][ T9528] ksys_write+0x156/0x270 [ 524.553261][ T9528] ? __pfx_ksys_write+0x10/0x10 [ 524.553297][ T9528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.553328][ T9528] do_syscall_64+0x174/0x580 [ 524.553363][ T9528] ? trace_irq_disable+0x3b/0x140 [ 524.553391][ T9528] ? clear_bhb_loop+0x40/0x90 [ 524.553424][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.553448][ T9528] RIP: 0033:0x7f39bdbbde59 [ 524.553473][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.553493][ T9528] RSP: 002b:00007f39bbdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.553527][ T9528] RAX: ffffffffffffffda RBX: 00007f39bde46090 RCX: 00007f39bdbbde59 [ 524.553544][ T9528] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 524.553556][ T9528] RBP: 00007f39bbdf5090 R08: 0000000000000000 R09: 0000000000000000 [ 524.553570][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.553583][ T9528] R13: 00007f39bde46128 R14: 00007f39bde46090 R15: 00007ffe6f222538 [ 524.553619][ T9528] [ 525.414436][ T5613] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 525.453480][ T9544] binder: 9539:9544 ioctl 4018620d 0 returned -22 [ 525.534798][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 525.584438][ T5613] usb 2-1: Using ep0 maxpacket: 16 [ 525.603821][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.603863][ T5613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.603898][ T5613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 525.603949][ T5613] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 525.604194][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.681267][ T5613] usb 2-1: config 0 descriptor?? [ 525.927583][ T9549] binder: BINDER_SET_CONTEXT_MGR already set [ 525.927600][ T9549] binder: 9547:9549 ioctl 4018620d 200000004a80 returned -16 [ 526.202429][ T5613] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 526.232188][ T5613] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 526.403606][ T36] audit: type=1326 audit(1783335425.323:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9531 comm="syz.1.975" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c83ddde59 code=0x0 [ 528.542113][ T5613] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 528.542143][ T5613] microsoft 0003:045E:07DA.0001: no inputs found [ 528.542153][ T5613] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 528.792721][ T5613] usb 2-1: USB disconnect, device number 16 [ 529.151191][ T9568] FAULT_INJECTION: forcing a failure. [ 529.151191][ T9568] name failslab, interval 1, probability 0, space 0, times 0 [ 529.151233][ T9568] CPU: 0 UID: 0 PID: 9568 Comm: syz.0.986 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 529.151265][ T9568] Tainted: [L]=SOFTLOCKUP [ 529.151273][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.151286][ T9568] Call Trace: [ 529.151295][ T9568] [ 529.151305][ T9568] dump_stack_lvl+0xe8/0x150 [ 529.151346][ T9568] should_fail_ex+0x467/0x600 [ 529.151384][ T9568] should_failslab+0xa8/0x100 [ 529.151411][ T9568] kmem_cache_alloc_noprof+0xa4/0x650 [ 529.151446][ T9568] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.151484][ T9568] ? ima_inode_get+0xea/0x4c0 [ 529.151507][ T9568] ? ima_inode_get+0xea/0x4c0 [ 529.151540][ T9568] ima_inode_get+0xea/0x4c0 [ 529.151571][ T9568] process_measurement+0x462/0x1c20 [ 529.151600][ T9568] ? __kernel_text_address+0xd/0x30 [ 529.151633][ T9568] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 529.151681][ T9568] ? __pfx_process_measurement+0x10/0x10 [ 529.151708][ T9568] ? _parse_integer_limit+0x192/0x1e0 [ 529.151775][ T9568] ? get_pid_task+0x20/0x1f0 [ 529.151807][ T9568] ? get_pid_task+0x20/0x1f0 [ 529.151856][ T9568] ima_file_mmap+0x1b0/0x200 [ 529.151887][ T9568] ? __pfx_ima_file_mmap+0x10/0x10 [ 529.151920][ T9568] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.151956][ T9568] security_mmap_file+0x773/0xa20 [ 529.151983][ T9568] vm_mmap_pgoff+0x134/0x4e0 [ 529.152023][ T9568] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 529.152062][ T9568] ? __fget_files+0x2a/0x420 [ 529.152084][ T9568] ? __fget_files+0x3a8/0x420 [ 529.152105][ T9568] ? __fget_files+0x2a/0x420 [ 529.152132][ T9568] ksys_mmap_pgoff+0x4a6/0x720 [ 529.152168][ T9568] ? __x64_sys_mmap+0x7f/0x140 [ 529.152203][ T9568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.152229][ T9568] do_syscall_64+0x174/0x580 [ 529.152260][ T9568] ? trace_irq_disable+0x3b/0x140 [ 529.152282][ T9568] ? clear_bhb_loop+0x40/0x90 [ 529.152311][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.152334][ T9568] RIP: 0033:0x7f65173ade59 [ 529.152355][ T9568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.152376][ T9568] RSP: 002b:00007f65155e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 529.152399][ T9568] RAX: ffffffffffffffda RBX: 00007f6517636090 RCX: 00007f65173ade59 [ 529.152415][ T9568] RDX: 000000000200002f RSI: 0000000000400000 RDI: 0000200000000000 [ 529.152430][ T9568] RBP: 00007f65155e5090 R08: 0000000000000003 R09: 0000000000000000 [ 529.152444][ T9568] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 529.152458][ T9568] R13: 00007f6517636128 R14: 00007f6517636090 R15: 00007ffde6a0a978 [ 529.152494][ T9568] [ 529.703355][ T9561] fido_id[9561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 530.041035][ T9585] binder: 9583:9585 ioctl 4018620d 0 returned -22 [ 530.134165][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 530.305162][ T9590] binder: 9589:9590 ioctl c0306201 0 returned -14 [ 530.334457][ T5613] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 530.486818][ T5613] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 530.486885][ T5613] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 530.486911][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.770338][ T5613] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 532.804934][ T5613] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 532.805048][ T5613] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 532.805481][ T5613] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 532.805504][ T5613] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 532.865310][ T5613] usb 5-1: USB disconnect, device number 16 [ 533.249191][ T9625] binder: 9623:9625 ioctl 4018620d 0 returned -22 [ 533.346979][ T821] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 533.407268][ T9629] FAULT_INJECTION: forcing a failure. [ 533.407268][ T9629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.407308][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.0.1007 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 533.407340][ T9629] Tainted: [L]=SOFTLOCKUP [ 533.407347][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.407360][ T9629] Call Trace: [ 533.407368][ T9629] [ 533.407378][ T9629] dump_stack_lvl+0xe8/0x150 [ 533.407419][ T9629] should_fail_ex+0x467/0x600 [ 533.407457][ T9629] _copy_from_user+0x2d/0xb0 [ 533.407490][ T9629] btf_new_fd+0x301/0xc10 [ 533.407525][ T9629] __sys_bpf+0xd2e/0xd90 [ 533.407557][ T9629] ? __pfx___sys_bpf+0x10/0x10 [ 533.407582][ T9629] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 533.407619][ T9629] ? rt_mutex_slowunlock+0x219/0x460 [ 533.407664][ T9629] ? ksys_write+0x248/0x270 [ 533.407694][ T9629] ? __pfx_ksys_write+0x10/0x10 [ 533.407727][ T9629] __x64_sys_bpf+0xba/0xd0 [ 533.407759][ T9629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.407783][ T9629] do_syscall_64+0x174/0x580 [ 533.407814][ T9629] ? trace_irq_disable+0x3b/0x140 [ 533.407835][ T9629] ? clear_bhb_loop+0x40/0x90 [ 533.407864][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.407886][ T9629] RIP: 0033:0x7f65173ade59 [ 533.407906][ T9629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.407925][ T9629] RSP: 002b:00007f6515606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.407947][ T9629] RAX: ffffffffffffffda RBX: 00007f6517635fa0 RCX: 00007f65173ade59 [ 533.407963][ T9629] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 533.407978][ T9629] RBP: 00007f6515606090 R08: 0000000000000000 R09: 0000000000000000 [ 533.407992][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.408005][ T9629] R13: 00007f6517636038 R14: 00007f6517635fa0 R15: 00007ffde6a0a978 [ 533.408040][ T9629] [ 533.566045][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.579005][ T821] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x6 has invalid wMaxPacketSize 0 [ 533.579038][ T821] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.579114][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 533.616344][ T5961] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 533.692335][ T821] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 533.692385][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.692408][ T821] usb 5-1: Product: syz [ 533.692424][ T821] usb 5-1: Manufacturer: syz [ 533.692440][ T821] usb 5-1: SerialNumber: syz [ 533.746977][ T821] usb 5-1: config 0 descriptor?? [ 533.805403][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 533.817837][ T5961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.898475][ T5961] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 533.898500][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.898515][ T5961] usb 6-1: Product: syz [ 533.898526][ T5961] usb 6-1: Manufacturer: syz [ 533.898537][ T5961] usb 6-1: SerialNumber: syz [ 534.003328][ T5961] usb 6-1: config 0 descriptor?? [ 534.037270][ T5961] cdc_ether 6-1:0.0: skipping garbage [ 534.037297][ T5961] cdc_ether 6-1:0.0: missing cdc header descriptor [ 534.055961][ T5961] usb 6-1: unsupported MDLM descriptors [ 534.149580][ T4982] usb 5-1: USB disconnect, device number 17 [ 534.195906][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 535.044476][ T4982] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 535.134546][ T5961] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 535.197442][ T4982] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 535.197509][ T4982] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 535.197536][ T4982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.276999][ T4982] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 535.327678][ T5961] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 535.327710][ T5961] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 535.327732][ T5961] usb 5-1: config 220 has no interface number 2 [ 535.327815][ T5961] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 535.327846][ T5961] usb 5-1: config 220 interface 0 has no altsetting 0 [ 535.327866][ T5961] usb 5-1: config 220 interface 76 has no altsetting 0 [ 535.327885][ T5961] usb 5-1: config 220 interface 1 has no altsetting 0 [ 535.404932][ T5961] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 535.404965][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.404987][ T5961] usb 5-1: Product: syz [ 535.405003][ T5961] usb 5-1: Manufacturer: syz [ 535.405018][ T5961] usb 5-1: SerialNumber: syz [ 535.947938][ T5961] usb 5-1: selecting invalid altsetting 0 [ 535.988875][ T5961] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 535.988961][ T5961] uvcvideo 5-1:220.0: No valid video chain found. [ 536.028681][ T5961] usb 5-1: selecting invalid altsetting 0 [ 536.029863][ T5961] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 536.073002][ T821] usb 6-1: USB disconnect, device number 9 [ 536.083531][ T5961] usb 5-1: USB disconnect, device number 18 [ 536.407643][ T4982] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 536.407670][ T4982] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 536.408062][ T4982] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 536.408081][ T4982] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 536.414727][ T4982] usb 2-1: USB disconnect, device number 17 [ 536.858756][ T9670] FAULT_INJECTION: forcing a failure. [ 536.858756][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 536.858797][ T9670] CPU: 0 UID: 0 PID: 9670 Comm: syz.3.1019 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 536.858830][ T9670] Tainted: [L]=SOFTLOCKUP [ 536.858838][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.858852][ T9670] Call Trace: [ 536.858861][ T9670] [ 536.858870][ T9670] dump_stack_lvl+0xe8/0x150 [ 536.858919][ T9670] should_fail_ex+0x467/0x600 [ 536.858958][ T9670] should_failslab+0xa8/0x100 [ 536.858987][ T9670] kmem_cache_alloc_node_noprof+0xae/0x670 [ 536.859030][ T9670] ? __alloc_skb+0x1d7/0x7a0 [ 536.859062][ T9670] ? __alloc_skb+0x1d7/0x7a0 [ 536.859106][ T9670] __alloc_skb+0x1d7/0x7a0 [ 536.859143][ T9670] tcp_stream_alloc_skb+0x3f/0x5c0 [ 536.859180][ T9670] tcp_sendmsg_locked+0x143d/0x55c0 [ 536.859239][ T9670] ? __lock_acquire+0x683/0x2ce0 [ 536.859292][ T9670] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 536.859335][ T9670] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 536.859364][ T9670] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.859403][ T9670] tcp_sendmsg+0x2f/0x50 [ 536.859434][ T9670] ? __pfx_inet_sendmsg+0x10/0x10 [ 536.859459][ T9670] sock_sendmsg_nosec+0x10e/0x180 [ 536.859491][ T9670] __sys_sendto+0x41e/0x5d0 [ 536.859531][ T9670] ? __pfx___sys_sendto+0x10/0x10 [ 536.859595][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 536.859629][ T9670] __x64_sys_sendto+0xde/0x100 [ 536.859664][ T9670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.859690][ T9670] do_syscall_64+0x174/0x580 [ 536.859720][ T9670] ? trace_irq_disable+0x3b/0x140 [ 536.859741][ T9670] ? clear_bhb_loop+0x40/0x90 [ 536.859770][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.859813][ T9670] RIP: 0033:0x7f643ebade59 [ 536.859834][ T9670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.859854][ T9670] RSP: 002b:00007f643cdc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 536.859883][ T9670] RAX: ffffffffffffffda RBX: 00007f643ee36180 RCX: 00007f643ebade59 [ 536.859899][ T9670] RDX: ffffffffffffffef RSI: 00002000000000c0 RDI: 0000000000000006 [ 536.859915][ T9670] RBP: 00007f643cdc4090 R08: 0000000000000000 R09: 0000000000000000 [ 536.859929][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.859942][ T9670] R13: 00007f643ee36218 R14: 00007f643ee36180 R15: 00007ffe96385458 [ 536.859978][ T9670] [ 537.860636][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 538.277544][ T9688] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 538.277708][ T9688] overlayfs: missing 'lowerdir' [ 539.998421][ T9699] usb usb8: usbfs: process 9699 (syz.4.1027) did not claim interface 0 before use [ 540.154671][ T4982] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 540.274428][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 540.318553][ T4982] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 540.318614][ T4982] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 540.318644][ T4982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.367832][ T4982] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 540.430689][ T821] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 540.434385][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 540.439578][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.447607][ T9] usb 5-1: config 7 has an invalid interface number: 26 but max is 1 [ 540.447639][ T9] usb 5-1: config 7 has no interface number 1 [ 540.497800][ T9] usb 5-1: config 7 interface 0 has no altsetting 0 [ 540.497830][ T9] usb 5-1: config 7 interface 26 has no altsetting 0 [ 540.500425][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=66.50 [ 540.500458][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.500479][ T9] usb 5-1: Product: syz [ 540.500503][ T9] usb 5-1: Manufacturer: syz [ 540.500520][ T9] usb 5-1: SerialNumber: syz [ 540.865947][ T5961] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 540.912104][ T9711] IPVS: length: 214 != 2088 [ 540.913698][ T821] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 540.913731][ T821] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 540.913827][ T821] usb 6-1: Product: syz [ 540.913848][ T821] usb 6-1: SerialNumber: syz [ 541.816478][ T4982] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 541.816505][ T4982] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 541.819775][ T4982] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 541.819798][ T4982] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 541.996941][ T4982] usb 1-1: USB disconnect, device number 18 [ 542.495483][ T821] usb 6-1: config 0 descriptor?? [ 543.850589][ T9] usb 5-1: unknown number of interfaces: 2 [ 543.955626][ T9] usb 5-1: USB disconnect, device number 19 [ 543.958129][ T821] usb 6-1: USB disconnect, device number 10 [ 544.222565][ T9724] FAULT_INJECTION: forcing a failure. [ 544.222565][ T9724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.222606][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.5.1036 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.222638][ T9724] Tainted: [L]=SOFTLOCKUP [ 544.222646][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.222658][ T9724] Call Trace: [ 544.222667][ T9724] [ 544.222676][ T9724] dump_stack_lvl+0xe8/0x150 [ 544.222717][ T9724] should_fail_ex+0x467/0x600 [ 544.222756][ T9724] _copy_from_user+0x2d/0xb0 [ 544.222782][ T9724] kstrtouint_from_user+0xd6/0x180 [ 544.222828][ T9724] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 544.222861][ T9724] ? __lock_acquire+0x683/0x2ce0 [ 544.222903][ T9724] proc_fail_nth_write+0x8e/0x210 [ 544.222927][ T9724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 544.222960][ T9724] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 544.222984][ T9724] vfs_write+0x29f/0xbb0 [ 544.223020][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 544.223050][ T9724] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 544.223084][ T9724] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.223116][ T9724] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.223153][ T9724] ? mutex_lock_nested+0x152/0x1d0 [ 544.223176][ T9724] ? fdget_pos+0x252/0x320 [ 544.223209][ T9724] ksys_write+0x156/0x270 [ 544.223238][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 544.223263][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.223297][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.223322][ T9724] do_syscall_64+0x174/0x580 [ 544.223352][ T9724] ? trace_irq_disable+0x3b/0x140 [ 544.223374][ T9724] ? clear_bhb_loop+0x40/0x90 [ 544.223403][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.223425][ T9724] RIP: 0033:0x7f39bdb7e68e [ 544.223446][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 544.223466][ T9724] RSP: 002b:00007f39bbe15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.223490][ T9724] RAX: ffffffffffffffda RBX: 00007f39bbe166c0 RCX: 00007f39bdb7e68e [ 544.223507][ T9724] RDX: 0000000000000001 RSI: 00007f39bbe160a0 RDI: 0000000000000003 [ 544.223521][ T9724] RBP: 00007f39bbe16090 R08: 0000000000000000 R09: 0000000000000000 [ 544.223535][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.223547][ T9724] R13: 00007f39bde46038 R14: 00007f39bde45fa0 R15: 00007ffe6f222538 [ 544.223581][ T9724] [ 545.354528][ T821] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 545.878901][ T821] usb 6-1: Using ep0 maxpacket: 16 [ 546.697228][ T821] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 546.697259][ T821] usb 6-1: config 0 has no interface number 0 [ 546.697307][ T821] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 546.697336][ T821] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 546.701799][ T821] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 546.701832][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.701855][ T821] usb 6-1: Product: syz [ 546.701870][ T821] usb 6-1: Manufacturer: syz [ 546.701886][ T821] usb 6-1: SerialNumber: syz [ 546.887737][ T821] usb 6-1: config 0 descriptor?? [ 547.845656][ T9732] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 547.845964][ T9732] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 549.226545][ T821] asix 6-1:0.34: probe with driver asix failed with error -71 [ 549.274916][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 549.352137][ T821] usb 6-1: USB disconnect, device number 11 [ 549.461516][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 549.461578][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 549.461605][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.536511][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 549.598131][ T9751] Bluetooth: MGMT ver 1.23 [ 551.287085][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 551.287105][ T9] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 551.288123][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 551.288144][ T9] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 551.365171][ T9] usb 5-1: USB disconnect, device number 20 [ 552.957152][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 553.281772][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 553.284230][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 553.284259][ T9] usb 1-1: config 0 has no interface number 0 [ 553.304517][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 553.304552][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 553.307443][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 553.307474][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.307495][ T9] usb 1-1: Product: syz [ 553.307509][ T9] usb 1-1: Manufacturer: syz [ 553.307523][ T9] usb 1-1: SerialNumber: syz [ 553.374859][ T9] usb 1-1: config 0 descriptor?? [ 553.377203][ T9791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.283974][ T9791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.504964][ T9791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.505130][ T9791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 554.727171][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 555.164548][ T5613] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 555.304459][ T5613] usb 2-1: device descriptor read/64, error -71 [ 555.606271][ T5613] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 555.734456][ T5613] usb 2-1: device descriptor read/64, error -71 [ 555.859525][ T5613] usb usb2-port1: attempt power cycle [ 556.163817][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 556.163842][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 556.200739][ T9] asix 1-1:0.34: probe with driver asix failed with error -71 [ 556.207089][ T5613] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 556.235293][ T5613] usb 2-1: device descriptor read/8, error -71 [ 556.270757][ T9] usb 1-1: USB disconnect, device number 19 [ 556.485643][ T5613] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 556.509492][ T5613] usb 2-1: device descriptor read/8, error -71 [ 556.627709][ T5613] usb usb2-port1: unable to enumerate USB device [ 558.908888][ T9843] FAULT_INJECTION: forcing a failure. [ 558.908888][ T9843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.908932][ T9843] CPU: 1 UID: 0 PID: 9843 Comm: syz.3.1074 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 558.908963][ T9843] Tainted: [L]=SOFTLOCKUP [ 558.908971][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 558.908985][ T9843] Call Trace: [ 558.908993][ T9843] [ 558.909003][ T9843] dump_stack_lvl+0xe8/0x150 [ 558.909043][ T9843] should_fail_ex+0x467/0x600 [ 558.909079][ T9843] _copy_from_user+0x2d/0xb0 [ 558.909105][ T9843] __sys_bpf+0x2e7/0xd90 [ 558.909136][ T9843] ? __pfx___sys_bpf+0x10/0x10 [ 558.909162][ T9843] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 558.909199][ T9843] ? rt_mutex_slowunlock+0x219/0x460 [ 558.909244][ T9843] ? ksys_write+0x248/0x270 [ 558.909274][ T9843] ? __pfx_ksys_write+0x10/0x10 [ 558.909305][ T9843] __x64_sys_bpf+0xba/0xd0 [ 558.909346][ T9843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.909371][ T9843] do_syscall_64+0x174/0x580 [ 558.909409][ T9843] ? trace_irq_disable+0x3b/0x140 [ 558.909431][ T9843] ? clear_bhb_loop+0x40/0x90 [ 558.909459][ T9843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.909482][ T9843] RIP: 0033:0x7f643ebade59 [ 558.909502][ T9843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.909520][ T9843] RSP: 002b:00007f643ce06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.909544][ T9843] RAX: ffffffffffffffda RBX: 00007f643ee35fa0 RCX: 00007f643ebade59 [ 558.909560][ T9843] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 558.909575][ T9843] RBP: 00007f643ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 558.909588][ T9843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.909601][ T9843] R13: 00007f643ee36038 R14: 00007f643ee35fa0 R15: 00007ffe96385458 [ 558.909636][ T9843] [ 560.291232][ T5961] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 560.439001][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 560.459248][ T5961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.459280][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.552851][ T5961] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.552875][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.552890][ T5961] usb 5-1: Product: syz [ 560.552901][ T5961] usb 5-1: Manufacturer: syz [ 560.552912][ T5961] usb 5-1: SerialNumber: syz [ 560.784172][ T5961] usb 5-1: 0:2 : does not exist [ 560.819082][ T5613] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 560.964389][ T5613] usb 2-1: Using ep0 maxpacket: 16 [ 560.971355][ T5613] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 560.971381][ T5613] usb 2-1: config 0 has no interface number 0 [ 560.971420][ T5613] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 560.971444][ T5613] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 561.051163][ T5613] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 561.051198][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.051231][ T5613] usb 2-1: Product: syz [ 561.051247][ T5613] usb 2-1: Manufacturer: syz [ 561.051262][ T5613] usb 2-1: SerialNumber: syz [ 561.128101][ T5613] usb 2-1: config 0 descriptor?? [ 561.200862][ T9862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 561.203313][ T9862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 561.446380][ T9862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 561.446590][ T9862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 561.651805][ T5613] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 561.992193][ T5961] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 562.794515][ T5961] usb 5-1: USB disconnect, device number 21 [ 563.048518][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.048589][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.313155][ T5613] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 563.313433][ T5613] asix 2-1:0.34: probe with driver asix failed with error -71 [ 563.395747][ T5613] usb 2-1: USB disconnect, device number 23 [ 564.056494][ T7973] udevd[7973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.753218][ T9896] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 564.753370][ T9896] overlayfs: missing 'lowerdir' [ 566.399194][ T9903] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 566.399351][ T9903] overlayfs: missing 'lowerdir' [ 568.274601][ T5961] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 568.588436][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 568.591097][ T5961] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 568.591127][ T5961] usb 5-1: config 0 has no interface number 0 [ 568.591172][ T5961] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 568.591198][ T5961] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 569.417542][ T5961] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 569.417568][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.417583][ T5961] usb 5-1: Product: syz [ 569.417594][ T5961] usb 5-1: Manufacturer: syz [ 569.417605][ T5961] usb 5-1: SerialNumber: syz [ 569.421716][ T5734] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 569.492649][ T5961] usb 5-1: config 0 descriptor?? [ 569.493522][ T9917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.493619][ T9917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.580273][ T5734] usb 6-1: Using ep0 maxpacket: 16 [ 569.593581][ T5734] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 569.593631][ T5734] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.593650][ T5734] usb 6-1: config 1 has no interface number 0 [ 569.593744][ T5734] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid maxpacket 64090, setting to 64 [ 569.593774][ T5734] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.593802][ T5734] usb 6-1: config 1 interface 105 has no altsetting 0 [ 569.661292][ T5734] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 569.661317][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 569.661332][ T5734] usb 6-1: Product: syz [ 569.661343][ T5734] usb 6-1: Manufacturer: syz [ 569.661354][ T5734] usb 6-1: SerialNumber: syz [ 569.716069][ T9917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.716295][ T9917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.918266][ T5961] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 570.127015][ T5734] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 570.303537][ T8501] usb 6-1: USB disconnect, device number 12 [ 570.995678][ T9933] FAULT_INJECTION: forcing a failure. [ 570.995678][ T9933] name failslab, interval 1, probability 0, space 0, times 0 [ 570.995722][ T9933] CPU: 0 UID: 0 PID: 9933 Comm: syz.1.1104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 570.995754][ T9933] Tainted: [L]=SOFTLOCKUP [ 570.995762][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.995776][ T9933] Call Trace: [ 570.995785][ T9933] [ 570.995802][ T9933] dump_stack_lvl+0xe8/0x150 [ 570.995845][ T9933] should_fail_ex+0x467/0x600 [ 570.995884][ T9933] should_failslab+0xa8/0x100 [ 570.995910][ T9933] kmem_cache_alloc_noprof+0xa4/0x650 [ 570.995949][ T9933] ? mas_alloc_nodes+0x291/0x350 [ 570.995979][ T9933] ? mas_alloc_nodes+0x291/0x350 [ 570.996017][ T9933] mas_alloc_nodes+0x291/0x350 [ 570.996053][ T9933] mas_preallocate+0x2cf/0x630 [ 570.996090][ T9933] ? __pfx_mas_preallocate+0x10/0x10 [ 570.996129][ T9933] ? anon_vma_name+0x61/0x210 [ 570.996157][ T9933] ? __mas_set_range+0x11a/0x3a0 [ 570.996192][ T9933] __split_vma+0x33d/0xa40 [ 570.996237][ T9933] ? __pfx___split_vma+0x10/0x10 [ 570.996289][ T9933] vma_modify+0x9a7/0x1ec0 [ 570.996333][ T9933] vma_modify_policy+0x230/0x2b0 [ 570.996366][ T9933] ? __pfx_vma_modify_policy+0x10/0x10 [ 570.996426][ T9933] mbind_range+0x2c1/0x800 [ 570.996453][ T9933] ? mas_find+0xab1/0xcf0 [ 570.996493][ T9933] __se_sys_mbind+0xacd/0x10e0 [ 570.996527][ T9933] ? __pfx___se_sys_mbind+0x10/0x10 [ 570.996565][ T9933] ? fput+0xa0/0xd0 [ 570.996599][ T9933] ? ksys_write+0x248/0x270 [ 570.996630][ T9933] ? __pfx_ksys_write+0x10/0x10 [ 570.996662][ T9933] ? __x64_sys_mbind+0x21/0xf0 [ 570.996685][ T9933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.996710][ T9933] do_syscall_64+0x174/0x580 [ 570.996740][ T9933] ? trace_irq_disable+0x3b/0x140 [ 570.996762][ T9933] ? clear_bhb_loop+0x40/0x90 [ 570.996814][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.996839][ T9933] RIP: 0033:0x7f6c83ddde59 [ 570.996860][ T9933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.996879][ T9933] RSP: 002b:00007f6c81ff4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 570.996903][ T9933] RAX: ffffffffffffffda RBX: 00007f6c84066180 RCX: 00007f6c83ddde59 [ 570.996919][ T9933] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000 [ 570.996934][ T9933] RBP: 00007f6c81ff4090 R08: 0000000000000000 R09: 0000000000000002 [ 570.996948][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.996962][ T9933] R13: 00007f6c84066218 R14: 00007f6c84066180 R15: 00007ffd3e20cab8 [ 570.996998][ T9933] [ 571.739439][ T5961] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 571.739753][ T5961] asix 5-1:0.34: probe with driver asix failed with error -71 [ 572.629245][ T5961] usb 5-1: USB disconnect, device number 22 [ 574.197724][ T5961] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 574.344779][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 574.348779][ T5961] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 574.348807][ T5961] usb 2-1: config 0 has no interface number 0 [ 574.348854][ T5961] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 574.348874][ T5961] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 574.400036][ T5961] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 574.400069][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.400091][ T5961] usb 2-1: Product: syz [ 574.400106][ T5961] usb 2-1: Manufacturer: syz [ 574.400121][ T5961] usb 2-1: SerialNumber: syz [ 574.477745][ T5961] usb 2-1: config 0 descriptor?? [ 574.480844][ T9953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 574.481851][ T9953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 574.720717][ T9953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 574.720859][ T9953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 574.926449][ T5961] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 575.664730][ T5613] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 575.794785][ T5613] usb 4-1: device descriptor read/64, error -71 [ 576.088041][ T5613] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 576.151582][ T5961] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 576.151616][ T5961] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 576.151907][ T5961] asix 2-1:0.34: probe with driver asix failed with error -71 [ 576.242042][ T5613] usb 4-1: device descriptor read/64, error -71 [ 576.285961][ T5961] usb 2-1: USB disconnect, device number 24 [ 576.345215][ T5613] usb usb4-port1: attempt power cycle [ 577.153102][ T5613] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 577.165264][ T5613] usb 4-1: device descriptor read/8, error -71 [ 577.406095][ T5613] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 577.425320][ T5613] usb 4-1: device descriptor read/8, error -71 [ 577.544747][ T5613] usb usb4-port1: unable to enumerate USB device [ 577.714450][ T5961] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 577.874393][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 577.878996][ T5961] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 577.879030][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.912217][ T5961] usb 6-1: config 0 descriptor?? [ 577.926037][ T5961] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 578.734658][ T8501] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 578.768655][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'. [ 579.388750][ T8501] usb 2-1: Using ep0 maxpacket: 32 [ 579.403076][ T8501] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 579.403098][ T8501] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 579.403116][ T8501] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.405696][ T5961] gspca_vc032x: reg_w err -110 [ 579.407793][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.410240][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.410397][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.410451][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.410463][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.410472][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.410482][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.410630][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.411760][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.412846][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.413978][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416237][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416251][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416261][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416272][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416281][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416291][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416301][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 579.416376][ T5961] gspca_vc032x: Unknown sensor... [ 579.416470][ T5961] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 579.483642][ T8501] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 579.483665][ T8501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.483680][ T8501] usb 2-1: Product: syz [ 579.483691][ T8501] usb 2-1: Manufacturer: syz [ 579.483702][ T8501] usb 2-1: SerialNumber: syz [ 579.661932][ T8501] usb 2-1: config 0 descriptor?? [ 579.946836][ T5961] usb 6-1: USB disconnect, device number 13 [ 580.098556][ T8501] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 580.343689][ T8501] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 580.370588][ T8501] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 580.922995][ T5961] usb 2-1: USB disconnect, device number 25 [ 581.269158][ T36] audit: type=1326 audit(1783335480.043:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269216][ T36] audit: type=1326 audit(1783335480.043:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269265][ T36] audit: type=1326 audit(1783335480.083:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269311][ T36] audit: type=1326 audit(1783335480.113:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269360][ T36] audit: type=1326 audit(1783335480.113:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269407][ T36] audit: type=1326 audit(1783335480.163:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269458][ T36] audit: type=1326 audit(1783335480.193:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269506][ T36] audit: type=1326 audit(1783335480.193:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.269553][ T36] audit: type=1326 audit(1783335480.193:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 581.270118][ T36] audit: type=1326 audit(1783335480.193:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10016 comm="syz.5.1135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f39bdbbde59 code=0x7ffc0000 [ 582.609375][ T4982] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 582.784515][ T821] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 582.808533][T10043] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 582.846701][ T4982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 582.848673][ T4982] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 582.848702][ T4982] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 582.848723][ T4982] usb 4-1: config 63 has no interface number 0 [ 582.848757][ T4982] usb 4-1: config 63 interface 66 has no altsetting 0 [ 582.851311][ T4982] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 582.851341][ T4982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.851364][ T4982] usb 4-1: Product: syz [ 582.851378][ T4982] usb 4-1: Manufacturer: syz [ 582.851394][ T4982] usb 4-1: SerialNumber: syz [ 582.935068][ T821] usb 5-1: device descriptor read/64, error -71 [ 583.176305][ T821] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 583.201983][ T4982] uvcvideo 4-1:63.66: Found Unit with invalid ID 0 [ 583.205600][ T4982] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 583.206018][ T4982] uvcvideo 4-1:63.66: No valid video chain found. [ 583.253824][ T4982] usb 4-1: USB disconnect, device number 15 [ 583.304618][ T821] usb 5-1: device descriptor read/64, error -71 [ 583.446099][ T821] usb usb5-port1: attempt power cycle [ 583.500696][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 583.500718][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1145'. [ 583.500861][T10049] netlink: 'syz.5.1145': attribute type 12 has an invalid length. [ 583.694211][ T5866] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.729201][ T43] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.729269][ T43] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.729310][ T43] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.834456][ T821] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 583.855371][ T821] usb 5-1: device descriptor read/8, error -71 [ 584.094488][ T821] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 584.115535][ T821] usb 5-1: device descriptor read/8, error -71 [ 584.224932][ T821] usb usb5-port1: unable to enumerate USB device [ 587.700603][ T8501] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 588.496255][T10088] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1157'. [ 588.496306][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1157'. [ 588.496332][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 588.987113][ T5791] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 589.426438][ T5791] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 589.426504][ T5791] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 589.426530][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.574771][ T5791] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 590.822077][ T5791] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 590.822106][ T5791] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 590.823092][ T5791] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 590.823114][ T5791] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 590.849483][ T5791] usb 1-1: USB disconnect, device number 20 [ 591.834563][ T4982] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 592.214394][ T4982] usb 5-1: Using ep0 maxpacket: 16 [ 592.217197][ T4982] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 592.217233][ T4982] usb 5-1: config 0 has no interface number 0 [ 592.217282][ T4982] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 592.217311][ T4982] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 592.217335][ T4982] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 592.220874][ T4982] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 592.220907][ T4982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.220930][ T4982] usb 5-1: Product: syz [ 592.220944][ T4982] usb 5-1: Manufacturer: syz [ 592.220960][ T4982] usb 5-1: SerialNumber: syz [ 593.387927][ T4982] usb 5-1: config 0 descriptor?? [ 593.390908][T10116] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 593.554956][ T5961] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 593.583798][ T4982] asix 5-1:0.34: probe with driver asix failed with error -22 [ 593.724475][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 593.727091][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 593.727142][ T5961] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 593.730601][ T5961] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 593.730633][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.730656][ T5961] usb 4-1: Product: syz [ 593.730672][ T5961] usb 4-1: Manufacturer: syz [ 593.730687][ T5961] usb 4-1: SerialNumber: syz [ 595.165211][ T5961] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 595.290860][ T5791] usb 5-1: USB disconnect, device number 27 [ 595.432249][ T5961] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 595.432327][ T5961] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 595.993447][ T5961] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 596.028593][T10159] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1179'. [ 596.234034][ T5961] usb 4-1: USB disconnect, device number 16 [ 596.275767][ T5618] Bluetooth: hci3: ACL packet for unknown connection handle 2249 [ 596.455243][ T7973] udevd[7973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.739583][T10159] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.800236][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.638080][T10177] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 599.373551][T10187] FAULT_INJECTION: forcing a failure. [ 599.373551][T10187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.373618][T10187] CPU: 0 UID: 0 PID: 10187 Comm: syz.1.1185 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.373650][T10187] Tainted: [L]=SOFTLOCKUP [ 599.373657][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.373671][T10187] Call Trace: [ 599.373680][T10187] [ 599.373691][T10187] dump_stack_lvl+0xe8/0x150 [ 599.373732][T10187] should_fail_ex+0x467/0x600 [ 599.373773][T10187] _copy_to_user+0x31/0xb0 [ 599.373800][T10187] simple_read_from_buffer+0xe1/0x170 [ 599.373829][T10187] proc_fail_nth_read+0x1be/0x230 [ 599.373856][T10187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 599.373884][T10187] ? rw_verify_area+0x250/0x4d0 [ 599.373912][T10187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 599.373942][T10187] vfs_read+0x219/0xa90 [ 599.373979][T10187] ? __pfx_vfs_read+0x10/0x10 [ 599.374007][T10187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.374041][T10187] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.374072][T10187] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.374103][T10187] ? mutex_lock_nested+0x152/0x1d0 [ 599.374127][T10187] ? fdget_pos+0x252/0x320 [ 599.374159][T10187] ksys_read+0x156/0x270 [ 599.374189][T10187] ? __pfx_ksys_read+0x10/0x10 [ 599.374225][T10187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.374252][T10187] do_syscall_64+0x174/0x580 [ 599.374287][T10187] ? clear_bhb_loop+0x40/0x90 [ 599.374348][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.374372][T10187] RIP: 0033:0x7f6c83d9e68e [ 599.374393][T10187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 599.374413][T10187] RSP: 002b:00007f6c81ff3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 599.374435][T10187] RAX: ffffffffffffffda RBX: 00007f6c81ff46c0 RCX: 00007f6c83d9e68e [ 599.374451][T10187] RDX: 000000000000000f RSI: 00007f6c81ff40a0 RDI: 0000000000000008 [ 599.374465][T10187] RBP: 00007f6c81ff4090 R08: 0000000000000000 R09: 0000000000000000 [ 599.374479][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.374492][T10187] R13: 00007f6c84066218 R14: 00007f6c84066180 R15: 00007ffd3e20cab8 [ 599.374528][T10187] [ 600.624460][ T8501] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 600.784377][ T8501] usb 2-1: Using ep0 maxpacket: 16 [ 600.792575][ T8501] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 600.792605][ T8501] usb 2-1: config 0 has no interface number 0 [ 600.792711][ T8501] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 600.792742][ T8501] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 600.846036][ T8501] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 600.846059][ T8501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.846074][ T8501] usb 2-1: Product: syz [ 600.846085][ T8501] usb 2-1: Manufacturer: syz [ 600.846095][ T8501] usb 2-1: SerialNumber: syz [ 600.887276][ T8501] usb 2-1: config 0 descriptor?? [ 600.892375][T10191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 600.892513][T10191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.111228][T10191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.111360][T10191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.336089][ T8501] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 601.336297][ T8501] asix 2-1:0.34: probe with driver asix failed with error -32 [ 601.623559][T10193] FAULT_INJECTION: forcing a failure. [ 601.623559][T10193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.623601][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.4.1188 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 601.623632][T10193] Tainted: [L]=SOFTLOCKUP [ 601.623641][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.623654][T10193] Call Trace: [ 601.623663][T10193] [ 601.623672][T10193] dump_stack_lvl+0xe8/0x150 [ 601.623713][T10193] should_fail_ex+0x467/0x600 [ 601.623751][T10193] _copy_from_iter+0x1d3/0x1660 [ 601.623790][T10193] ? rcu_is_watching+0x15/0xb0 [ 601.623819][T10193] ? trace_kmem_cache_alloc+0x29/0xe0 [ 601.623859][T10193] ? __pfx__copy_from_iter+0x10/0x10 [ 601.623892][T10193] ? __alloc_skb+0x276/0x7a0 [ 601.623922][T10193] ? __alloc_skb+0x276/0x7a0 [ 601.623961][T10193] ? netlink_sendmsg+0x650/0xb40 [ 601.623984][T10193] ? skb_put+0x112/0x210 [ 601.624019][T10193] netlink_sendmsg+0x6c0/0xb40 [ 601.624051][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.624076][T10193] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 601.624108][T10193] ? __kernel_text_address+0xd/0x30 [ 601.624130][T10193] ? unwind_get_return_address+0x4d/0x90 [ 601.624159][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.624181][T10193] sock_sendmsg_nosec+0x13a/0x180 [ 601.624222][T10193] ____sys_sendmsg+0x565/0x870 [ 601.624245][T10193] ? __might_fault+0xaf/0x130 [ 601.624276][T10193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.624308][T10193] ? import_iovec+0x73/0xa0 [ 601.624335][T10193] ___sys_sendmsg+0x2a5/0x360 [ 601.624357][T10193] ? __lock_acquire+0x683/0x2ce0 [ 601.624384][T10193] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.624445][T10193] ? __fget_files+0x2a/0x420 [ 601.624466][T10193] ? __fget_files+0x3a8/0x420 [ 601.624499][T10193] __x64_sys_sendmsg+0x1b7/0x290 [ 601.624525][T10193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.624568][T10193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.624594][T10193] do_syscall_64+0x174/0x580 [ 601.624625][T10193] ? trace_irq_disable+0x3b/0x140 [ 601.624647][T10193] ? clear_bhb_loop+0x40/0x90 [ 601.624675][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.624700][T10193] RIP: 0033:0x7f281968de59 [ 601.624720][T10193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.624738][T10193] RSP: 002b:00007f28178e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.624760][T10193] RAX: ffffffffffffffda RBX: 00007f2819915fa0 RCX: 00007f281968de59 [ 601.624777][T10193] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 601.624791][T10193] RBP: 00007f28178e6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.624804][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.624817][T10193] R13: 00007f2819916038 R14: 00007f2819915fa0 R15: 00007fff4a809918 [ 601.624852][T10193] [ 602.493446][T10205] binder: 10203:10205 ioctl 4018620d 0 returned -22 [ 604.342167][ T5961] usb 2-1: USB disconnect, device number 27 [ 604.344375][ T8501] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 604.538331][ T8501] usb 4-1: Using ep0 maxpacket: 16 [ 605.102080][ T8501] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.102111][ T8501] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.178100][ T8501] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.178133][ T8501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.178153][ T8501] usb 4-1: Product: syz [ 605.178169][ T8501] usb 4-1: Manufacturer: syz [ 605.178184][ T8501] usb 4-1: SerialNumber: syz [ 605.364658][ T8501] usb 4-1: 0:2 : does not exist [ 605.835108][T10234] binder: 10233:10234 ioctl 4018620d 0 returned -22 [ 606.063856][ T8501] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 607.166618][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1206'. [ 607.166653][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1206'. [ 607.246235][T10241] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 607.682222][ T8501] usb 4-1: USB disconnect, device number 17 [ 608.361113][ T7973] udevd[7973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.428377][ T5618] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 608.437754][ T8501] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 608.604389][ T8501] usb 4-1: Using ep0 maxpacket: 16 [ 608.610006][ T8501] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 608.610030][ T8501] usb 4-1: config 0 has no interface number 0 [ 608.610063][ T8501] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 608.610082][ T8501] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 608.626303][ T8501] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 608.626390][ T8501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.626453][ T8501] usb 4-1: Product: syz [ 608.626495][ T8501] usb 4-1: Manufacturer: syz [ 608.626565][ T8501] usb 4-1: SerialNumber: syz [ 608.697170][ T8501] usb 4-1: config 0 descriptor?? [ 608.698072][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.698200][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.982715][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.982850][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 609.028080][T10273] binder: 10271:10273 ioctl 4018620d 0 returned -22 [ 609.193145][ T8501] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 609.193395][ T8501] asix 4-1:0.34: probe with driver asix failed with error -32 [ 609.778478][ T5618] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 609.778718][ T5618] Bluetooth: hci3: Malformed LE Event: 0x02 [ 609.811389][ T5618] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 610.616684][ T8501] usb 4-1: USB disconnect, device number 18 [ 612.258907][T10286] loop5: detected capacity change from 0 to 3895 [ 612.544880][T10286] Dev loop5: unable to read RDB block 8 [ 612.545138][T10286] loop5: unable to read partition table [ 612.545501][T10286] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 612.545501][T10286] ) failed (rc=-5) [ 612.903701][ T7973] Buffer I/O error on dev loop5, logical block 486, async page read [ 613.964461][ T5961] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 613.978890][T10315] binder: 10314:10315 ioctl c0306201 0 returned -14 [ 614.116162][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 614.118953][ T5961] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 614.118984][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.180297][ T5961] usb 2-1: config 0 descriptor?? [ 614.207334][ T5961] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 615.023757][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 615.552746][ T5961] gspca_vc032x: reg_w err -110 [ 615.552767][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552778][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552788][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552798][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552808][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552817][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552827][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552837][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552846][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552857][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552866][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552877][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552900][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552910][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552920][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552930][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552939][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552949][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 615.552959][ T5961] gspca_vc032x: Unknown sensor... [ 615.553045][ T5961] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 615.964580][ T5615] usb 2-1: USB disconnect, device number 28 [ 616.154472][ T821] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 616.224483][ T8501] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 616.304526][ T821] usb 5-1: Using ep0 maxpacket: 32 [ 616.306960][ T821] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 616.306988][ T821] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 616.307011][ T821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 616.307036][ T821] usb 5-1: config 1 has no interface number 0 [ 616.307084][ T821] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.307119][ T821] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 616.307163][ T821] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 616.307188][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.379208][ T8501] usb 6-1: Using ep0 maxpacket: 16 [ 616.413092][ T8501] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 616.413124][ T8501] usb 6-1: config 0 has no interface number 0 [ 616.414039][ T8501] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 616.414070][ T8501] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 616.481358][ T8501] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 616.481392][ T8501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.481413][ T8501] usb 6-1: Product: syz [ 616.481427][ T8501] usb 6-1: Manufacturer: syz [ 616.481442][ T8501] usb 6-1: SerialNumber: syz [ 616.481587][ T821] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 616.577566][ T8501] usb 6-1: config 0 descriptor?? [ 616.579056][T10337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 616.579329][T10337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 616.718350][ T821] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 616.814718][T10337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 616.815387][T10337] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 616.885750][T10344] FAULT_INJECTION: forcing a failure. [ 616.885750][T10344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.885865][T10344] CPU: 1 UID: 0 PID: 10344 Comm: syz.3.1237 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 616.885896][T10344] Tainted: [L]=SOFTLOCKUP [ 616.885903][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.885916][T10344] Call Trace: [ 616.885925][T10344] [ 616.885935][T10344] dump_stack_lvl+0xe8/0x150 [ 616.885979][T10344] should_fail_ex+0x467/0x600 [ 616.886016][T10344] strncpy_from_user+0x36/0x2c0 [ 616.886049][T10344] path_setxattrat+0x191/0x450 [ 616.886089][T10344] ? __pfx_path_setxattrat+0x10/0x10 [ 616.886132][T10344] ? ksys_write+0x248/0x270 [ 616.886154][T10344] ? __pfx_ksys_write+0x10/0x10 [ 616.886177][T10344] __x64_sys_fsetxattr+0xbc/0xe0 [ 616.886196][T10344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.886215][T10344] do_syscall_64+0x174/0x580 [ 616.886239][T10344] ? trace_irq_disable+0x3b/0x140 [ 616.886255][T10344] ? clear_bhb_loop+0x40/0x90 [ 616.886276][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.886293][T10344] RIP: 0033:0x7f643ebade59 [ 616.886309][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.886323][T10344] RSP: 002b:00007f643ce06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 616.886342][T10344] RAX: ffffffffffffffda RBX: 00007f643ee35fa0 RCX: 00007f643ebade59 [ 616.886354][T10344] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 0000000000000003 [ 616.886365][T10344] RBP: 00007f643ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 616.886375][T10344] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 616.886385][T10344] R13: 00007f643ee36038 R14: 00007f643ee35fa0 R15: 00007ffe96385458 [ 616.886411][T10344] [ 617.049658][ T8501] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 617.050334][ T8501] asix 6-1:0.34: probe with driver asix failed with error -32 [ 617.833888][ T821] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 617.936052][T10353] binder: 10352:10353 ioctl c0306201 0 returned -14 [ 618.201466][ T821] usb 5-1: USB disconnect, device number 28 [ 618.222625][ T821] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 619.090573][ T9] usb 6-1: USB disconnect, device number 14 [ 620.258160][T10387] binder: 10384:10387 ioctl c0306201 0 returned -14 [ 620.872298][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 620.872317][ T36] audit: type=1326 audit(1783335519.793:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c83ddde59 code=0x7ffc0000 [ 620.872877][ T36] audit: type=1326 audit(1783335519.793:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c83ddde59 code=0x7ffc0000 [ 620.873175][ T36] audit: type=1326 audit(1783335519.793:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c83ddde59 code=0x7ffc0000 [ 620.873622][ T36] audit: type=1326 audit(1783335519.793:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c83ddde59 code=0x7ffc0000 [ 620.928193][ T36] audit: type=1326 audit(1783335519.853:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c83ddde59 code=0x7ffc0000 [ 620.928338][ T36] audit: type=1326 audit(1783335519.853:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c83dddbc2 code=0x7ffc0000 [ 620.969342][ T36] audit: type=1326 audit(1783335519.853:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6c83dddc57 code=0x7ffc0000 [ 621.010559][ T36] audit: type=1326 audit(1783335519.933:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6c83d9ab51 code=0x7ffc0000 [ 621.057657][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 621.106526][ T36] audit: type=1326 audit(1783335520.023:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c83ddde59 code=0x7ffc0000 [ 621.106575][ T36] audit: type=1326 audit(1783335520.023:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10401 comm="syz.1.1257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c83ddde59 code=0x7ffc0000 [ 621.215553][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 621.218815][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 621.218844][ T9] usb 4-1: config 0 has no interface number 0 [ 621.218891][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 621.218919][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 621.274677][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 621.274711][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.274734][ T9] usb 4-1: Product: syz [ 621.274750][ T9] usb 4-1: Manufacturer: syz [ 621.274766][ T9] usb 4-1: SerialNumber: syz [ 621.341099][ T9] usb 4-1: config 0 descriptor?? [ 621.343544][T10406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 621.343676][T10406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 621.571815][T10406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 621.571959][T10406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 621.778873][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 621.779266][ T9] asix 4-1:0.34: probe with driver asix failed with error -32 [ 622.183776][T10430] netlink: 'syz.4.1267': attribute type 7 has an invalid length. [ 622.235094][T10434] netlink: 'syz.4.1267': attribute type 7 has an invalid length. [ 622.261056][T10435] FAULT_INJECTION: forcing a failure. [ 622.261056][T10435] name failslab, interval 1, probability 0, space 0, times 0 [ 622.261097][T10435] CPU: 1 UID: 0 PID: 10435 Comm: syz.5.1268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 622.261134][T10435] Tainted: [L]=SOFTLOCKUP [ 622.261141][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.261154][T10435] Call Trace: [ 622.261163][T10435] [ 622.261172][T10435] dump_stack_lvl+0xe8/0x150 [ 622.261210][T10435] should_fail_ex+0x467/0x600 [ 622.261247][T10435] should_failslab+0xa8/0x100 [ 622.261273][T10435] kmem_cache_alloc_noprof+0xa4/0x650 [ 622.261306][T10435] ? do_getname+0x2e/0x250 [ 622.261337][T10435] ? do_getname+0x2e/0x250 [ 622.261366][T10435] ? rt_mutex_slowunlock+0x219/0x460 [ 622.261394][T10435] do_getname+0x2e/0x250 [ 622.261423][T10435] ? getname_flags+0x11/0x20 [ 622.261456][T10435] do_sys_openat2+0xcc/0x200 [ 622.261489][T10435] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.261526][T10435] ? ksys_write+0x248/0x270 [ 622.261554][T10435] ? __pfx_ksys_write+0x10/0x10 [ 622.261583][T10435] __x64_sys_openat+0x138/0x170 [ 622.261607][T10435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.261631][T10435] do_syscall_64+0x174/0x580 [ 622.261660][T10435] ? trace_irq_disable+0x3b/0x140 [ 622.261681][T10435] ? clear_bhb_loop+0x40/0x90 [ 622.261709][T10435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.261732][T10435] RIP: 0033:0x7f39bdbbde59 [ 622.261753][T10435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.261771][T10435] RSP: 002b:00007f39bbdf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 622.261795][T10435] RAX: ffffffffffffffda RBX: 00007f39bde46090 RCX: 00007f39bdbbde59 [ 622.261812][T10435] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 622.261827][T10435] RBP: 00007f39bbdf5090 R08: 0000000000000000 R09: 0000000000000000 [ 622.261840][T10435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.261854][T10435] R13: 00007f39bde46128 R14: 00007f39bde46090 R15: 00007ffe6f222538 [ 622.261888][T10435] [ 622.460669][T10436] netlink: 'syz.4.1267': attribute type 7 has an invalid length. [ 623.476417][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 625.833268][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.991937][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.065187][ T5734] usb 4-1: USB disconnect, device number 19 [ 626.596769][T10457] vivid-000: kernel_thread() failed [ 628.967408][T10475] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 628.967677][T10475] overlayfs: missing 'lowerdir' [ 629.280217][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 629.924543][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 629.949537][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 629.949567][ T9] usb 4-1: config 0 has no interface number 0 [ 629.949617][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 629.949646][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 629.961002][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 629.961036][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.961058][ T9] usb 4-1: Product: syz [ 629.961074][ T9] usb 4-1: Manufacturer: syz [ 629.961088][ T9] usb 4-1: SerialNumber: syz [ 629.983346][ T9] usb 4-1: config 0 descriptor?? [ 629.997572][T10470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.997796][T10470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.200393][T10470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.200491][T10470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.210573][T10481] netlink: 'syz.4.1281': attribute type 7 has an invalid length. [ 630.263691][T10483] netlink: 'syz.4.1281': attribute type 7 has an invalid length. [ 630.324091][T10481] netlink: 'syz.4.1281': attribute type 7 has an invalid length. [ 630.403338][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 630.403534][ T9] asix 4-1:0.34: probe with driver asix failed with error -61 [ 630.459179][T10477] warning: `syz.5.1277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 630.938157][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 631.929197][ T5734] usb 4-1: USB disconnect, device number 20 [ 634.803133][T10554] FAULT_INJECTION: forcing a failure. [ 634.803133][T10554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.803174][T10554] CPU: 1 UID: 0 PID: 10554 Comm: syz.5.1307 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 634.803205][T10554] Tainted: [L]=SOFTLOCKUP [ 634.803212][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.803225][T10554] Call Trace: [ 634.803233][T10554] [ 634.803242][T10554] dump_stack_lvl+0xe8/0x150 [ 634.803283][T10554] should_fail_ex+0x467/0x600 [ 634.803328][T10554] _copy_from_iter+0x1d3/0x1660 [ 634.803366][T10554] ? rcu_is_watching+0x15/0xb0 [ 634.803393][T10554] ? trace_kmem_cache_alloc+0x29/0xe0 [ 634.803429][T10554] ? __pfx__copy_from_iter+0x10/0x10 [ 634.803461][T10554] ? __alloc_skb+0x276/0x7a0 [ 634.803491][T10554] ? __alloc_skb+0x276/0x7a0 [ 634.803526][T10554] ? netlink_sendmsg+0x650/0xb40 [ 634.803548][T10554] ? skb_put+0x112/0x210 [ 634.803581][T10554] netlink_sendmsg+0x6c0/0xb40 [ 634.803611][T10554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.803635][T10554] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 634.803665][T10554] ? __kernel_text_address+0xd/0x30 [ 634.803685][T10554] ? unwind_get_return_address+0x4d/0x90 [ 634.803712][T10554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.803733][T10554] sock_sendmsg_nosec+0x13a/0x180 [ 634.803764][T10554] ____sys_sendmsg+0x565/0x870 [ 634.803786][T10554] ? __might_fault+0xaf/0x130 [ 634.803814][T10554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.803845][T10554] ? import_iovec+0x73/0xa0 [ 634.803872][T10554] ___sys_sendmsg+0x2a5/0x360 [ 634.803895][T10554] ? __lock_acquire+0x683/0x2ce0 [ 634.803922][T10554] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.803979][T10554] ? __fget_files+0x2a/0x420 [ 634.804000][T10554] ? __fget_files+0x3a8/0x420 [ 634.804030][T10554] __x64_sys_sendmsg+0x1b7/0x290 [ 634.804053][T10554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.804094][T10554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.804119][T10554] do_syscall_64+0x174/0x580 [ 634.804149][T10554] ? trace_irq_disable+0x3b/0x140 [ 634.804170][T10554] ? clear_bhb_loop+0x40/0x90 [ 634.804197][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.804219][T10554] RIP: 0033:0x7f39bdbbde59 [ 634.804240][T10554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.804256][T10554] RSP: 002b:00007f39bbe16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.804278][T10554] RAX: ffffffffffffffda RBX: 00007f39bde45fa0 RCX: 00007f39bdbbde59 [ 634.804294][T10554] RDX: 000000000004c802 RSI: 0000200000000340 RDI: 0000000000000003 [ 634.804316][T10554] RBP: 00007f39bbe16090 R08: 0000000000000000 R09: 0000000000000000 [ 634.804329][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.804341][T10554] R13: 00007f39bde46038 R14: 00007f39bde45fa0 R15: 00007ffe6f222538 [ 634.804374][T10554] [ 635.651441][T10562] vlan2: entered promiscuous mode [ 635.651466][T10562] syz_tun: entered promiscuous mode [ 635.799050][ T5615] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 635.844494][ T5961] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 636.009090][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 636.028789][ T5961] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 636.028824][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.071014][ T5961] usb 1-1: config 0 descriptor?? [ 636.119543][ T5961] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 636.361774][T10574] FAULT_INJECTION: forcing a failure. [ 636.361774][T10574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.361814][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.4.1315 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 636.361847][T10574] Tainted: [L]=SOFTLOCKUP [ 636.361854][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.361867][T10574] Call Trace: [ 636.361875][T10574] [ 636.361885][T10574] dump_stack_lvl+0xe8/0x150 [ 636.361930][T10574] should_fail_ex+0x467/0x600 [ 636.361968][T10574] _copy_from_iter+0x1d3/0x1660 [ 636.362007][T10574] ? rcu_is_watching+0x15/0xb0 [ 636.362037][T10574] ? trace_kmem_cache_alloc+0x29/0xe0 [ 636.362076][T10574] ? __pfx__copy_from_iter+0x10/0x10 [ 636.362110][T10574] ? __alloc_skb+0x276/0x7a0 [ 636.362140][T10574] ? __alloc_skb+0x276/0x7a0 [ 636.362178][T10574] ? netlink_sendmsg+0x650/0xb40 [ 636.362202][T10574] ? skb_put+0x112/0x210 [ 636.362238][T10574] netlink_sendmsg+0x6c0/0xb40 [ 636.362270][T10574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.362295][T10574] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 636.362328][T10574] ? __kernel_text_address+0xd/0x30 [ 636.362350][T10574] ? unwind_get_return_address+0x4d/0x90 [ 636.362378][T10574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.362400][T10574] sock_sendmsg_nosec+0x13a/0x180 [ 636.362431][T10574] ____sys_sendmsg+0x565/0x870 [ 636.362453][T10574] ? __might_fault+0xaf/0x130 [ 636.362484][T10574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.362516][T10574] ? import_iovec+0x73/0xa0 [ 636.362544][T10574] ___sys_sendmsg+0x2a5/0x360 [ 636.362565][T10574] ? __lock_acquire+0x683/0x2ce0 [ 636.362592][T10574] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.362650][T10574] ? __fget_files+0x2a/0x420 [ 636.362673][T10574] ? __fget_files+0x3a8/0x420 [ 636.362707][T10574] __x64_sys_sendmsg+0x1b7/0x290 [ 636.362741][T10574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.362782][T10574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.362807][T10574] do_syscall_64+0x174/0x580 [ 636.362839][T10574] ? trace_irq_disable+0x3b/0x140 [ 636.362862][T10574] ? clear_bhb_loop+0x40/0x90 [ 636.362889][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.362912][T10574] RIP: 0033:0x7f281968de59 [ 636.362932][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.362952][T10574] RSP: 002b:00007f28178e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.362976][T10574] RAX: ffffffffffffffda RBX: 00007f2819915fa0 RCX: 00007f281968de59 [ 636.362993][T10574] RDX: 0000000000000000 RSI: 0000200000003880 RDI: 0000000000000003 [ 636.363005][T10574] RBP: 00007f28178e6090 R08: 0000000000000000 R09: 0000000000000000 [ 636.363019][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.363031][T10574] R13: 00007f2819916038 R14: 00007f2819915fa0 R15: 00007fff4a809918 [ 636.363065][T10574] [ 637.089009][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 637.161083][ T5961] gspca_vc032x: reg_w err -71 [ 637.161103][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161115][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161125][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161135][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161144][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161155][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161164][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161174][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161184][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161193][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161203][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161212][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161222][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161231][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161240][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161250][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161259][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161269][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.161278][ T5961] gspca_vc032x: Unknown sensor... [ 637.161364][ T5961] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 637.193646][ T5961] usb 1-1: USB disconnect, device number 21 [ 638.216075][ T5615] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 638.366053][ T5615] usb 6-1: Using ep0 maxpacket: 32 [ 638.369298][ T5615] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 638.369328][ T5615] usb 6-1: config 0 has no interface number 0 [ 638.402093][ T5615] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 638.402127][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.402150][ T5615] usb 6-1: Product: syz [ 638.402165][ T5615] usb 6-1: Manufacturer: syz [ 638.402182][ T5615] usb 6-1: SerialNumber: syz [ 638.463375][ T5615] usb 6-1: config 0 descriptor?? [ 639.320145][ T5615] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 639.320180][ T5615] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 639.324203][ T5615] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 639.344719][ T5615] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 639.387324][ T5615] usb 6-1: USB disconnect, device number 15 [ 640.515084][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 642.054483][ T5961] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 642.205615][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 642.209383][ T5961] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 642.209406][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.264907][ T5961] usb 2-1: config 0 descriptor?? [ 642.295102][ T5961] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 642.344487][ T5734] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 644.137722][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 644.154178][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.154204][ T5734] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.191264][ T5734] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 644.191353][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.191377][ T5734] usb 4-1: Product: syz [ 644.191393][ T5734] usb 4-1: Manufacturer: syz [ 644.191408][ T5734] usb 4-1: SerialNumber: syz [ 644.268678][ T5734] usb 4-1: config 0 descriptor?? [ 644.496152][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1345'. [ 644.523385][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1335'. [ 645.838012][T10629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1339'. [ 646.779979][ T5961] gspca_vc032x: reg_w err -110 [ 646.779998][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780010][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780020][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780030][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780040][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780050][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780060][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780070][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780079][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780089][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780099][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780109][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780119][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780128][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780138][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780147][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780157][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780167][ T5961] gspca_vc032x: I2c Bus Busy Wait 00 [ 646.780177][ T5961] gspca_vc032x: Unknown sensor... [ 646.780263][ T5961] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 647.223104][ T9] usb 2-1: USB disconnect, device number 29 [ 647.672725][ T5615] usb 4-1: USB disconnect, device number 22 [ 648.775240][T10666] netlink: 'syz.0.1352': attribute type 7 has an invalid length. [ 648.827104][T10670] netlink: 'syz.0.1352': attribute type 7 has an invalid length. [ 648.879110][T10675] netlink: 'syz.0.1352': attribute type 7 has an invalid length. [ 648.982118][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1355'. [ 649.404381][ T5615] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 651.390092][T10691] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 651.390319][T10691] overlayfs: missing 'lowerdir' [ 651.884105][ T5961] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 651.971556][ T821] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 652.164549][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 652.194474][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 652.196960][ T821] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 652.196992][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.248196][ T821] usb 4-1: config 0 descriptor?? [ 652.307697][ T821] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 652.403111][ T5961] usb 6-1: device descriptor read/all, error -71 [ 652.534382][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 653.716005][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 653.734865][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.734895][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 653.783295][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 653.783329][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.783352][ T9] usb 1-1: Product: syz [ 653.783368][ T9] usb 1-1: Manufacturer: syz [ 653.783383][ T9] usb 1-1: SerialNumber: syz [ 653.938498][ T9] usb 1-1: config 0 descriptor?? [ 654.308533][ T821] gspca_vc032x: reg_w err -110 [ 654.308554][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308565][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308573][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308582][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308591][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308600][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308610][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308674][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308721][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308774][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308826][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308877][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308928][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.308980][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.309030][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.309082][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.309132][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.309188][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.309240][ T821] gspca_vc032x: Unknown sensor... [ 654.309966][ T821] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 654.504505][T10705] 9p: Bad value for 'wfdno' [ 654.553868][T10696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1361'. [ 654.596024][ T8501] usb 4-1: USB disconnect, device number 24 [ 656.082582][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 656.104517][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1364'. [ 656.224994][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 656.242323][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 656.242367][ T9] usb 2-1: config 0 has no interface number 0 [ 656.242417][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 656.242444][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 656.258717][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 656.258767][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.258790][ T9] usb 2-1: Product: syz [ 656.258830][ T9] usb 2-1: Manufacturer: syz [ 656.258883][ T9] usb 2-1: SerialNumber: syz [ 656.336018][ T8501] usb 1-1: USB disconnect, device number 22 [ 656.375463][ T9] usb 2-1: config 0 descriptor?? [ 656.376615][T10724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 656.376798][T10724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 656.581704][T10724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 656.581886][T10724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 656.785602][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 656.785883][ T9] asix 2-1:0.34: probe with driver asix failed with error -61 [ 657.034454][ T821] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 657.400677][ T36] kauditd_printk_skb: 163 callbacks suppressed [ 657.400697][ T36] audit: type=1326 audit(1783335556.323:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10736 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65173ade59 code=0x0 [ 657.742232][ T5961] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 658.249868][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 658.537235][ T5961] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 658.537338][ T5961] usb 6-1: config 0 has no interface number 0 [ 658.537394][ T5961] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 658.537427][ T5961] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 658.582241][ T5961] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 658.582354][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.582379][ T5961] usb 6-1: Product: syz [ 658.582395][ T5961] usb 6-1: Manufacturer: syz [ 658.582411][ T5961] usb 6-1: SerialNumber: syz [ 658.657832][ T5961] usb 6-1: config 0 descriptor?? [ 658.660726][T10741] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 658.661177][T10741] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 658.854426][ T9] usb 2-1: USB disconnect, device number 30 [ 658.880581][T10741] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 658.881055][T10741] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 659.084784][ T5961] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 659.085066][ T5961] asix 6-1:0.34: probe with driver asix failed with error -61 [ 660.393725][T10764] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 660.393861][T10764] overlayfs: missing 'lowerdir' [ 660.905067][ T8501] usb 6-1: USB disconnect, device number 18 [ 660.906243][ T4982] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 661.229603][ T4982] usb 5-1: Using ep0 maxpacket: 32 [ 662.414694][ T4982] usb 5-1: unable to read config index 0 descriptor/all [ 662.414744][ T4982] usb 5-1: can't read configurations, error -71 [ 662.557379][T10780] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 662.557766][T10780] overlayfs: missing 'lowerdir' [ 664.049766][ T5961] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 664.584522][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 664.586542][ T5961] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 664.586571][ T5961] usb 2-1: config 0 has no interface number 0 [ 664.586616][ T5961] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 664.586646][ T5961] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 664.589373][ T5961] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 664.589403][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.589423][ T5961] usb 2-1: Product: syz [ 664.589437][ T5961] usb 2-1: Manufacturer: syz [ 664.589457][ T5961] usb 2-1: SerialNumber: syz [ 664.670786][ T4982] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 664.685327][ T5961] usb 2-1: config 0 descriptor?? [ 664.687172][T10790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.687311][T10790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.900456][T10790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.900670][T10790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 665.116120][ T5961] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 665.116413][ T5961] asix 2-1:0.34: probe with driver asix failed with error -61 [ 665.153412][T10806] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 665.153542][T10806] overlayfs: missing 'lowerdir' [ 666.820132][ T8501] usb 2-1: USB disconnect, device number 31 [ 668.758884][T10844] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 668.758981][T10844] overlayfs: missing 'lowerdir' [ 669.570831][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1405'. [ 670.911520][ T9715] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 671.148862][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'. [ 671.251823][T10860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.028010][T10894] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 676.028110][T10894] overlayfs: missing 'lowerdir' [ 678.751220][T10898] erspan0: entered promiscuous mode [ 678.752420][T10898] veth0_to_team: entered promiscuous mode [ 679.337607][T10916] binder: BINDER_SET_CONTEXT_MGR already set [ 679.337623][T10916] binder: 10915:10916 ioctl 4018620d 200000004a80 returned -16 [ 679.574889][ T6278] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 681.092276][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 681.354762][ T6278] ================================================================== [ 681.354775][ T6278] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 681.354809][ T6278] Read of size 8 at addr ffffc90006b81008 by task kworker/1:8/6278 [ 681.354825][ T6278] [ 681.354837][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 681.354860][ T6278] Tainted: [L]=SOFTLOCKUP [ 681.354866][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.354877][ T6278] Workqueue: usb_hub_wq hub_event [ 681.354915][ T6278] Call Trace: [ 681.354921][ T6278] [ 681.354927][ T6278] dump_stack_lvl+0xe8/0x150 [ 681.354953][ T6278] print_address_description+0x55/0x1e0 [ 681.354977][ T6278] ? __list_add_valid_or_report+0x4e/0x130 [ 681.354999][ T6278] print_report+0x58/0x70 [ 681.355040][ T6278] kasan_report+0x117/0x150 [ 681.355058][ T6278] ? __list_add_valid_or_report+0x4e/0x130 [ 681.355086][ T6278] __list_add_valid_or_report+0x4e/0x130 [ 681.355111][ T6278] kcov_remote_stop+0x457/0x680 [ 681.355139][ T6278] hub_event+0x4789/0x4cf0 [ 681.355166][ T6278] ? __lock_acquire+0x683/0x2ce0 [ 681.355183][ T6278] ? register_lock_class+0x31/0x2e0 [ 681.355209][ T6278] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 681.355233][ T6278] ? __pfx_hub_event+0x10/0x10 [ 681.355257][ T6278] ? process_scheduled_works+0xa20/0x14e0 [ 681.355278][ T6278] ? rcu_is_watching+0x15/0xb0 [ 681.355299][ T6278] ? process_scheduled_works+0xa20/0x14e0 [ 681.355322][ T6278] process_scheduled_works+0xa8e/0x14e0 [ 681.355351][ T6278] ? __pfx_process_scheduled_works+0x10/0x10 [ 681.355405][ T6278] ? assign_work+0x3cf/0x5d0 [ 681.355435][ T6278] worker_thread+0xa47/0xfb0 [ 681.355459][ T6278] ? __kthread_parkme+0x71/0x1f0 [ 681.355484][ T6278] kthread+0x388/0x470 [ 681.355506][ T6278] ? __pfx_worker_thread+0x10/0x10 [ 681.355524][ T6278] ? __pfx_kthread+0x10/0x10 [ 681.355546][ T6278] ret_from_fork+0x514/0xb70 [ 681.355571][ T6278] ? __pfx_ret_from_fork+0x10/0x10 [ 681.355594][ T6278] ? __switch_to+0xc89/0x1420 [ 681.355615][ T6278] ? __pfx_kthread+0x10/0x10 [ 681.355637][ T6278] ret_from_fork_asm+0x1a/0x30 [ 681.355659][ T6278] [ 681.355681][ T6278] [ 681.355687][ T6278] The buggy address belongs to a vmalloc virtual mapping [ 681.355710][ T6278] Memory state around the buggy address: [ 681.355719][ T6278] ffffc90006b80f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 681.355729][ T6278] ffffc90006b80f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 681.355740][ T6278] >ffffc90006b81000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 681.355750][ T6278] ^ [ 681.355758][ T6278] ffffc90006b81080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 681.355768][ T6278] ffffc90006b81100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 681.355776][ T6278] ================================================================== [ 681.355797][ T6278] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 681.355811][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 681.355835][ T6278] Tainted: [L]=SOFTLOCKUP [ 681.355840][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.355850][ T6278] Workqueue: usb_hub_wq hub_event [ 681.355873][ T6278] Call Trace: [ 681.355879][ T6278] [ 681.355885][ T6278] vpanic+0x56c/0xa60 [ 681.355899][ T6278] ? rcu_is_watching+0x15/0xb0 [ 681.355918][ T6278] ? __pfx_vpanic+0x10/0x10 [ 681.355937][ T6278] panic+0xc5/0xd0 [ 681.355951][ T6278] ? __pfx_panic+0x10/0x10 [ 681.355965][ T6278] ? __list_add_valid_or_report+0x4e/0x130 [ 681.355993][ T6278] ? __list_add_valid_or_report+0x4e/0x130 [ 681.356016][ T6278] check_panic_on_warn+0x89/0xb0 [ 681.356041][ T6278] ? __list_add_valid_or_report+0x4e/0x130 [ 681.356064][ T6278] end_report+0x73/0x170 [ 681.356080][ T6278] ? __list_add_valid_or_report+0x4e/0x130 [ 681.356103][ T6278] kasan_report+0x128/0x150 [ 681.356121][ T6278] ? __list_add_valid_or_report+0x4e/0x130 [ 681.356147][ T6278] __list_add_valid_or_report+0x4e/0x130 [ 681.356176][ T6278] kcov_remote_stop+0x457/0x680 [ 681.356201][ T6278] hub_event+0x4789/0x4cf0 [ 681.356227][ T6278] ? __lock_acquire+0x683/0x2ce0 [ 681.356244][ T6278] ? register_lock_class+0x31/0x2e0 [ 681.356269][ T6278] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 681.356292][ T6278] ? __pfx_hub_event+0x10/0x10 [ 681.356321][ T6278] ? process_scheduled_works+0xa20/0x14e0 [ 681.356341][ T6278] ? rcu_is_watching+0x15/0xb0 [ 681.356360][ T6278] ? process_scheduled_works+0xa20/0x14e0 [ 681.356377][ T6278] process_scheduled_works+0xa8e/0x14e0 [ 681.356406][ T6278] ? __pfx_process_scheduled_works+0x10/0x10 [ 681.356426][ T6278] ? assign_work+0x3cf/0x5d0 [ 681.356445][ T6278] worker_thread+0xa47/0xfb0 [ 681.356469][ T6278] ? __kthread_parkme+0x71/0x1f0 [ 681.356492][ T6278] kthread+0x388/0x470 [ 681.356515][ T6278] ? __pfx_worker_thread+0x10/0x10 [ 681.356532][ T6278] ? __pfx_kthread+0x10/0x10 [ 681.356555][ T6278] ret_from_fork+0x514/0xb70 [ 681.356578][ T6278] ? __pfx_ret_from_fork+0x10/0x10 [ 681.356601][ T6278] ? __switch_to+0xc89/0x1420 [ 681.356622][ T6278] ? __pfx_kthread+0x10/0x10 [ 681.356644][ T6278] ret_from_fork_asm+0x1a/0x30 [ 681.356666][ T6278] [ 681.356853][ T6278] Kernel Offset: disabled