last executing test programs: 5m34.60257037s ago: executing program 4 (id=402): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010b0144c47000000000001090224000100003004090400000203000000092177000201222900090581039dcb030386"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x126, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x2b, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, 0x0) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000"], 0x0) syz_usb_control_io(r7, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x8, 0xf7, {0xf7, 0x21, "f9b1f4cbaf8f252010aefda1772e1e8a626f886533f6f5178c6d39530ea4173485b0ae044f0d21a0bfe540802b58611a2b669d18bb19b8dc1c2bd1b60f078a8fe549710069191b34f4c367486b86ae3a3fd4ad1fd7b21f40ed705f8c41e1a134c000cad08d5b2e290ba41b060e590da0c67f33c6d927016bd317cfa210b340ed37121c22c158fdb21cc7d81c93c7d0e27881ff99ad5d32163d82fa383f8764edba497e9a64f5d8eca334c82a77edb9bb9aaffaa6e07702bf4bbdd04dc6d0262ec1ff1f22bc30fb866cec539d3dd4e62cf7a5700b52130e51adb79492c79275b70034cfb9eb217841c7f48fdef078de451fcc696d8f"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f0000000340)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xa1, 0x0, 0x9, 0xf00f, 0x100}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xf, 0x100}, @wireless={0xb, 0x10, 0x1, 0x1024161558b971dd, 0x80, 0x4, 0x3, 0x2, 0x18}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x1c, 0xbb, "96213311", "414c3015"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x7, 0x40, 0x2e, 0x9, 0x40}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0xd, 0x99, "3f4f5527f26eabb53d92c9c20e801999cc45dc258df6902b6ce3545c42e0efddeec2e79b75dbfca5df7112031f8f5339a19435d1a0018aefdcf9a2f949f172ceec19345b54b803ff9f082b48235362684e4b25fe424726ac6159416da136538094104edc877c68d91cc5272fd3056f98b3b048af9882076eb760c3ead5e7db84a55135f0110e8ac2a8075a882bfd2d1c4ba8b428b369b22743"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2a}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="20000800000004000100f0000000272f5bf9131baa9ebf3c89802e5fe8531c25c6b6a213c9618865c2a38026f790b80587cd2f7e46ebc7ecd1f43594470f9d6b2b9b719b4dcff5ea90d9113c885d70f4d2483beb5e1c5b8a717ee41ce464d15fcb7864b8b7b9f130ca00"/115], &(0x7f0000000640)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x9, 0x1}, &(0x7f00000006c0)={0x40, 0xb, 0x2}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x13, 0x6, @random="bcee72f56c1a"}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "681a"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x9d4}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x2}}) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) 5m31.943146011s ago: executing program 4 (id=414): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m31.610777986s ago: executing program 4 (id=416): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 5m30.563486867s ago: executing program 4 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000010000008500000050000000b7080000000000007baaf8ff00000000b5080000000039b479bbcb52ca16f8c852ee43073400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb77307e6f00000080000001823000064a1c25d7997cc00f8817377eb63a7051bb0b04da5712183a17d7373ee8f2f5135dfc6c30aaae8a1757161eb60ca84d82c277c", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getxattr(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)=@known='user.incfs.metadata\x00', &(0x7f0000000400)=""/100, 0x64) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x5, 0x1, 0x80}, {0x20, 0x3, 0x0, 0x4}, {0x6, 0x8, 0xfc, 0x909f}]}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000180), 0x40, 0x0) syz_usb_connect$uac2(0x0, 0x8b, &(0x7f0000000700)=ANY=[@ANYBLOB="120150020000000835121382400001020301090279000301022368d1a52890a8f3091004080b0101010220090904000000010120000924010e00080900020904010000010220000904010101010220001024010f0602000000006a0100000007090501090024064000082501800f0500010220000904060000000220000905820900020703e20825018233f0ff07000000000000"], &(0x7f00000007c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x80, 0x8, 0xf0, 0x8, 0x9}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5m27.468150234s ago: executing program 4 (id=435): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24084000}, 0x80) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x41) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "24445520f4b67291", "a10410dba09dd57e9d03d8a6a2f3563e42411745dac4c0df2007f82675e8610e", "47252ce1", "56cf3812ffba8faf"}, 0x38) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r1, &(0x7f0000004100)="a95ee66af223165fb85c7a063307d28ba66dd294927c55081f5012d8223e0c009905bba59fcad5c499ccbc3ecf96e9d6ab31713938d657bc1cdd65b0a8c5fbba04f0e4926fc32fede46dcf41865bc66b2b1b353824177c6ad6f47ead9c18951b761a2bf0f17b779c4ade8a3100cdb3f4925ce68a944881cad07ce81e6d4ffd31847a0453b3ce672102b33f5c46bab37c7fb678ba1908052334b225eea595ea982901991c169eb4e0fc23b2a45018e1544c308724adc81d1d22c012fe67aebc0d3157170f2a5eb586f9af8bd80fae3bc2e9bbd9b51a9c32fbc467e2b0a0a840b765938728ba3f6902046443434e9c8a539dbce61dd8fb0e6813208877ac1fc45e9fa75ea6c5e7dc23acf9bf14523cc47de600ab3807ae8162eda1c66cf41d61386817d1483e63591002fabca6c9c1b5201974ea2b404dd54d80e24beadcc9048059c4cb26225eb2ade9e189a1ff40fa7cbb917aab58dcda7cf32bf8ac69a4faaf3a67e06e8736f92700608e1bc38d092a18d914881fd0a17e65d465f0c3cbeb987ae1fda981203d792fe5708993cdf5648f94cf23024caa3fc99d7fe6a6a434d5dab60192987ec3f55bedb08c40078e2f5e1c9e0b033f48ee56d00336f997c17a2f976d57193ec8b3132e8ee249c3dcba95e737127c7e2cd8cd6eea30688d627637e82c27b26110c0c61631d0fe0eb8c600023e8e4f0fe495a8666baa4e3cf9de28e4d95d7b7edea0d8f1b19fcff477164bf6abb3d28485398e02dc4b003de2046aa16a808c077f59a35c0ee44d5e6958b57b60b5fe2980cb0f870395c904e735f7c726d48de3bc2b558bce111f913cbdc65e9a6fdd51f0cb6079a4e6048c61a4dba2fc6cce6e3b93d86e312bb43c30a01c0cfc72ebdc3e18781238b159d08ea32fd37fb352f5943b4a22133586ada296c9ec1a3580d9dd59569496194e8f87f95474263ee6313a8eac98de06426c0f5ff00fee25a915e899e9d99b4ca4d52204498a0c8f877adb92cce1010403ad8c53d6162202a09a099930fc4dfb3246f46134993aeae1e49f2e8b0ccb30ea1b09e12dafa24530b8844473ec04d666e8a7e1c89a1f552d04efe1b85a0bbcc33091460faf098625999c0061eaef184e8b02a96e6206d512870a7fe819dbebf93c00ccbf4357841dbe0343c0850cae8d8d15cfeb3da41bf5682c842f53ca5131545784f1dee5ffcf9b4ccf4cdd037a31e4efdb6524056057ba749cc4208df722c80948a486da031a50d129349fda2549157499b8ee553bd545ec411334b902720ef0a71819ffbf002742151d950df0fe8b2efb5a94133d943286c73adf359659480c438bcf1f7f1bc1ad2dbaa54548aa3d1b4ac7d17e755ca23de9f978f45edaaeff3ade5d122c6029f8406732d1c5cfef450635d3bfa323dd14397fa085e1c928ab84f604bd3c378b2368cb0bf371d41ff1e4982e413bc3f3aedf32237845def41805fe66a5239475f246b1bc91045384aac0dd7c0723c5ed4cb02ff0cd39db2b469790a57582543e5fd8edd24944795cb237b5ec6b09e62e7ec95af1560bbd455416d22accf42ad9fdd5eb9afe198e2a327f69ca3b617eae3c24c0fd7dd36fa9fb3bd111d8d7e5dcf3039fa06b8e3405cc73e90f07660b9aa9748643832784b36d2a1418a453645610fcc816c983065a44e86f3fed8ca3bd5397a1eba72c813a49f45af504f18e85fde740dfc63922baece7e5873beded5755869bebd1f984dade3856c34369529bbab5fc32294d2f68512f0d5d116521f56443637b67587372850ff34f093f7c00376bcd15b9d470502200f81d42a46e711ad001aa1135dee47ee2f38754ea50ac8c98b9cd6f1c1a00f862900af52d9e7007be27b3c095b2e0d880d6ff7fa8bece867dac7deb0080d08d7b31cb905666f36cebe4b8033460823ddfe658319bc26a72f1b55fc8bcf364271cb1f280f9f81abab630f656c1491f70412f735061fa1aaf9d0eb016cc5e7152699ed8e7ea5ff05cdb1c7b8c65ca35d18cb7409425240ede6afa92f211b59a825968b83499bc91db40509367fad75ede35c6553ebd28ef8c9f75a566d8107116af185f555cab0322c108ced7e8012c03916ebf8b563dbe818a2576111a0ff9749627acfe19ae3fdccdeab6349b5c1f106a490c1d128d640a81d8706b66e3a16ee0a4068d9e7102c7724a03ab121d7c93adcf179c5e661b9fd47546f2bc73f92e45b372fdb08d8e958610ad2c4acb1a3ad7bfa236565796b16ef1f9799084f7e60d5396a3a286d207051d325eb5282b54837fef08c7e28a5c38f7d72ad8535166d60e2893f58f704aa5152ea4a6b00b6a26825715156eea616c72c1fbaa46f3df4ebe3696164e47cade8edce9f1f7a509e30f135b3b29bfc849ad66bf05c17d6c8679234a7a53a3d8385c509eaf5709b1558434ad5f73b966c6db4eacf52509de480002b6bc6b65134d9cf378d5820bade7c0f0373b389e06c162745c0cedcea0eda0762697f0e73307cda99d95cd7d2388afcbff6370bf3ca5e3b3393bf5a00780a93699c0cfe0fbac6d809ceca12d95c8d5a9f71c236eea0851113ccecd0a6479350b0589b5bba13bbf4640779751328509f7db504c474392b83afb5bb31d4a4835d108584bbbd914e95851ec020a07d95d5dd51fa2bd3dd51bd706cf054a2b4ca0c2937639fc5a5ee3090d08bcd2335a5e6213e4a11c080373854bbfa7a96efa317884b38675a9891f3256ad8a1f74b64e3dde55e4d5c4775b7adc6ac284203aaf9f6ac12f95aaac02b09b2088ff5d53dfaabf0ce4c6958e97250c91147e266247042da5792e7097bc3210f514954b0dbb5163b1d71a0322fdb2c0d747d4754bc0a7da972b9579233ceed92741bf5b582e349b4aa5ce522d9abfba532f50d68b41e365bcf54b008c384bae1099d4d6ced5e7f4c1b05c7f7151d459ad5eb7dcad282b05a31f4530f2d628f93efad19bd239c06143483646c7b1d1614f700be8593108108a8f28152d48ecd6577bc387935552e396bc563db28454bf358d71eaabe0ebfb46226a3088d8c7ea244b99f8fa643d20fa92d9d0cfa4d6c58002eb18e6cc5c13a07237a218b09fcf16dae2812e9d68cedb4a37e49a8298c3dba5712cc84cf1df6427ecdbe2a9ba2f05951608a02ab7674c4c8bcea2832c89ee71efd66b7b72a04e7d2e6caabc3bccbd9d7ea5a8b95c1a9b8fdb9be258b8dd57e9f4e409445267b2f8a1f991ffe7a4b77c50b8845f1be30356f3de2789fcf49ba4ad46d47b78aeefee7e06ae7d386f115ce0a55bc0ee42d9765c12dcdbe540d41a781dd6d08ca45f27c4a91c65c9a9dbb90b9f9c9e60663e41260792663235e70d9bbe3c485f57522b7c3d13704f662fcc94949825316b814acccef8e18128ccf8834330caee12b376b802aa32214160622339c055d8071eb50c7281991495b72eaf132d0669c7d6b534149016e54d5cd2347121dea8ac60e7b5ca5a53acfb8233242ab6ffa6c01997244ccef3d485c6e5ac4b8a252210822265c1f6b9af893550c163a962bd2ea149a6e9b1ab913446c1a54934ce8f56426a8531df2f07fa73670b78d6213d10a0113864bb15af6568765dab324722a74c87bd18550bdb51663c9d8b6724c9dd1299019fe1d8241c7c9a0200257f3a8593b6830c9ed38ac983908242ec5fed94bc07e6f3cf0fecda556a6685d828343d7b7a2ae6a7ce25a1f0af2e565f4479f791d3bb4944803f5a76a768f3ec71e4aafd217da9d8d32aa2967fa320d67c8aed60cc4b5806439092c1a0cf511918beb0c30ff62a547f8bcea0183ed162ec5a7b2764e5ff49aa93539089ca814cee68ad100dfbfcc5617735be68bb8ea22aee333c88fde3124729047646bab77f08e33c7c70d4d6d023b3091337d0582c75206933ed52ed99bda3d4d5cf48bcc8e683b7c17a19768e8770123731d98c1691e22fc97a0c9ee27eff1ed455e839163ef0195ad8f6d3e653d88b0adaa325f8232787cf38629fc1103ae1e77d453db51f8c16299d68a3230e61138e6c716d7c981f8803c2222ec9d99f476701352bfb497a892398a3c84c87ec43c3494e70c92b8fe6351d73bbe68f73dd1d4168b3b67a277c4e85b2e2d34075dbfe23ed3d6f6520d4987b282c2710423cff7624fee0c5bf6364bcdf2734eb8465ad3abea522a5bc1dd787b812901e286788abb7db6fc25398bd4d6b78657bdf7a602b4706caac46bad88c4a0f6c15c8a60252fc53b3d496707e0857f5c5946ff5fcfa89eb816e1b96b335727f09f164136b367191ad047c3f1f3f5fd487ae535b0284e276c232ad5a6df68eaa8c74d5cde46ba3fb6abf3d42177e4466f18f7a8251f9809e39bcfe0ab07e24c4c7bbd99f70b7252d4a1a34a9aa34fa595871996f31a8e1eea0734e2e60d0871a4eb443a7d434b5a53c0bee62f388f4025ed1d413ae737a0b4d39591b9a5cfc5edefbed55ba21f480b7ecd2db6df235c9c6c2e0da1abacccfd8805839164f2493baf75df275012413bca9ebb38a1c88c600b1dac6cc82b9115ecd597b6b4ab0ae3720c6d9cf13bf96cd56e33898026e60e1b6bf1917b602171fe8bae56c7896aff9a5d65522c91f3478af5643dc563523e397b85f26a573d2d03ec2f63dc9615d3956273196cb4ca3033f1fdea6a95fc6fe95c0042caa07d37e0880a3a3053ea87f1a02e3e4cc062f642adfbd6769f2540c04a99335a0fa452559f27acb146257ae1b93f1c80cb000a71cf87b7a8555f4e77ac4ecd6411051a26b846796fd229417fc456e3e7a64a9d5232b0fa9794616a2bfc67ad9aec0cc361f3bb7dcff27d6815defa96896ad904a3d53b4f39030e3b2b786f82f5d46eda4de74a214d092f7d900a3c8575ff781ee659681d77ff348a21c0bec5ee66fa1abdc32ee75ad4a51a0a0f942c801aeb55ad9567d140e13fc3524648a231d8389c25d3c18550cbd54ef5493dc5a7f6ab8924765086a1e5b69ef6e80d5790f078e999883efbf04825c3326d3b7d54aa453988fa226b31cf19549bebbd46b54716e48c05df7655fbcefe426fd48b0e4867795d1a03df00e7da4245e95630f2cd3d1dbaae5b74ab2795f6ad5ababe632f4ae1abbc97182220a28eb1d108feb52f8326ec2b3abb0ed045fe64b8e302348d3bd561eaaa3a7f6d1aa426a5848f320f026db837d98063724d38a778cabe67caa2b8b7462523620661965fbdf41a2e835e64d484804321754f79e8b56f7af558a9007d8871fd60e2aeb697270d470394e97f43c93f6515e9941fce5c3e020148cabac9a3f257769afa92374b3a8b5420dfbeeb3f4f1d9106cf1f822791fab189d3a769438aa0b8ad58316d02eae97264e4238ea807c578fb215614d60f6d69d23c438854b0e0b47cb820e0deca03a8f5b0221f10b0e7164ca28b60f978ae82beb3fc52bf8f5f9d4bf9ea5a44014ffb3fba5604fb70db687bd7649fbb4b72d2e604b8031eec10d7fd55cf62234d1515905c4ecdcb2073ae480437e134fa65b37f5fc718ea1595510b302f5a750bada2b1b51c5d6c14da8e69f51c5454d3c15f94f5551ba41e402f98c31d8340bc24ce0c2d0857eee2e6699781434f9eca84e52e9dc0345c4c289880c3c7162772d39bfa62cfb8b401e1cf9a241e7afe1ae4fd5e224bb1f4c3c7098753b01c35f9c8fe1e0c3cbe7521b259e403006121e1c3f62d357394267e78209f31fa87e1aa87cf1054119ea364d7b9e82ae84b998860d8fa73da7cf6c58fb4bd754316c39bfdc453fcea16b73c1bc56996b22074fb4a1e944b6dc786e1f1d8460004c1b9abba76cb5ad9c02444d01b628aef339809a93696b8eedc658222b11f0ade5cad02ec734bdfae30421adc690dc0882cada0a1cf5ad9d538f0366232c7aca013ae8bafacda63dbdcf8507b911009829f2ef019e60a2b1236614b25c258ac4b05aa85d69e8cb2bff36728b967b58f70683e0f1f4408edc8c4fef715170c163324489d8fa4684579fb6f175af8ee8f387ff939b750c7dfd4ba62fe715eea3e5ac3ff7d5cf3ffcbea739b85374956b00b38d6f4519390d6b382d3a883c8bb7a62ce654c005744921a082479affd60092aaff76cafe07820c1aa10a0d5ba589eb21f48e09bf5c279c7a3ac6bdb7958cd439f54d5ad369f0eb68e090eb2a6cffbce0d5af05f7afe5336ad069482f8a765823c63a45d345a72b42d5ad50d8d73a3e7f22e717c1e2aca4786d43b0b1dd2651fa46c0a6cceaf8f57f2f132cf49112ea156f6a159978f8cf8e5e9d74caee5530d999c4d0e6e50d6c69b5c57edb78b0a63d6a06eeb499060300da73ca39199cd4bf6412d58bc9344b5cedf7800b6cd84f193a55314bfa047bb93f562955d1b4407781ebe40fef42f6e5401046866391dd9ad8b96dc6915d43d40df4d7ceb43f682afa7c0cce1f944d79e81eba4c01c64334bf50bb26db0992e9265ba022b49fec9f188ea213ee504d666544d0230b1272f5222db08aa5347e985abf2607fee7719a03a3dedea280e2bcc77737562cd18d979992dc3bb32dbcd3bbfbb5896b9d06cffef2ee68cb071e76d2b7ec5123a91fd73e6fb737d887c016782328ee5a85bff817a8f5a769205373e5c63ffb883158be34059deb0bb99960f3f0cf838efd35f265240cfede2ed447fd7ebaf92befa24c74546c3c9b93aa6ead03c7350327a3e0bd049a582028f3ca59fc9fdc2ac7819f8f92da0a48c4184f7d9abd10e7745a1af4457127f997580bbda67a56cf9bb67b5f3ce6b2b62dffc56b47c95886fcbbcf89da58ce694281a9e8bf50fd5878efc3d357e6f4994a9483ec74b536a5f8ccc714b045fcb5b896e1d998ac11e418d23028f088e99845ef0458dbf45f0bfe9a7188bda3bc07a27f25c741d414aae493b191d8721ddb60281c741bebccc12c841b07dfab15481f65e90d4337414112c9ec23bff763b1eca8a1bd6cb6c252b6531e4e096dbebae5a16120867ece7746a7b487216851ce059a8e3aa37dd4885c6b4e0b8ed807dcf62279f1de1b3b834add0ba26a1bbce31199a5b145ae456f84136887ba27b2e3c6d57f1cfedc9e7042a6c5c8d5c67c04c4a0610d09ae7c037cc1c75f355fc5033e434762aa8f4f23d28ac98409deea20c826b7a9317168ab0075503f3022ccbf2296b58bea2242082d3925d6788ef2d56c435b1db3f96a992d3854d5a9e2af29e5a7817b6c7f210ef511071c46fc3f013171d53703ed7ec6258f531c0d00782c8e2b30149e6157f0e898732bf683341a4a768c199f0f8953120e8d2e9ea791b228da103a2f67ec920560436bc306861fdb098c45ae66ebe12db1e27bc5d2e5b4fe530de58e90c2d5c4ab764cfe9312f2397dfb20468d7db6e9e0aa5765ff0bd2b1c1620671f9a9a516f405e0e8ca8c3498cadd75a76786d88a1adcfd91d2e7c302876b5c9d97d2ee8e5b51d73ff20039a3dd4ea244ec37242f3bbe6ebd7c2f9c583885274c0537ae5b3af6cdfd216a7e9c9f3638322e1d4c58c5f0ee9107bd19f50f2435642a9c584d4de9a4ac6cbe5f699144b9521f2669ab0df72a70d1af1ac9369c58bc8f23311bccc7e7b0b32b744135241c397d6796690f064c8e6df5d7593c2e7bb159bd1a7da0ee9002c0b7a52b549777def7e854acb8224d83c4ec769bf45e4c699c680243d6e2e4149341db46acc685f0650de45fcd75f4b0bfbb3eb5bce224f2c04a03b35edad303af6a2ba403abe9daed9bc170363333efbb9ab4725e453df55b3861499a7283c983db6cfacd367df13dbad52a31fce48bfd13ab9982d821ace9a998a2763d9bf4f484d46ca345d81360ea8841adaa5b45feace5db05fed42113647dcbe3c3dfd70f4b3537e77228a5218d9419a94685a504fe61a1169115536eb2682a63675a0a4debcfb29ac169e4a999206bb6d4a4cc5e508534e9ad4295f08f681071d5cdf0edd674ba2a43a60739929ff3e22cfd4675b669b78998cfac88a0392033930f2b788dbdfe11e560ec1a04be8fcde01fb3cf80d93ce1df819a21ff158dd18e9bdc759a59b9f7111245d336963a97ac8bc7c4bc2682c8273204117402f666e9bbf1f0c0edb08bf3e51270876f92067ae8d37bdbf857d4174a4a32de8459e4612ab723d5e52bfe77e44d7faf4b70d7c8102a5b3503460b0865e5ded0c0366d9dbfeb111deeb425c8878798cad64a84f2036dd9a883277a89d368d636ae34b7f9a8ee57f1e563d72645629ec94d5e763b29dfe2e2fcf699eee4224ec6a3881f892e4f3139962b7f8c397dda473c820761f82df111ee571df65e01b697287cbd8d1496cc98f462828cf22fcc14bfa4cedf934920892fac405290ab3ee7eedae9af2a1eb0f45309eec1cafec9d5f9fe10212417e89182cd22474a8b8972520b79728c8b712ee96a809b31a0c08bab2285fcff6d8b8f638f5550cea169055163017e5c3ff238fd5ba7e460b06ca7dd11fcb37829e6c71a29df07a53ecf8a041081977da88a21074dee4cf64132868a3d7c32e4efa49a71d98a4be181b681f22152bbdca36b377baf0c90f8cbf2c32f8dac624e7fa650d3aa974aba48d29b7d352557f5b2d8054c86d36363c00497a6e467ebe863890c6344a8151ca09a0012e8d0f904acba4edcc92d16e021dd24f0d58504152c62ddd21904a039222673e9b3c0a255ecb2c67d919cf50abeeb3ed8d52618d31242b274f96057ae05944ae0a367aeb6a29455c1171f69f7b138d20197216e552f1c11956a9a031539b032ff5d666b2b7203b8441d8e8c2bf325aadd08e01d3eebdcf663d318c3302130299b1cf852edec4300498ed3fc57073309f83490ffc5d2f65cf087f47790e950a6c810a50cdef1b6a4c62c0f40f3bf438d1ad1f0a04a4c28645de82c6fe6174147145ccc180e5989fd5368ea9c90b5b74cbb8acdde83a05f91b943d73f950940f4ba967767533e4093015f9e7c5c2bcf422e83af0d2b718dd15c219e1dad959f88f18b4592a20c396e3862bc8d629b50e670eab0e12460e1bd94e8d192fbbef19d5b5e7244ef274a5192f8e28b28d1ecfdbe6da5c4102f9535edf71a6f5de0f59a7290cecf062a0328154b1fa5ba4dcee2a856de908d9984914c5a05038b4678dc5b202150be8768b33d15f7d380f080ecb406be5e991d83f10f6113ec8ee18a4d269a96f4b30b84d059e6600af3fd36f0cd6afc8b9c0d7673ac8ae164a796ee21e4e1e4ba1d75c64a65de49bf755abe4aa4d832ca23c7833972e8735acb7d31969993437d2cbb7b12cfde845e0fa7a3ec6a9959cb859ae8ec8da9b9b93dfaba08b0bc092a1e75d95ded612837ef01b11d05b649ef903a065bbde06643bb2bb6d352b01b2db6b693941e4a6d955fe01c29c56dbd298146a6ab48c2ad9d0e191c4307c3a68c858f975d6da078c95eee82212b07c1c0c496771dfc29429cd3fb6d6932e3c49b77e834e1bcc15a7e2f62779c7eda7cb7339037676dbd603b46554de1ca7950e33d48e7615a7971e525696b69b1e024377d20653bcd41b530f6a764699f75a9134b4be30082ab571eab792063234db36907f6bdf8caba3e0e0f884816943418b32e3063378accf4d916e068f0b9055039e93a875cb500e25ef8258cbea70b445d3c2680c75600759e4df1270f9f79b1826909b2dfe6e7a2b58040d03e0963eb46b8c99a327a61a510c07103b23c40bccefc14e2d8b92140a7792eabc328e147dfcc87cd215a03ffb9d1a54351657ade1af17d4bb953ada02830869186cc820a44fa13325e3e53c565d7cdd5a1292de52150a144df0ed39ee23cb7a26f15ff042a797c9aa69ec8a33d9cede2f1f00c04b990025adf0813ceea6827c46c1ec46cfe6fc9294ac3d7963bbdcb7a5a75431e067c492b0c6da41606c6c82425145ec772f733afcdde02e2a422d64439ba43e080d1f79d1ab5ffa01392f4f21cb9940a1ed244ea5ff85bde6af06d72c5a54cb3c1af918fd0801f8ebdc410db560ec151eec471acd4634f781141c46569dd7abf178f286aed037fd73f4daa356e648eeeda0bc546f196b2b6319da806ef87542e3c47bc5cc54da7ae92e79420fbda44c35f38a72ea14d13df8a4c526175e7f0648151b5fa27ecd735965265e9c07e20f5f1e9cf01a9c9fa508d93cae05d0b666bf7d1a4cdec9b380dcd1694d7ffc09f06420fb2c97ccf1084bce8f30192004f055fe859e3de62ca7f77904d080fa7a6a099d8db70ef3ee82ff8b0d6e4eeee656b17463176c759dcf3d943807207df04da7c731dc2f56a5b263831ce89e4eaaad6e56e21764ca1d96f4cd6069bdfb0a278c23c92521b4a17763c926d70aa4f49cb718c90a426a64ea9c03469be5602ee34141c290375f5e98af76ea53512d32f268cbc0527dcca0ab3e2b1b76e79b4285dc09a3a7f89997da03a629b5d9f755b4ce6a4c50455011efacdc5d2c1b91db8b865c614b135db2e0f9e4cede55ae414cb1f14398a8c9a73a09d315796beb10e702bd8522b9875deff4435cc166b2a87d3d4d7d172b6290acb8e97f6b62615d4019d71324adeac0c3bc00a5650a5fcd471cf27f28a829d0fb8fdeb93b62973482fd1e7b57b3de16283501cd39f6d8986c191172394c39cdf11607f415cb171f8a9662b7990b51a1e42caa718229b34c4262b1db8fdd0c8093d62efd43d9ee3eed44f6208c7151544170c39b9f78becb55c08c597715b2f1901df6457da8e6ebc483b3bb5db68fd3c89668cafc4339a21f4b05e483570190cef51bf92ca49709ba11dc06bd305deadaed6b9f6f028bc95a92fb8385534883990332f54b71733807a1f2b8f25fdb1df88eb3b38976706d07a67f756e431546aebd4af2743f31b36038f91c00deddb1285e26297c174397126ff53433f2e184c1d4cef6b3a7bfa1862de9a1ec20869e03b69379de53d7b4311495acdf897855a9f23552a512ae9bf34a9775693d8957d9905504c089d19d7c98187e1dd671516f8d6b605941d8e7f77ab6118cc5ebeec6ca42a5f9f6818dcef7b0af9652bed27ec585f7e18e23a3b0736dee634cce14dc52656f0663eeee84ebca945e62adf94bba85942c89e328c4f35e43586af445f11b1b64945c8f4dad48f6db27c3444f016cce7feb7a438759d67cd203d9fcb3f44211f4977b5f347800f3f37b874df4ef985dc55d6a1cb3457e6c10a539f4bff7623a09ffe0761fff206afcfb5cc4b5a9fbd54f98e9a553ae59790facbda1adf615a79e439172341c3bf95b99dd8f78ff53699d110769c9731c03ad3ccd8abb8877fe84c0ab0d646ff06a49f73c42764ad003bf85703f633a9d85d0b03d3c595f9eb103a85363fb5df48e201e22d4b361bcb5de70bbaab8a02a2d3b27a5246145b2da2cc71bfa561544f7cd3cff6688a7b049ae086b43d197a61ae54d7113829e8f6afaf2414b7ac0b2f286968d2db9a4bb1b90c1ad9861dba35722483c88c63e5d77cf8b05225f31e665878f9238e55bf90f312fab7c19e400008fd67965386bbbee50999ec685fa1bb20cbf106a909a234f65de75ba4c896e218074ccdb8f75a333ed4e0c256283d1d7d326683b84ddfdb7a7b2e6dc4a93b2dbb8b37b208d4c02b6d192d28bb49ea44dfc56be4e70a3021ed442eaab2c45f832b68bf7b8600", 0x2000, &(0x7f00000001c0)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x1, 0x0, 0x0, 0x100, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe04c3010000002008001e80"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x40, 0x20, 0x2, 0x1, {{0x1d, 0x4, 0x1, 0x0, 0x74, 0x64, 0x0, 0xf, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xee, 0x0, 0xa, [0x0, 0x1, 0xe1, 0xfffffeff, 0x0, 0x10000, 0x6]}, @timestamp_prespec={0x44, 0x3c, 0x24, 0x3, 0x2, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x400}, {@multicast1, 0xa}, {@multicast2, 0x81}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x32}}]}, @noop]}}}}}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000780)={@multicast2, @private=0xa010102, r5}, 0xc) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) unshare(0x2a060400) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x80, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xed3, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x6, 0x11000, 0x8, 0x5, 0x879b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x7590, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x81, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0xfc, 0x4, 0x1, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) stat(&(0x7f00000000c0)='\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r8}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_256={{0x304}, "68a5a23a11835bb4", "d3cb12f91348d598fb0d8b96d5c532cb309daffb26094b03b93b99b5604bea77", "a2d423fa", "3a56f964520f5c6f"}, 0x38) syz_open_dev$tty20(0xc, 0x4, 0x0) 5m26.109573709s ago: executing program 4 (id=438): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003c80)={0x0, [{0x3, 0x3010, 0x4, &(0x7f0000000340)="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"}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x91e8, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xffe00000, 0x0}, {0x1, 0x0, 0x8000, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4d7418dd, 0x0}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x3, 0x0, 0xfc5f, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x1, 0x0, 0xfff80000, 0x0}, {0x1, 0x0, 0x5, 0x0}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) pipe2(&(0x7f0000000280), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1c, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/143, 0x8f}], 0x1, &(0x7f0000000480)=""/15, 0xf}, 0x40011013) listen(r0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000002d40)={0x2020}, 0x2020) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000001c0)={r7}, &(0x7f0000000240)=0x8) 5m25.554003828s ago: executing program 32 (id=438): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003c80)={0x0, [{0x3, 0x3010, 0x4, &(0x7f0000000340)="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"}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x91e8, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xffe00000, 0x0}, {0x1, 0x0, 0x8000, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4d7418dd, 0x0}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x3, 0x0, 0xfc5f, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x1, 0x0, 0xfff80000, 0x0}, {0x1, 0x0, 0x5, 0x0}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) pipe2(&(0x7f0000000280), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1c, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/143, 0x8f}], 0x1, &(0x7f0000000480)=""/15, 0xf}, 0x40011013) listen(r0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000002d40)={0x2020}, 0x2020) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000001c0)={r7}, &(0x7f0000000240)=0x8) 4m28.889737078s ago: executing program 5 (id=639): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x0) fchdir(r5) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x10, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) syz_open_pts(r0, 0x4002) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x19) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000104050000000000000000000a0000030800044000000006060006400000000006000640000300000a000200000004010200000008000340000000080500010002000000050001000100"], 0x64}, 0x1, 0x0, 0x0, 0x97516b30d95e0d67}, 0x20000800) 4m27.66667032s ago: executing program 5 (id=643): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2b, 0x30, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x2}) 4m27.592662993s ago: executing program 5 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300030000000b000100736f636b657400000800024000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 4m27.358846385s ago: executing program 5 (id=647): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4m27.175962717s ago: executing program 5 (id=651): r0 = socket(0xb, 0x800, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x80000, 0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x34) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') epoll_create1(0x80000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4m25.501960494s ago: executing program 5 (id=656): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x4, &(0x7f0000000800)=0x0) r3 = eventfd(0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x8800) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x842, r3, 0x0, 0x0, 0x4000034, 0x0, 0x0, r3}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0) io_destroy(r2) r5 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x6, 0xfffffff8, 0x1}, &(0x7f0000000100)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xfffffffffffffd95, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "18cfbce3a11ab572ca4b9e18e0cbd55c49430e712b67b318ec66e97fceebcad7f55f2842af1145dbfffc4f897558c809b88bba6ce463c972c738225a256431932d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x104}}, 0x40000) unshare(0x6a040000) unshare(0x10000000) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$l2tp6(r6, &(0x7f0000000180)="6d5d937de4851c531d36f29b1490063648503251ea1c3673a30e254c", 0x1c, 0x4000045, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 4m10.265892711s ago: executing program 33 (id=656): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x4, &(0x7f0000000800)=0x0) r3 = eventfd(0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x8800) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x842, r3, 0x0, 0x0, 0x4000034, 0x0, 0x0, r3}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000140)=[{}, {}], 0x0) io_destroy(r2) r5 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x6, 0xfffffff8, 0x1}, &(0x7f0000000100)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xfffffffffffffd95, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "18cfbce3a11ab572ca4b9e18e0cbd55c49430e712b67b318ec66e97fceebcad7f55f2842af1145dbfffc4f897558c809b88bba6ce463c972c738225a256431932d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x104}}, 0x40000) unshare(0x6a040000) unshare(0x10000000) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$l2tp6(r6, &(0x7f0000000180)="6d5d937de4851c531d36f29b1490063648503251ea1c3673a30e254c", 0x1c, 0x4000045, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 19.979082761s ago: executing program 3 (id=1466): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x4, 0x720, &(0x7f0000000780)={{0x12, 0x1, 0x7f3d744ce5c9df91, 0xeb, 0xb9, 0x4f, 0xff, 0xbb4, 0xa34, 0x4fbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70e, 0x3, 0x5, 0x7, 0xb0, 0x80, "", [{{0x9, 0x4, 0x36, 0x0, 0x1, 0x11, 0x71, 0x9a, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x3a}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0xff, 0xb, "91d382"}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x0, "1216017bdf37"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x400, 0x1, 0x6}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x26, "5940688e3e49"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0xaa, "a1b7"}]}], [{{0x9, 0x5, 0xa, 0x8, 0x19, 0xf8, 0x6, 0x6}}]}}, {{0x9, 0x4, 0x7a, 0x3, 0xe, 0x97, 0xa9, 0x59, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "49b0b4"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xa77, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0xce, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0x34, 0x1, [0x4, 0x7, 0x728, 0xfffb]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x9, 0x9, 0x3}, @mdlm_detail={0xc3, 0x24, 0x13, 0x7f, "5470f302679222845f647cc0db26be9e06779eb42528908affc31da7bc1db5a84ab2629cd82b1b4b35419bf7f98f625a897fd664a74a86e59a36941a5450ed730ba728fc03b5819174850ef5ac8542783fe9359ce15d9dbeeef600dc1d569b3cbb20a262673d809a639a8ce21fae9eb8a95ec99062dda7bc13794329ae1252d28d66d4560051c6d96ef4131879757c42b32f15389b10935f1dfedd169bbe61b3918bb3e22dcc78d9a4c353980d7604d54d9633845470dc2066839de8ff3fd3"}, @mdlm_detail={0xd4, 0x24, 0x13, 0xeb, "cba4aaf052db1399bcdf25f13752a9c639a2cfddb6ef5a7f56c0003176b1a8a92679b01bb3d6f9d53cf14e3b026e31af4e71b3a1a235eccd73503f012ce4d487f2910f78ae2b316643e0c866b52442c2c81b8b12074d70942e40d5b8571b9cd3a2b0dcf1e5aa7b2cc0866215cfef1681e37988cc12be683a35a6a1814e90e86c19003c6666eeefebdeb5a2bdf3b12968450174bdfecfce2f8d4c79908446beebf135c5b19b4b6cc4106083ddb35b2b7ca768f74b50d02a6f09e30bb536e725a1b78dcd1fa1bbb8237344b86797739840"}, @acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0xa1, 0xff, 0x14, 0x5}]}], [{{0x9, 0x5, 0x1, 0x0, 0x3f7, 0x7, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x8f3e}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x0, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0xd, 0x1, [@generic={0x47, 0xc, "a71365653b54f743f2dc3002bb5fe2ee4647c5425315a6282128325c05476de4b2750a1a830adc93ad537a5ae5fdcf61e88b9f29e99dc774a0f859a5d94f00d3b02d919ad0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x8, 0x10, [@generic={0x54, 0x3, "baee131143790a6fc4ee6dc454afd9422cc995b88c36f629aabec2680ffbd1b4e94ae54248326296643fe1d5434b3ae9b1a6ece304bde5eb9ef5136c535bb21df6d3edf0b979ad150b22dcd945fe010df386"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xa7}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3fe, 0xf9, 0x3, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x6c, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x0, 0x35, 0xe}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x3, 0x40, 0xf, [@generic={0x69, 0xa, "7144a982984195c234edea22743ea9aa6fa634becfbf6681ceaf4b835fe5830cc92c13f81935cf6798a26e3cbf217267103e3deec3b8bc4de2ff7dde2ded83f6c9607d20326f166d51e258da883785b8dba029b9aea70850b72be9316eb81f18ed8e1839d5af63"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf3, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x8, 0x6, 0x4, [@generic={0x3c, 0x2, "141c74b3e1237fa774208493772aa38b6db8525ce3436a54f2ba117d7946cc215c8b45250a3dbfafadcedcf555c0cebb21f6456b5afe6779c212"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x101}]}}, {{0x9, 0x5, 0x7, 0xc, 0x28, 0xae, 0x9, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4cd}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x8, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x32}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x8, 0x9a, 0xb, [@generic={0xb3, 0xd, "52db20dcc239f6b591a88b11843a2ad85accef095be1efc04de12d92e9e35381f6bbd63051ba98af593c44d1016052d637ecfad0d2a2894b179344e6666767061f449af1bb1f710064a833e0fa6df369b74c7cc84b262c61e3068a266ef5bf5dc6589a93857ea565368d439704c6d3cb54066c430b74b230a5c56cdf6f147248ec72b71fafeee5700bcbda5517fe4a3faceaa0b709c121d5fa25d179bd03d2952283a821ab283c34d971fa57de8a509301"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x6, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}]}}, {{0x9, 0x4, 0x6f, 0x6, 0x6, 0x18, 0xe3, 0x2e, 0x81, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '~'}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x4, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x5, 0x8}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x3, 0xf65, 0x1}, {0x6, 0x24, 0x1a, 0x7f, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x3, 0xb4, 0xf, [@generic={0xba, 0x23, "c99d2834b1926756207a223c0aee59b97cad5e81f0911b1b17e517023a0ee49612f2b708b6d7c0cc4f65c53a35b67bf7576babc8d4732be84897ee50e86050f8e2f8cacb4fefb5c168f79c6a0abf6eaf84a73f51e7341c767b8ffcec09dea564432baa739c903f9134ffeffd452381cbb5c48b16c39c17f460f156da49bcef06397892d328c4803fbfea2a55deab321dba7bff68645585a920a1f769e15045b9ee735f82f48a91f63e74b39db7fa627b483cbe8d5fcd7b21"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x7}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x4, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x6}, @generic={0xc2, 0x22, "1cab179dbc213e6d98f89361ceb6e900f9e526a359772138d0e7e90f29985ac548518d6e8cf3566b2204a3d9c065f61b42890ca475c993a8771b90981d3f431a57d01538908e3b22bf03cc1ddc6e9adf0b575d09373d5b1870a7d0de3bd61aca0ad96642dc17f55f26b945c9154b0d0696337f62920e8c87c7106b68de4d0e8b9770bf4f82fea2bbc7bc8f3167c0743ca2f64e5488e9f5b614d655b7ae88bfc777cc041c59c9b76f5e3051889bcd6556947c7583610f3c2febdb85887a8085f7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x5, 0x6, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x2, 0x0, 0xd}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x40, 0x1, 0xa}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xa, 0x6, 0x5}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x201, 0xfa, 0x5, 0x2, 0x8, 0x7}, 0xed, &(0x7f00000016c0)={0x5, 0xf, 0xed, 0x1, [@generic={0xe8, 0x10, 0x4, "6c1a1a51e82ec86d743c81e4d9c48ade027cf1b9e472398ade9be63f2334effd0afaa9ad3bd612a55978ee03ecae9c4e1ac5760436dbc3988eed3dce3a3805d93e2ec965a82d407db03b05c179519f0d68fe089a7029a3204bcd547c52183eec1ebc81c64b16b5f8d3dc090c04e0b542728e0cc7ebb1e46cbea0daa1ef4f1d960ed9e3c2cbad0ae5b9be1ec5fad0caf314383f797ecc3fd2835543c2c1d05a9f124e1e2f4c79e46c6897281beeca55f313b4196dae874cac22ce38edb73651330528731fecc10e46c0656f2fed64a176370ac835cb560ca375d478d403ac76ab9a171d7eaa"}]}, 0x5, [{0x26, &(0x7f00000017c0)=@string={0x26, 0x3, "96d1dd41d3d1b48d1d09c9e91cbd7062d2ad72d1f7a98be42c3e9a0df8991d8fe71b2ed3"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001840)=@string={0x4, 0x3, "478d"}}, {0x4b, &(0x7f0000001880)=@string={0x4b, 0x3, "75d86fec72289f0b584d00d5637460c9224e2159c9cfee08ac003a3cccee49269548f40d98ec2885d892fe73adb7946b70ace92d0050ee9b4aa00969b31a144fa0b69e26cfc1eef342"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0xb4ae}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffd22, &(0x7f00000001c0)=ANY=[]) 17.66559699s ago: executing program 6 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000040)=@ethtool_stats={0x4c}}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, &(0x7f00000002c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fffffff}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x1c, 0x1e, 0x200, 0x0, 0x0, "", [@nested={0xc, 0xe, 0x0, 0x1, [@typed={0x5, 0x123, 0x0, 0x0, @str='\x00'}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x24000855}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x11) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 17.558357068s ago: executing program 6 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xd637684e08508ddb, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x600081, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) 16.467134187s ago: executing program 3 (id=1476): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000006c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 14.794506163s ago: executing program 6 (id=1480): socket(0x40000000015, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') epoll_create1(0x80000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 14.353534098s ago: executing program 6 (id=1483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x2}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) (fail_nth: 2) 14.054279252s ago: executing program 2 (id=1484): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x8) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = socket$kcm(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0xe, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7ffc, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x7, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) 13.725627816s ago: executing program 6 (id=1485): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0x95a10108}, 0x48) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @mcast2, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) 13.238376411s ago: executing program 2 (id=1487): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0x0) setpriority(0x2, 0xff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x21}, {0x8, 0x0, 0x8}]}, @enum, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x6}}]}, {0x0, [0x2e]}}, 0x0, 0x6f, 0x0, 0xfffffffd}, 0x28) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x200204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.865017947s ago: executing program 3 (id=1489): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0x0) setpriority(0x2, 0xff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x21}, {0x8, 0x0, 0x8}]}, @enum, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x6}}]}, {0x0, [0x2e]}}, 0x0, 0x6f, 0x0, 0xfffffffd}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.293502977s ago: executing program 6 (id=1490): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x501, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)="de711fbf4eb55f95e9a2025ac8515e", 0xf) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020) 8.03504821s ago: executing program 2 (id=1500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x6000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x18a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={'sha512\x00'}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 6.625689787s ago: executing program 1 (id=1501): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000043242108d8132100623001"], 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 6.609217855s ago: executing program 2 (id=1502): ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000000), 0x4001) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_getattr(r0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r1 = getpgid(r0) sched_getattr(r1, &(0x7f0000000100)={0x38}, 0x38, 0x0) sched_getattr(r1, &(0x7f0000000140)={0x38}, 0x38, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000180), 0x1001) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000300)={r2, &(0x7f0000000200)='}/\x00', 0x448100, &(0x7f0000000240)={@align=0x6, {0x5, 0xda4, 0x0, 0x8e27}}, 0xc, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7050f2c1}) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x8, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmdt(0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/126}, 0x86, 0x1, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)) r5 = syz_open_dev$rtc(&(0x7f0000000700), 0x401, 0x0) ioctl$RTC_WIE_OFF(r5, 0x7010) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r6, 0xc004510e, &(0x7f0000000780)=0x1593) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xd, 0x7, 0x0, 0x1, 0x4200, r7, 0x3, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r8) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) 5.832860216s ago: executing program 2 (id=1506): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) userfaultfd(0x80001) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 5.559128017s ago: executing program 3 (id=1507): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000000c0), 0x1003) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xba9f, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000540)={0x0, 0x40000001, 0x1000, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e2, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2064, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000180)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 4.692319883s ago: executing program 0 (id=1508): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x8) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = socket$kcm(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0xe, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7ffc, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x7, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) 3.78896017s ago: executing program 0 (id=1509): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req3={0x9, 0x2c, 0x0, 0x1, 0x40, 0x48c, 0x6}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001a00010000000000fbdbdf250a148000fc00000b0008000008001900", @ANYRES32=r1, @ANYBLOB="06001c"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 3.501992979s ago: executing program 3 (id=1510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d", 0x12}, {0x0}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef0189388", 0x16}], 0x2}}], 0x2, 0x24040051) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.429321842s ago: executing program 1 (id=1511): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9", 0x41}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037", 0x27}, {0x0}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52}, [@ldst={0x0, 0x0, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x24, 0x41, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x2d}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x110}]}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setreuid(0xee01, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20048054) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000600)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000680)={0x0, r5}, &(0x7f00000006c0)={0x1, 0x3, 0x7, 0x4, 0xfffffffe, 0x6}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x1000005, &(0x7f0000002480)) mlock(&(0x7f00000b3000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f4060000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = gettid() sched_setscheduler(r7, 0x2, &(0x7f0000000340)=0x6f) 3.243921962s ago: executing program 1 (id=1512): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca9", 0x25}, {0x0}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef0189388", 0x16}], 0x2}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.102882917s ago: executing program 0 (id=1513): getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x20000000000, 0x7, 0x100000000, 0x7, 0x2, 0xfffffffffffffff7, 0xff, 0xce, 0xcd, 0x8000000000000001, 0xf, 0x34, 0x1, 0x6, 0x23c]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r0, 0x5}, &(0x7f0000000180)=0x8) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x404002, 0x0) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000200)=0x5e86d31b755b1a3d, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd2b, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x1, 0x7f, 0x0, 0x0, 0x7, 0x14}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc2f, '\x00', 0x0, r2, 0x2, 0x1, 0x1}, 0x50) (async) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, 0x0, 0x25, 0x1, @void}, 0x10) ppoll(&(0x7f0000000480)=[{r2, 0x240}, {r4, 0x80}, {r3, 0x10}, {r3, 0x1080}, {r2, 0x102}, {r5, 0x8000}, {r4, 0x80}, {r2, 0x10}], 0x8, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500), 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000540)=0x2) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000580)={r1, 0xd7, "5e3ff80a6b8d3d0db7f80b25f68b03bd7c3f9550e79667453c8952f954e1a865ac523664821469d89d17f6f6b4ef6edc89fd9c28418f748021d33c70448de59c1525759f4192046bd14bbf96297932fe1b79b7f375d0dbbded76f4bd46c9cb829506527c9955981957de965ea7401a2a9559a0f0d89196b870ce0b27e4a3fa247ad0d5a6777292d7142c0bbcec851b504c48af23414d9c32d8ca295e89e14a8a113008ccbe41c515d8835b1bd271a55c36d8a48d35ae9eca3110a4e6decd3a995dc49e9d8ad8472762932469492f80bbaff61125f3db54"}, &(0x7f0000000680)=0xdf) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40460062}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb0, r8, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d30490eb7e8c6c031665eca8efb1877d5a54de30f47b1c9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000c814) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4) sendmsg$nl_route(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)=@ipv6_delroute={0xc8, 0x19, 0x800, 0x70bd27, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x9, 0x0, 0x2, 0xfe, 0x1, 0x1800}, [@RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_METRICS={0xa1, 0x8, 0x0, 0x1, "172c166898e94cbe4e92d3c6a0224f741ce5cc1df031bdcd3855409abba542ffc6b74661f5415501279fa1c4b8ad5d1c848efc7981ddf4ef33187d2876a55bd80c3f8f00e593137fe90f2e6ce5e22c4bb41d6ad46dd4f4a51e0bb89e91f7aa2610130a2bb7fb03463a8fdb9cabff328360b6e476032eb2d08e9d86c749ddc9cd98a9edb3910812079dedd4dafac4aa128adf01baba4b27bf524bf3806f"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x84}, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000ac0)={r6}) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) (async) pwritev2(r3, &(0x7f0000000f40)=[{&(0x7f0000000b80)="a7255b835554c4b1f799f742cb28d9ffd98c566ef99a120e9f666d02c84d58e7a9a32497719a7545ed712cac8a28c29d14ea29a99570da2ec4663ccd480c5e804650743f9c397e796276f1ba063fa3fd75e9a2a27f5f0e3ec1a6ea2aded1c235c9e211b539e19e2b42aa5f2f0ce8ff5a498d1d631abea273bca81cd2cdaa5013c562b44e2183d6795d1b0507ac43d08fda420124ef2dc2a16551281184daa105432fd0a9931d9f234e744d5cfdc5ceeacedc6bd499c6a44f9a244ee01b091a00a43e", 0xc2}, {&(0x7f0000000c80)="7ced1af12003283bcc476adc15aa9d4e78a9eb101c84f3b32c3cdc5c5459775a1aa9c068c5ee86deb6042a437b518918ab964acd1fc5095ca87fcc93ddea259e94628cae480b61cbc816cad63a6ce98a51a8a038cdbc349fc310baccd4a9c128e298694901f23a596e119b585f6b6f5c99a1e6605b5423f3cd2f4fcbb2a3a4b7463d97f83f478c98326c5d7936815fbb1db05bc1ae30f59f2ac43d9976e458f59ad57fbc9dd2c0465766831198560fbf2e10428b5bfd0f7523cdc1d5d9693c07468b4c90614534ffe412e9fd112103e1f44a769bac8f21ec7961c1c09710397a2fc77d46a851efc9cb3c97479830f84835", 0xf1}, {&(0x7f0000000d80)="ab90d1eafa3f50c7c3cc9eed16ef1af5f6fd5a20aa0a0093b7bd9ec01fe9d3fc1d6bb745a6a1b43ed1bac9a807163be2ba439506bd57f3d75f9b930736b754c09b484f3cc32c0859f54bdf269f72df2897ec5eb2495c11d4a5e58812726f5c50585a9540cd82d015fdfabf347dd118cc0cec8e953e0a95ce729af08b6cace14a969487d46f569af5a2998ed6f3334db5b1a2dca770bfd4a72b610106a3c544ee2080c879eff51383d4b9d7b380cea8f5b9f0fb1d78299dc9efe4def308a974e6299f9a0e9e3f1026352fc7aa3474feb3", 0xd0}, {&(0x7f0000000e80)="3838c0e1abfe82feade1754fb2cc2e8e405d6459397151bd3d5f6daced8c6696619076d6ab62398f98896e892431d230c18b010579584d6ad9e660250130db9cb9ea5488dde426e65d8f8aabc312c9cb0570becf634805de22979847ee022518fb16357bf740f6a9f76ba87c8c0accc770a8c39b22a7082eb1a65a05c90df846140badfbe4c5ca", 0x87}], 0x4, 0xfff, 0x80000001, 0x69e114f408630f1) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000001380)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_DELSET={0x308, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_DESC={0x2ac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xf0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c1e000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcad}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x61d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x18f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff34}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6500c94b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d7f692d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f82}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7cd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2502da6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfe7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd499}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000000}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x360}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000013c0)={0x0, 0x1, 0x80000000, 0x2}) (async) writev(r5, &(0x7f0000001800)=[{&(0x7f0000001400)="62f3c9369814c95d1c66ee1d22ddcf644b3c53c28512653887cee722c6492367e4b3868949c5bd9161f45855f9fdea00d0b683865434589a943ac1dbd344926d89a70be6940b1f68b6a79063fbb458dbb8970b04a473580bcdf9b10810df59c9a3ae1c8c2086b083f5389856800c11f046f715882be6f12d71bc7ec9329a57de0193cbe2647bcb82ba0378c7e64edcb2f85091da39", 0x95}, {&(0x7f00000014c0)="6dbcb1e37969d74ec384023fbe65e5d72d6a52abf1fdce69531a639824e21cc6d809ceaeeac536768f01d7db729daf96d23fdb9843df5f611dbc5bf5dcc7062ef7ac99016e45509726fa76a63b33ab97570803ceeadd890813a754ac35a074298d044e15d59762777a1b152f9c09b0929ea213c5efb1fe5c5cbabc83f73436bdbcc52fdb771b3a2b458e21d24761f176468573b340", 0x95}, {&(0x7f0000001580)="77ad3dc68ca0f99f83634155941775eb7145cfc5e829dec9b1134ed55795c596e2f9ac1ef72bee500e06315bf15217b88bf296a6e15c92d0ca0b7a2b1bd58b7e69f1605a229d7612af18ef0cfa3fc4cdb37136c43ebd48a79601f8af6257daf0c8f0191ce0377ebaae9b40b2e8fd4d736270fe6c65af0c23ed9135cff5bdcbdc7381d6b1e7d118ec49c6fe140f540c03f3374442ace0d6a48d7bf1e756cefc23eb0825fbf7d2a9ca73c972bedc", 0xad}, {&(0x7f0000001640)="f74fc0d9f58ed0fb2781df35ba7b4d83bc55589b527f7e8d50b58de03954c962975f4d467daa073769d85c2c79224bb911408bb78948ab4245e5e483b1a84da7c1ac1ae677223012e05678194450ab3057acceead336520cb70b79", 0x5b}, {&(0x7f00000016c0)="e5ee9f14878ad846adefbf27ad20d75edf839dca0601a7c8e74cd0c7c3d1980a2a2889ab304433c1890bb7fd245339c1b763f5deb41cb947941a9f", 0x3b}, {&(0x7f0000001700)="753e3d6f32f07baa1fe02ed807076ee809e53f958436f78bf99758dce157ddcbf3f4c46497d3d7ae27009f35613fff3b6640d8060a6e75a3dfbdbbda1d9e9945", 0x40}, {&(0x7f0000001740)="6f8b900ef63898540d24e21d7e21214552fb08c070289d0e47600b452381adadfdb6b6eb8976c25464ceeb91580cb82209ac8829f9f558233eb8d965599f92c91008be9516003756abf7a2607edd07bd1c7dfaf772299970e041378647f2b098dabae81bfd5438de7e82207e2762100a6b641ca2f6ae7d5127bf7957e75e94e8d12acd53091d", 0x86}], 0x7) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001900)=[@text64={0x40, &(0x7f0000001880)="26f6e78f29f0954600b805000000b9f31300000f01c1c744240000800000c744240254100000c7442406000000000f011c240f01c466baa000ec646567440f780b2ef3f046315300660f1176970f20e035000001000f22e0", 0x58}], 0x1, 0x10, &(0x7f0000001940)=[@cr4={0x1, 0x204001}], 0x1) (async) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x50, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3da352ff3dfe5b321edd15eed3"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f697847e79"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8268a6889c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x81) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000003680)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003640)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x1cc, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "3fd9e8693561df026e7be055a3a89c2431d1b401c53e8be115528d892690632207ac60e6d4b245e1ef43adbdce9d948c2d3813d73ff459aa00e1dd960a11c288b20c94fcf8fdfe7a732fbbbdc696864d25fb2624af9c3fc03549c57efacc602ade42ff4a05ba2e6036f3ef4ed34c64dc9aae693357aa9cdafacea0d6a9153c2748819075d892183b06b91532664160479e09a1569f8bc3eb8a3acf685ad62463d13ed94deb13b97c1989e41debf0a8bc32510ef74ea42cbc2162bc9969dddf4804c1bf21771b752d93d6505564d8d713c4109a972c663edeaed0b628bfbbc9351cc0e9fb"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb5, 0x6, "3bd8f3305db2d4ebce11fdc91f02017acc2fc07cc343ee6ffd7f896126dbbe33fc4c166b216f3739a221748361fb022213155e67845ca512c35b82b502900ea8f2ee85fc55479f43d306f3a93b795b6f2b409e8268b9e00dc87098e5e0239074c3fb6997fc77ceaf55c72b9b719ff7903e55275a856827e61d793c9458111d0f6671ddf0d984b49259d708454e45daeac231781f4f91798d3ce6b9d16958c0414d5c70a833bd8111ff38861460d7850590"}]}, @NFT_MSG_DELTABLE={0x264, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xf, 0x6, "7e72c6ed6db88c20fa690e"}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "8182017ebafa782ff5612626825613f4a76416d56ef72e77ad1a39c1c18db4c9f9bebe1c7d119f43923dbc66f6c73a6e78599e147ad987069309cb7912517aa352bb0f20d96fcad334d459cac8e1bac8c8595f97464c87cc1124631fd4cd8cf76f1896a28de67d9dc2559bcd46c08829ffab0c6d443beda3e86fece3ec930878dc0c30d05544bd2d2cde226bd66c6a2733d82ccf4dac649ef8db7a3c2a361dce430dc42961f256ed9911493c39aa036224bb3325bbc657b1a21f65a3d50694d7e3e2d10722d609b813a83c796e197cc3e22ce1724de259"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "0dd2a77632e61352bf2ac90766f5545213ab930e39efd67c4fbea94a004b7051c10d9c2de097887a3508abb4df104ecd027006c4fc91f60e9f1e218f5a565f8a574cbad6f0dbe4265e2016d16688d1d5aac0c6ecdbceebe481310413e2989142efa902eda118361fa19f6c23a7e0e4b3334f0211f08bf64cb2394db36276e147ed28923d121db3634e9b7d4745386b4b56bd5abaf5ea5d277bde86fdff15c081711a4e20eb60ce9002f10b281c6318860e30151c5e9eba7fca4630d73ec059db493f240c98bb5f05f23364261341c3acf9426239aac9afd0503e52fd48c1587172f3b604e906ff5de673a0a46eb67955e074e18dbc6b"}, @NFTA_TABLE_USERDATA={0x1f, 0x6, "2811a1dc0cf7d8d8be32321a859ae1a349530466c165004d3b2c62"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x10, 0x6, "f5f2c140d50ffff7a770f4a4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fff}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x52}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xd}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x60}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x150, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xf4, 0x8, "351242ed51d35571315ab10bc4da3a9a75b1ccd8565615abb325493083dc2157ed4daa56a7fbfbf623cc653a06e2120f4569a137624298284c2006a6ea71b5a36cb6824cd901d99ad6473760575cb458d076650ff1c8183d31848b2c7ef71294abd824b1e89b19b7d6780dbe97afc00dd4ddd23f9846b2058b23cd6305c22b572a10cdb00a7eac8a944043b01bcc2f42e72e6c54eb6aa35a03d4310d5596b2f50e2c00af22248c11c13f818064e973ea4dd3be1580f3a3e9bf1b0e123bf7540ee0e79ee1f8fe0cd89e57b9862f37c4ca35568530335a576379ad823f76e1374862e5134b349f044b45c3221f88808534"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x1480, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x142c, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffc3d}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}]}, {0x123c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "a1068bec26d08b7222e4ccd142b9b8b0d84dee1489f6d54c276c14ad4221aa2669b420cca05da0e4ad8bc6dabd4769c2eb"}, @NFTA_DATA_VALUE={0x88, 0x1, "b4b5f016d5cf92ad94b103829404d5f13261fb40a7f166ca6347c7f7cc6243f742fe03d24292132bfbd6be7c16c4da5ed5d3c246438fe45d3fa8efe73f049f7b8f9545db1c05af59faacc359c48914c1c399ce06473953c72030bb4eae1c199459e0400b08177ac59b61c3f632c34cdf757f3d0cd356c14920cc4db7d437b69969dd350b"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x10d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb6, 0x1, "048284e6f61950692de3e2686691edb57b611d7ce33b9798a8b4e4d9caeb56a5510cedddac5092be7b5ec55d6f5ff610e3f4010fe5366258c368a7c4bc618e6d5bc55ae6c5c74f017dbe5b52339bfa6cfa1fada3f4ecffd3f81b4309b02692802ad04057e64dbb89528a259d3a833fa087c3e266c259a2166b9654c32b7f8839df1a36f1395b8fc7b5aabfa9933a03b012f60262b9703ea953ddb2b8bc259975d42bc1d31a7ec3dfe4bd0c929c90bcc63af8"}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "ee50feebd81bc077eaade09ca3b46c94ad7673f41fbb51dd8769b4c6f9122808efaa3393320ca5e2b1d15e8f5d7ebec2cec725dc58cbd64cee5bc2ab88c8ec43045f78f0309532ea4c066bc8fdca908dae402deaca651e37e7ef1ffde2b272e044d4f0807dc348561ddc28c9997b9c291e467c7d51dedfd13a93f5d02474067268"}, @NFTA_SET_ELEM_USERDATA={0x4e, 0x6, 0x1, 0x0, "2db519639994f9041fde2512370cb90361c5fa617e618f505c8c6a383d6c6521e3c58ea9d306aad65e90a7680d3ce19ff15e04cc967ec115f6628f1f55ba3dc712af0066eb124283985a"}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x45, 0x6, 0x1, 0x0, "64fdc5d5be0a025bd7ec4d13804818740a9076d2e00d69364b8dbe9e8d7f3ebd88fac05c1f282c03c2fc666079da0c25c78b8fcd62c56c9c2a0a27850aceb1fbfa"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x58}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b20}, 0x1, 0x0, 0x0, 0x4000}, 0x20008804) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000036c0)=@svm={0x0, 0x1, 0x1080, {0x2}, {"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"}}) (async) signalfd4(0xffffffffffffffff, &(0x7f0000004780)={[0x7fffffff]}, 0x8, 0x800) 2.932029684s ago: executing program 1 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x6000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x18a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={'sha512\x00'}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 2.931543728s ago: executing program 0 (id=1515): mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 1.457835376s ago: executing program 1 (id=1516): ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000000), 0x4001) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_getattr(r0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r1 = getpgid(r0) sched_getattr(r1, &(0x7f0000000100)={0x38}, 0x38, 0x0) sched_getattr(r1, &(0x7f0000000140)={0x38}, 0x38, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000180), 0x1001) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000300)={r2, &(0x7f0000000200)='}/\x00', 0x448100, &(0x7f0000000240)={@align=0x6, {0x5, 0xda4, 0x0, 0x8e27}}, 0xc, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7050f2c1}) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x8, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmdt(0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/126}, 0x86, 0x1, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)) r5 = syz_open_dev$rtc(&(0x7f0000000700), 0x401, 0x0) ioctl$RTC_WIE_OFF(r5, 0x7010) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r6, 0xc004510e, &(0x7f0000000780)=0x1593) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xd, 0x7, 0x0, 0x1, 0x4200, r7, 0x3, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r8) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) 1.349115244s ago: executing program 0 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000001580), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000740)=""/102, 0x66}], 0x2}, 0x18}], 0x1, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x2) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0x40045304, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc}) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a06050045ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) listen(r0, 0x10040) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r11, 0x4) fcntl$dupfd(r3, 0x80c, r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r11, 0x0, 0x0}, 0x10) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}}) 1.269888029s ago: executing program 3 (id=1518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997", 0x3e}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef0189388", 0x16}], 0x2}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000008000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xfe, 0xfffffffffffffffd}, 0x10) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 939.022482ms ago: executing program 2 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000002b0009002dbd7000fedbdf2505000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x24008004) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) fcntl$getown(r3, 0x9) bind$alg(r1, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="df4800000000fddbdf250c000000180001801400020064756d6d793000000000000000000000dc0003"], 0x108}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2c}}, 0x300080a0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<@\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f0000000600080000000000050017000000000006000a00ffff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4a3f3", 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x898}, 0x20040081) r8 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="1cf1856760a50103965b15bacc313d1f", 0x10}], 0x1, 0x0, 0x0, 0x4044851}], 0x1, 0x400c8d1) recvmmsg(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1}, 0x4}], 0x1, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000000)) 536.873029ms ago: executing program 1 (id=1520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0xffffffff, 0x101a83) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x4, 0x6, 0x2015, 0x4, 0x3, 0x1, 0x2, 0x6}}) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0xc4240) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000040)=0x1) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0x8, 0x1, [0xfffffffd]}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={'\x00', 0x800b, 0x4, 0x0, 0x8000003, 0x0, "55805fb5a5f4ff0300eb0004ff00", "bb74b859", '\x00', 'O\x00', ["aabe8459c62224475793e8a7", "7f9de2d2c4f439e1d1c900", "fa0700f22b42a3023be516d1"]}) 0s ago: executing program 0 (id=1521): socket$kcm(0x10, 0x2, 0x0) fsopen(0x0, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04141a0c"], 0x7) syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x1, 0xfffffffa}, {0x5c, 0xf3}, {0x6, 0x0, 0xb2, 0x5635}]}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x14, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000100), 0x20040, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r2, &(0x7f0000001440)=[{&(0x7f0000000680)=""/194, 0xc2}], 0x1, 0xfff, 0x0) epoll_create(0xe) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): mm="syz.1.1157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7565fe68e code=0x7ffc0000 [ 452.411499][ T36] audit: type=1326 audit(1783841271.903:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9943 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75663de59 code=0x7ffc0000 [ 452.411537][ T36] audit: type=1326 audit(1783841271.903:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9943 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa75663de59 code=0x7ffc0000 [ 452.411576][ T36] audit: type=1326 audit(1783841271.903:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9943 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75663de59 code=0x7ffc0000 [ 452.564612][ T5730] Bluetooth: Can't get state to change to load ram patch err [ 452.564642][ T5730] Bluetooth: Loading patch file failed [ 452.564684][ T5730] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 452.603789][ T5730] usb 2-1: USB disconnect, device number 40 [ 452.723099][ T5832] usb 4-1: USB disconnect, device number 47 [ 452.776372][ T5832] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 453.042810][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1165'. [ 453.472681][ T9978] FAULT_INJECTION: forcing a failure. [ 453.472681][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.472716][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.3.1167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.472743][ T9978] Tainted: [L]=SOFTLOCKUP [ 453.472749][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.472761][ T9978] Call Trace: [ 453.472769][ T9978] [ 453.472777][ T9978] dump_stack_lvl+0xe8/0x150 [ 453.472811][ T9978] should_fail_ex+0x467/0x600 [ 453.472843][ T9978] _copy_to_user+0x31/0xb0 [ 453.472866][ T9978] simple_read_from_buffer+0xe1/0x170 [ 453.472891][ T9978] proc_fail_nth_read+0x1be/0x230 [ 453.472915][ T9978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.472937][ T9978] ? rw_verify_area+0x250/0x4d0 [ 453.472961][ T9978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.472979][ T9978] vfs_read+0x219/0xa90 [ 453.473008][ T9978] ? __pfx_vfs_read+0x10/0x10 [ 453.473032][ T9978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.473061][ T9978] ? lockdep_hardirqs_on+0x7a/0x110 [ 453.473088][ T9978] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 453.473115][ T9978] ? mutex_lock_nested+0x152/0x1d0 [ 453.473135][ T9978] ? fdget_pos+0x252/0x320 [ 453.473162][ T9978] ksys_read+0x156/0x270 [ 453.473186][ T9978] ? __pfx_ksys_read+0x10/0x10 [ 453.473216][ T9978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.473237][ T9978] do_syscall_64+0x174/0x580 [ 453.473264][ T9978] ? trace_irq_disable+0x3b/0x140 [ 453.473281][ T9978] ? clear_bhb_loop+0x40/0x90 [ 453.473304][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.473323][ T9978] RIP: 0033:0x7fc57863e68e [ 453.473340][ T9978] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.473356][ T9978] RSP: 002b:00007fc5768d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.473376][ T9978] RAX: ffffffffffffffda RBX: 00007fc5768d66c0 RCX: 00007fc57863e68e [ 453.473391][ T9978] RDX: 000000000000000f RSI: 00007fc5768d60a0 RDI: 0000000000000004 [ 453.473402][ T9978] RBP: 00007fc5768d6090 R08: 0000000000000000 R09: 0000000000000000 [ 453.473414][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.473426][ T9978] R13: 00007fc578906038 R14: 00007fc578905fa0 R15: 00007ffc4c011b88 [ 453.473457][ T9978] [ 453.788177][ T5614] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 455.220512][ T5832] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 455.390447][ T5730] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 455.409092][ T5832] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 455.409118][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 455.409136][ T5832] usb 3-1: Product: syz [ 455.409149][ T5832] usb 3-1: SerialNumber: syz [ 455.417173][ T5832] usb 3-1: config 0 descriptor?? [ 455.543084][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.544390][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.544430][ T5730] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 455.544452][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.589162][ T5606] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 455.599177][ T5730] usb 2-1: config 0 descriptor?? [ 455.611255][ T5770] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 455.661876][ T5832] hso 3-1:0.0: Failed to find BULK eps [ 455.736034][ T5606] usb 4-1: unable to get BOS descriptor or descriptor too short [ 455.736675][ T5606] usb 4-1: not running at top speed; connect to a high speed hub [ 455.738042][ T5606] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 455.738065][ T5606] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 455.738084][ T5606] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 455.738102][ T5606] usb 4-1: config 14 has no interface number 0 [ 455.738171][ T5606] usb 4-1: config 14 has no interface number 1 [ 455.738249][ T5606] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 455.738271][ T5606] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 455.738344][ T5606] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.738369][ T5606] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 455.738392][ T5606] usb 4-1: config 14 interface 57 has no altsetting 0 [ 455.738409][ T5606] usb 4-1: config 14 interface 228 has no altsetting 0 [ 455.772548][ T5770] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 455.772575][ T5770] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.772593][ T5770] usb 7-1: config 0 has no interface number 0 [ 455.772633][ T5770] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 455.772658][ T5770] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 455.803112][ T5770] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 455.803140][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.803148][ T5606] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 455.803165][ T5770] usb 7-1: Product: syz [ 455.803171][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.803178][ T5770] usb 7-1: Manufacturer: syz [ 455.803191][ T5770] usb 7-1: SerialNumber: syz [ 455.820103][ T5606] usb 4-1: Product: syz [ 455.820121][ T5606] usb 4-1: Manufacturer: syz [ 455.820135][ T5606] usb 4-1: SerialNumber: syz [ 455.998523][ T5770] usb 7-1: config 0 descriptor?? [ 455.999284][T10000] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 456.035865][ T5770] vmk80xx 7-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 456.064588][ T5770] vmk80xx 7-1:0.6: probe with driver vmk80xx failed with error -22 [ 456.208430][ T5770] usb 7-1: USB disconnect, device number 17 [ 457.304918][ T5606] legousbtower 4-1:14.57: interrupt endpoints not found [ 457.366420][ T5730] usbhid 2-1:0.0: can't add hid device: -71 [ 457.367826][ T5730] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 457.396787][ T5704] usb 3-1: USB disconnect, device number 47 [ 457.430077][ T5730] usb 2-1: USB disconnect, device number 41 [ 457.709139][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.741070][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.744281][ T5606] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 40.236 build 25474 [ 457.782990][ T5606] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 459.778073][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.778688][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.759597][ T5832] usb 4-1: USB disconnect, device number 48 [ 461.884890][ T5832] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 463.655147][T10051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1192'. [ 463.881806][ T5704] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 465.310554][ T5832] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 465.334600][ T5704] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 465.334624][ T5704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.334641][ T5704] usb 7-1: config 0 has no interface number 0 [ 465.334739][ T5704] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 465.334766][ T5704] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 465.402478][ T5704] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 465.402507][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.402909][ T5704] usb 7-1: Product: syz [ 465.402924][ T5704] usb 7-1: Manufacturer: syz [ 465.402937][ T5704] usb 7-1: SerialNumber: syz [ 465.462832][ T5704] usb 7-1: config 0 descriptor?? [ 465.463553][T10050] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 465.521529][ T5704] vmk80xx 7-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 465.523736][ T5704] vmk80xx 7-1:0.6: probe with driver vmk80xx failed with error -22 [ 465.600466][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 465.604362][ T5832] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 465.604386][ T5832] usb 4-1: config 0 has no interface number 0 [ 465.609142][ T5832] usb 4-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=30.62 [ 465.609167][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.609185][ T5832] usb 4-1: Product: syz [ 465.609197][ T5832] usb 4-1: Manufacturer: syz [ 465.609209][ T5832] usb 4-1: SerialNumber: syz [ 465.666979][ T5832] usb 4-1: config 0 descriptor?? [ 465.687723][ T5730] usb 7-1: USB disconnect, device number 18 [ 465.714519][ T5832] usb 4-1: selecting invalid altsetting 3 [ 465.714541][ T5832] comedi comedi5: could not set alternate setting 3 in high speed [ 465.714556][ T5832] usbduxsigma 4-1:0.238: driver 'usbduxsigma' failed to auto-configure device. [ 465.932061][ T5832] usbduxsigma 4-1:0.238: probe with driver usbduxsigma failed with error -22 [ 465.940970][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.967831][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.207488][ T5832] usb 4-1: USB disconnect, device number 49 [ 467.292891][T10078] 9p: Bad value for 'rfdno' [ 467.550422][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 467.550605][ T5730] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 467.720396][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 467.720555][ T5730] usb 7-1: Using ep0 maxpacket: 16 [ 467.724284][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.724314][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.727989][ T5730] usb 7-1: unable to get BOS descriptor or descriptor too short [ 467.783503][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 467.783520][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 467.783530][ T10] usb 2-1: Product: syz [ 467.783538][ T10] usb 2-1: Manufacturer: syz [ 467.785207][ T5730] usb 7-1: config 37 has an invalid interface number: 251 but max is 0 [ 467.785222][ T5730] usb 7-1: config 37 has no interface number 0 [ 467.785239][ T5730] usb 7-1: config 37 interface 251 has no altsetting 0 [ 467.788711][ T5730] usb 7-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=62.a5 [ 467.788737][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.788755][ T5730] usb 7-1: Product: syz [ 467.788767][ T5730] usb 7-1: Manufacturer: syz [ 467.788827][ T5730] usb 7-1: SerialNumber: syz [ 467.876621][ T5606] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 467.925255][ T10] hub 2-1:4.0: USB hub found [ 468.050428][ T5606] usb 4-1: Using ep0 maxpacket: 16 [ 468.054162][ T5606] usb 4-1: config 0 has no interfaces? [ 468.054196][ T5606] usb 4-1: New USB device found, idVendor=14b0, idProduct=474c, bcdDevice= 0.00 [ 468.054219][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.123009][ T5606] usb 4-1: config 0 descriptor?? [ 468.123964][ T10] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 468.194475][ T5730] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 468.196711][ T5730] gspca_sn9c20x: Write register 1000 failed -71 [ 468.196771][ T5730] gspca_sn9c20x: Device initialization failed [ 468.196851][ T5730] gspca_sn9c20x 7-1:37.251: probe with driver gspca_sn9c20x failed with error -71 [ 468.236580][ T5730] usb 7-1: USB disconnect, device number 19 [ 468.296403][ T5614] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 468.306619][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 468.306637][ T36] audit: type=1326 audit(1783841287.793:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10095 comm="syz.0.1206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82cdc0de59 code=0x0 [ 468.480724][ T5606] usb 2-1: USB disconnect, device number 42 [ 468.567344][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.567898][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.600577][ T5704] usb 4-1: USB disconnect, device number 50 [ 469.758577][T10108] FAULT_INJECTION: forcing a failure. [ 469.758577][T10108] name failslab, interval 1, probability 0, space 0, times 0 [ 469.758671][T10108] CPU: 0 UID: 0 PID: 10108 Comm: syz.1.1209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 469.758699][T10108] Tainted: [L]=SOFTLOCKUP [ 469.758707][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 469.758719][T10108] Call Trace: [ 469.758727][T10108] [ 469.758736][T10108] dump_stack_lvl+0xe8/0x150 [ 469.758771][T10108] should_fail_ex+0x467/0x600 [ 469.758803][T10108] should_failslab+0xa8/0x100 [ 469.758827][T10108] kmem_cache_alloc_node_noprof+0xae/0x670 [ 469.758858][T10108] ? __alloc_skb+0x1d7/0x7a0 [ 469.758886][T10108] ? __alloc_skb+0x1d7/0x7a0 [ 469.758918][T10108] __alloc_skb+0x1d7/0x7a0 [ 469.758948][T10108] netlink_sendmsg+0x5d4/0xb40 [ 469.758976][T10108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.758997][T10108] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 469.759031][T10108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.759050][T10108] sock_sendmsg_nosec+0x13a/0x180 [ 469.759078][T10108] ____sys_sendmsg+0x565/0x870 [ 469.759097][T10108] ? __might_fault+0xaf/0x130 [ 469.759123][T10108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.759149][T10108] ? import_iovec+0x73/0xa0 [ 469.759173][T10108] ___sys_sendmsg+0x2a5/0x360 [ 469.759190][T10108] ? __lock_acquire+0x683/0x2ce0 [ 469.759215][T10108] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.759267][T10108] ? __fget_files+0x2a/0x420 [ 469.759285][T10108] ? __fget_files+0x3a8/0x420 [ 469.759313][T10108] __x64_sys_sendmsg+0x1b7/0x290 [ 469.759336][T10108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.759372][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.759396][T10108] do_syscall_64+0x174/0x580 [ 469.759424][T10108] ? trace_irq_disable+0x3b/0x140 [ 469.759442][T10108] ? clear_bhb_loop+0x40/0x90 [ 469.759472][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.759491][T10108] RIP: 0033:0x7fa75663de59 [ 469.759510][T10108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.759526][T10108] RSP: 002b:00007fa754896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.759547][T10108] RAX: ffffffffffffffda RBX: 00007fa7568c5fa0 RCX: 00007fa75663de59 [ 469.759561][T10108] RDX: 00000000040100d0 RSI: 0000200000000240 RDI: 0000000000000003 [ 469.759575][T10108] RBP: 00007fa754896090 R08: 0000000000000000 R09: 0000000000000000 [ 469.759587][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.759599][T10108] R13: 00007fa7568c6038 R14: 00007fa7568c5fa0 R15: 00007ffc36ecb0d8 [ 469.759629][T10108] [ 472.035729][ T5704] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 472.160725][ T5606] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 472.210572][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 472.221734][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 472.221766][ T5704] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.221806][ T5704] usb 3-1: New USB device found, idVendor=14b0, idProduct=474c, bcdDevice= 0.00 [ 472.221827][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.281097][ T5704] usb 3-1: config 0 descriptor?? [ 473.060508][ T5606] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 473.060536][ T5606] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.060556][ T5606] usb 7-1: config 0 has no interface number 0 [ 473.060616][ T5606] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 473.262212][ T5606] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 473.262241][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.262259][ T5606] usb 7-1: Product: syz [ 473.262274][ T5606] usb 7-1: Manufacturer: syz [ 473.262287][ T5606] usb 7-1: SerialNumber: syz [ 473.337789][ T5606] usb 7-1: config 0 descriptor?? [ 473.338507][T10123] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 473.338602][T10123] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 473.353961][ T5704] usbhid 3-1:0.0: can't add hid device: -71 [ 473.354031][ T5704] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 473.439893][ T5704] usb 3-1: USB disconnect, device number 48 [ 473.650844][T10130] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1218'. [ 474.781939][ T5606] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 474.788243][ T5606] usb 7-1: USB disconnect, device number 20 [ 476.342450][ T5614] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 476.625342][ T5770] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 476.900930][ T5770] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 476.900961][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 476.901149][ T5770] usb 2-1: Product: syz [ 476.901164][ T5770] usb 2-1: SerialNumber: syz [ 477.312950][ T5770] usb 2-1: config 0 descriptor?? [ 477.811789][ T5770] hso 2-1:0.0: Failed to find BULK eps [ 478.000484][ T821] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 478.019581][ T36] audit: type=1326 audit(1783841297.503:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10153 comm="syz.1.1227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa75663de59 code=0x0 [ 478.150494][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 478.154812][ T821] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 478.154843][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.154862][ T821] usb 7-1: Product: syz [ 478.154876][ T821] usb 7-1: Manufacturer: syz [ 478.154890][ T821] usb 7-1: SerialNumber: syz [ 478.158902][ T821] usb 7-1: config 0 descriptor?? [ 478.267791][ T5614] Bluetooth: hci0: unexpected event for opcode 0x040d [ 479.278528][ T821] airspy 7-1:0.0: Board ID: 00 [ 479.278541][ T821] airspy 7-1:0.0: Firmware version: [ 479.453286][ T5606] usb 2-1: USB disconnect, device number 43 [ 479.496861][ T821] airspy 7-1:0.0: usb_control_msg() failed -71 request 11 [ 479.651325][T10183] tipc: Enabled bearer , priority 0 [ 479.656600][T10183] syzkaller0: entered promiscuous mode [ 479.656624][T10183] syzkaller0: entered allmulticast mode [ 479.697717][ T821] airspy 7-1:0.0: Registered as swradio24 [ 479.697739][ T821] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 479.725912][T10183] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 479.741046][ T821] usb 7-1: USB disconnect, device number 21 [ 479.929299][T10174] syz.2.1232 (10174) used greatest stack depth: 18080 bytes left [ 480.000202][T10188] tipc: Resetting bearer [ 480.129928][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 480.198428][T10182] tipc: Resetting bearer [ 480.386086][ T36] audit: type=1326 audit(1783841299.873:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.386148][ T36] audit: type=1326 audit(1783841299.873:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.386189][ T36] audit: type=1326 audit(1783841299.873:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.386230][ T36] audit: type=1326 audit(1783841299.873:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.387038][ T36] audit: type=1326 audit(1783841299.873:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.387082][ T36] audit: type=1326 audit(1783841299.873:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.387120][ T36] audit: type=1326 audit(1783841299.873:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.395683][ T36] audit: type=1326 audit(1783841299.883:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.395730][ T36] audit: type=1326 audit(1783841299.883:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.2.1240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 480.798709][T10182] tipc: Disabling bearer [ 480.830705][ T5606] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 480.981896][ T5606] usb 7-1: Using ep0 maxpacket: 32 [ 480.989799][ T5606] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 480.989824][ T5606] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 480.989842][ T5606] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 480.989860][ T5606] usb 7-1: config 1 has no interface number 0 [ 480.992819][ T5606] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.992849][ T5606] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 480.992888][ T5606] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 480.992910][ T5606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.186434][ T5606] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 481.320941][ T5606] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 482.354183][ T821] usb 7-1: USB disconnect, device number 22 [ 482.357031][ T821] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 482.920488][ T821] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 482.961489][T10224] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 483.008870][T10226] FAULT_INJECTION: forcing a failure. [ 483.008870][T10226] name failslab, interval 1, probability 0, space 0, times 0 [ 483.008905][T10226] CPU: 1 UID: 0 PID: 10226 Comm: syz.2.1249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 483.008932][T10226] Tainted: [L]=SOFTLOCKUP [ 483.008940][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.008952][T10226] Call Trace: [ 483.008960][T10226] [ 483.008969][T10226] dump_stack_lvl+0xe8/0x150 [ 483.009004][T10226] should_fail_ex+0x467/0x600 [ 483.009037][T10226] should_failslab+0xa8/0x100 [ 483.009061][T10226] __kmalloc_noprof+0xfe/0x780 [ 483.009081][T10226] ? tomoyo_encode+0x2ad/0x570 [ 483.009103][T10226] ? tomoyo_encode+0x2ad/0x570 [ 483.009130][T10226] tomoyo_encode+0x2ad/0x570 [ 483.009156][T10226] tomoyo_realpath_from_path+0x5fa/0x640 [ 483.009187][T10226] ? tomoyo_path_number_perm+0x219/0x5f0 [ 483.009217][T10226] tomoyo_path_number_perm+0x246/0x5f0 [ 483.009250][T10226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 483.009290][T10226] ? __lock_acquire+0x683/0x2ce0 [ 483.009324][T10226] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 483.009352][T10226] ? hook_file_ioctl+0x1f3/0x600 [ 483.009377][T10226] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.009423][T10226] ? __fget_files+0x2a/0x420 [ 483.009445][T10226] ? __fget_files+0x2a/0x420 [ 483.009463][T10226] ? __fget_files+0x3a8/0x420 [ 483.009480][T10226] ? __fget_files+0x2a/0x420 [ 483.009502][T10226] security_file_ioctl+0xc3/0x2a0 [ 483.009524][T10226] __se_sys_ioctl+0x47/0x170 [ 483.009548][T10226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.009570][T10226] do_syscall_64+0x174/0x580 [ 483.009597][T10226] ? trace_irq_disable+0x3b/0x140 [ 483.009616][T10226] ? clear_bhb_loop+0x40/0x90 [ 483.009643][T10226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.009663][T10226] RIP: 0033:0x7f2b370cde59 [ 483.009681][T10226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.009696][T10226] RSP: 002b:00007f2b35326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.009717][T10226] RAX: ffffffffffffffda RBX: 00007f2b37355fa0 RCX: 00007f2b370cde59 [ 483.009731][T10226] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000004 [ 483.009743][T10226] RBP: 00007f2b35326090 R08: 0000000000000000 R09: 0000000000000000 [ 483.009756][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.009767][T10226] R13: 00007f2b37356038 R14: 00007f2b37355fa0 R15: 00007ffe00664f28 [ 483.009797][T10226] [ 483.009837][T10226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.286061][ T821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.286084][ T821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.287337][ T821] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 483.287364][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.287382][ T821] usb 2-1: SerialNumber: syz [ 483.456916][ T821] usb 2-1: 0:2 : does not exist [ 483.580979][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1251'. [ 483.753147][ T5704] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 483.787174][T10240] loop0: detected capacity change from 0 to 7 [ 483.928912][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 483.993376][ T5704] usb 3-1: config 0 has no interfaces? [ 483.993412][ T5704] usb 3-1: New USB device found, idVendor=14b0, idProduct=474c, bcdDevice= 0.00 [ 483.993434][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.998419][ T821] usb 2-1: USB disconnect, device number 44 [ 484.029343][ T5704] usb 3-1: config 0 descriptor?? [ 484.219379][T10240] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 484.219406][T10240] loop0: partition table partially beyond EOD, truncated [ 484.220163][T10240] loop0: p1 size 2989602745 extends beyond EOD, truncated [ 484.620247][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.699702][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.712675][ T5704] usb 3-1: USB disconnect, device number 49 [ 484.978829][T10258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1256'. [ 485.103180][ T5770] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 485.718705][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.718737][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.718774][ T5770] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 485.718796][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.160051][ T5770] usb 4-1: config 0 descriptor?? [ 487.364570][ T8222] udevd[8222]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 487.428723][T10280] overlayfs: missing 'lowerdir' [ 487.726428][ T5770] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 487.726451][ T5770] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 487.726466][ T5770] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 487.726481][ T5770] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 487.726495][ T5770] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 487.726509][ T5770] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 487.726523][ T5770] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 487.828620][ T5770] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 487.978274][ T5731] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 488.146575][ T5731] usb 7-1: Using ep0 maxpacket: 32 [ 488.154964][ T5731] usb 7-1: unable to get BOS descriptor or descriptor too short [ 488.159645][ T5731] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 488.159669][ T5731] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 488.159738][ T5731] usb 7-1: config 14 has no interface number 0 [ 488.159755][ T5731] usb 7-1: config 14 has no interface number 1 [ 488.159817][ T5731] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 488.159840][ T5731] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 488.159864][ T5731] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 488.159889][ T5731] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 488.159916][ T5731] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 488.159948][ T5731] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.159973][ T5731] usb 7-1: config 14 interface 57 has no altsetting 0 [ 488.159991][ T5731] usb 7-1: config 14 interface 228 has no altsetting 0 [ 488.172054][ T5731] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 488.172083][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.172102][ T5731] usb 7-1: Product: syz [ 488.172128][ T5731] usb 7-1: Manufacturer: syz [ 488.172142][ T5731] usb 7-1: SerialNumber: syz [ 488.570498][ T5770] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 488.570548][ T5770] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 488.574269][ T5770] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 488.604194][ T5770] usb 4-1: USB disconnect, device number 51 [ 488.662891][ T5731] legousbtower 7-1:14.57: interrupt endpoints not found [ 489.059072][ T5731] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 489.092533][ T5731] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 489.094101][T10302] FAULT_INJECTION: forcing a failure. [ 489.094101][T10302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.094135][T10302] CPU: 1 UID: 0 PID: 10302 Comm: syz.1.1270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.094162][T10302] Tainted: [L]=SOFTLOCKUP [ 489.094170][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.094182][T10302] Call Trace: [ 489.094191][T10302] [ 489.094199][T10302] dump_stack_lvl+0xe8/0x150 [ 489.094235][T10302] should_fail_ex+0x467/0x600 [ 489.094278][T10302] _copy_to_user+0x31/0xb0 [ 489.094302][T10302] __se_sys_file_getattr+0x43a/0x5b0 [ 489.094330][T10302] ? __pfx___se_sys_file_getattr+0x10/0x10 [ 489.094353][T10302] ? fput+0xa0/0xd0 [ 489.094382][T10302] ? ksys_write+0x248/0x270 [ 489.094417][T10302] ? __x64_sys_file_getattr+0x20/0xc0 [ 489.094439][T10302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.094461][T10302] do_syscall_64+0x174/0x580 [ 489.094496][T10302] ? trace_irq_disable+0x3b/0x140 [ 489.094515][T10302] ? clear_bhb_loop+0x40/0x90 [ 489.094540][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.094560][T10302] RIP: 0033:0x7fa75663de59 [ 489.094577][T10302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.094594][T10302] RSP: 002b:00007fa754896028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d4 [ 489.094615][T10302] RAX: ffffffffffffffda RBX: 00007fa7568c5fa0 RCX: 00007fa75663de59 [ 489.094629][T10302] RDX: 0000200000006040 RSI: 0000000000000000 RDI: 0000000000000003 [ 489.094642][T10302] RBP: 00007fa754896090 R08: 0000000000001000 R09: 0000000000000000 [ 489.094655][T10302] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 489.094668][T10302] R13: 00007fa7568c6038 R14: 00007fa7568c5fa0 R15: 00007ffc36ecb0d8 [ 489.094699][T10302] [ 489.670459][ T5730] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 489.710469][ T821] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 489.760558][ T5704] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 489.820448][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 489.822928][ T5770] usb 7-1: USB disconnect, device number 23 [ 489.823047][ T5730] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 489.823068][ T5730] usb 4-1: config 0 has no interface number 0 [ 489.823109][ T5730] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 489.823131][ T5730] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 489.829467][ T5730] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 489.829494][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.829513][ T5730] usb 4-1: Product: syz [ 489.829527][ T5730] usb 4-1: Manufacturer: syz [ 489.829540][ T5730] usb 4-1: SerialNumber: syz [ 489.917338][ T5730] usb 4-1: config 0 descriptor?? [ 489.918098][T10306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.918220][T10306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.920852][ T5770] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 489.957849][ T821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 489.971783][ T821] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 489.971810][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.971828][ T821] usb 2-1: Product: syz [ 489.971842][ T821] usb 2-1: Manufacturer: syz [ 489.971856][ T821] usb 2-1: SerialNumber: syz [ 490.013928][ T5704] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 490.013955][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.013972][ T5704] usb 3-1: config 0 has no interface number 0 [ 490.014070][ T5704] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 490.014098][ T5704] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 490.019274][ T5704] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 490.019302][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.019321][ T5704] usb 3-1: Product: syz [ 490.019335][ T5704] usb 3-1: Manufacturer: syz [ 490.019348][ T5704] usb 3-1: SerialNumber: syz [ 490.104530][ T5704] usb 3-1: config 0 descriptor?? [ 490.105450][T10317] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 490.130977][T10306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 490.131152][T10306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 490.185798][ T5704] vmk80xx 3-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 490.200601][ T5704] vmk80xx 3-1:0.6: probe with driver vmk80xx failed with error -22 [ 490.303769][T10322] overlayfs: missing 'lowerdir' [ 490.426759][ T5731] usb 3-1: USB disconnect, device number 50 [ 490.458198][ T5730] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 490.661128][ T5730] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 164 [ 490.703548][ T821] option 2-1:4.0: GSM modem (1-port) converter detected [ 490.733267][ T821] usb 2-1: USB disconnect, device number 45 [ 490.736738][ T821] option 2-1:4.0: device disconnected [ 492.883157][T10330] overlayfs: failed to clone upperpath [ 492.949004][ T5730] usb 4-1: USB disconnect, device number 52 [ 493.140451][ T5606] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 493.225000][T10341] vlan1: entered promiscuous mode [ 493.297857][ T5606] usb 3-1: Using ep0 maxpacket: 32 [ 493.320149][ T5606] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 493.320176][ T5606] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 493.320197][ T5606] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 493.320216][ T5606] usb 3-1: config 1 has no interface number 0 [ 493.320269][ T5606] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.356624][ T5606] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 493.356678][ T5606] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 493.356701][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.426032][ T5606] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 493.624222][ T5606] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 493.800478][ T5704] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 493.950536][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 493.953262][ T5704] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 493.953287][ T5704] usb 2-1: config 0 has no interface number 0 [ 493.956606][ T5704] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=30.62 [ 493.956640][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.956660][ T5704] usb 2-1: Product: syz [ 493.956673][ T5704] usb 2-1: Manufacturer: syz [ 493.956687][ T5704] usb 2-1: SerialNumber: syz [ 494.031586][ T5704] usb 2-1: config 0 descriptor?? [ 494.278588][ T5704] usb 2-1: selecting invalid altsetting 3 [ 494.278613][ T5704] comedi comedi5: could not set alternate setting 3 in high speed [ 494.278629][ T5704] usbduxsigma 2-1:0.238: driver 'usbduxsigma' failed to auto-configure device. [ 494.363179][ T5849] usb 3-1: USB disconnect, device number 51 [ 494.376707][ T5849] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 494.380389][ T5704] usbduxsigma 2-1:0.238: probe with driver usbduxsigma failed with error -22 [ 494.476042][T10352] input: syz0 as /devices/virtual/input/input16 [ 494.486066][ T5704] usb 2-1: USB disconnect, device number 46 [ 494.492613][T10352] input: failed to attach handler leds to device input16, error: -6 [ 495.165299][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 498.262633][ T5731] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 498.454242][ T5731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.454268][ T5731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.455432][ T5731] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 498.455455][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.455473][ T5731] usb 4-1: SerialNumber: syz [ 498.829870][ T5731] usb 4-1: 0:2 : does not exist [ 498.846394][T10425] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 498.846415][T10425] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1311'. [ 498.847957][T10424] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 498.847972][T10424] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1311'. [ 498.970514][ T5704] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 499.087902][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1315'. [ 499.089426][T10438] loop0: detected capacity change from 0 to 7 [ 499.133547][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 499.560745][ T5704] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 499.560771][ T5704] usb 3-1: config 0 has no interface number 0 [ 499.620726][ T5704] usb 3-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=30.62 [ 499.620754][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.620773][ T5704] usb 3-1: Product: syz [ 499.620787][ T5704] usb 3-1: Manufacturer: syz [ 499.620800][ T5704] usb 3-1: SerialNumber: syz [ 499.670845][ T5704] usb 3-1: config 0 descriptor?? [ 499.690485][ T5731] usb 4-1: USB disconnect, device number 53 [ 500.888472][ T5704] usb 3-1: selecting invalid altsetting 3 [ 500.888495][ T5704] comedi comedi5: could not set alternate setting 3 in high speed [ 500.888510][ T5704] usbduxsigma 3-1:0.238: driver 'usbduxsigma' failed to auto-configure device. [ 500.930790][T10438] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 500.930814][T10438] loop0: partition table partially beyond EOD, truncated [ 500.931176][T10438] loop0: p1 size 2989602745 extends beyond EOD, truncated [ 501.091449][ T5704] usbduxsigma 3-1:0.238: probe with driver usbduxsigma failed with error -22 [ 501.149840][ T5704] usb 3-1: USB disconnect, device number 52 [ 501.320437][ T5730] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 501.357369][ T8222] udevd[8222]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 501.374925][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.374992][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.451050][ T5730] usb 2-1: device descriptor read/64, error -71 [ 501.830529][ T5730] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 501.961911][ T5730] usb 2-1: device descriptor read/64, error -71 [ 502.088995][ T5730] usb usb2-port1: attempt power cycle [ 502.791054][ T5730] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 502.813287][ T5730] usb 2-1: device descriptor read/8, error -71 [ 503.161261][ T5730] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 503.217360][ T5730] usb 2-1: device descriptor read/8, error -71 [ 503.526486][ T5730] usb usb2-port1: unable to enumerate USB device [ 503.884589][ T5731] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 504.091393][ T5731] usb 3-1: unable to get BOS descriptor or descriptor too short [ 504.094962][ T5731] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 504.094989][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.095008][ T5731] usb 3-1: Product: syz [ 504.095019][ T5731] usb 3-1: Manufacturer: syz [ 504.095026][ T5731] usb 3-1: SerialNumber: syz [ 504.188384][ T5731] usb 3-1: selecting invalid altsetting 1 [ 504.189367][ T5731] usb 3-1: unit 6 not found! [ 504.329413][ T5731] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 504.352889][ T5731] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 504.359404][ T5731] usb 3-1: selecting invalid altsetting 1 [ 504.360142][ T5731] usb 3-1: unit 6 not found! [ 504.393090][ T5731] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 504.397830][ T5731] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 504.423831][ T5731] usb 3-1: selecting invalid altsetting 1 [ 504.424601][ T5731] usb 3-1: unit 6 not found! [ 504.425117][ T5731] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 504.510749][ T5606] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 504.661082][ T5606] usb 2-1: Using ep0 maxpacket: 8 [ 504.664017][ T5606] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 504.664041][ T5606] usb 2-1: config 0 has no interface number 0 [ 504.672310][ T5606] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=30.62 [ 504.672337][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.672355][ T5606] usb 2-1: Product: syz [ 504.672369][ T5606] usb 2-1: Manufacturer: syz [ 504.672382][ T5606] usb 2-1: SerialNumber: syz [ 504.678205][ T5606] usb 2-1: config 0 descriptor?? [ 504.776445][ T5606] usb 2-1: selecting invalid altsetting 3 [ 504.776466][ T5606] comedi comedi5: could not set alternate setting 3 in high speed [ 504.776480][ T5606] usbduxsigma 2-1:0.238: driver 'usbduxsigma' failed to auto-configure device. [ 504.788563][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 504.833795][ T5606] usbduxsigma 2-1:0.238: probe with driver usbduxsigma failed with error -22 [ 504.924668][ T5731] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 504.941837][ T5731] usb 3-1: USB disconnect, device number 53 [ 504.949947][ T5704] usb 2-1: USB disconnect, device number 51 [ 505.073238][ T8222] udevd[8222]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.274163][T10504] netlink: 'syz.6.1334': attribute type 3 has an invalid length. [ 508.690456][ T5606] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 508.840502][ T5606] usb 7-1: Using ep0 maxpacket: 16 [ 508.856596][ T5606] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 508.856626][ T5606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.856645][ T5606] usb 7-1: Product: syz [ 508.856659][ T5606] usb 7-1: Manufacturer: syz [ 508.856673][ T5606] usb 7-1: SerialNumber: syz [ 508.912729][ T5606] usb 7-1: config 0 descriptor?? [ 509.118367][ T5606] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 509.118465][ T5606] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 509.238435][T10568] FAULT_INJECTION: forcing a failure. [ 509.238435][T10568] name failslab, interval 1, probability 0, space 0, times 0 [ 509.238471][T10568] CPU: 0 UID: 0 PID: 10568 Comm: syz.1.1350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 509.238498][T10568] Tainted: [L]=SOFTLOCKUP [ 509.238505][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.238518][T10568] Call Trace: [ 509.238525][T10568] [ 509.238534][T10568] dump_stack_lvl+0xe8/0x150 [ 509.238573][T10568] should_fail_ex+0x467/0x600 [ 509.238606][T10568] should_failslab+0xa8/0x100 [ 509.238630][T10568] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 509.238652][T10568] ? __get_vm_area_node+0x136/0x300 [ 509.238681][T10568] ? __get_vm_area_node+0x136/0x300 [ 509.238714][T10568] __get_vm_area_node+0x136/0x300 [ 509.238745][T10568] __vmalloc_node_range_noprof+0x358/0x1730 [ 509.238776][T10568] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.238804][T10568] ? is_bpf_text_address+0x26/0x2b0 [ 509.238842][T10568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 509.238871][T10568] ? is_bpf_text_address+0x26/0x2b0 [ 509.238894][T10568] ? kernel_text_address+0xa5/0xe0 [ 509.238925][T10568] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.238944][T10568] __vmalloc_noprof+0xd2/0x120 [ 509.238973][T10568] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.238995][T10568] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.239015][T10568] ? bpf_prog_alloc+0x2a/0x1a0 [ 509.239037][T10568] bpf_prog_alloc+0x3c/0x1a0 [ 509.239059][T10568] bpf_prog_load+0x7f8/0x1c00 [ 509.239091][T10568] ? __pfx_bpf_prog_load+0x10/0x10 [ 509.239134][T10568] __sys_bpf+0xd0d/0xd90 [ 509.239162][T10568] ? __pfx___sys_bpf+0x10/0x10 [ 509.239184][T10568] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 509.239218][T10568] ? rt_mutex_slowunlock+0x219/0x460 [ 509.239258][T10568] ? ksys_write+0x248/0x270 [ 509.239283][T10568] ? __pfx_ksys_write+0x10/0x10 [ 509.239312][T10568] __x64_sys_bpf+0xba/0xd0 [ 509.239340][T10568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.239362][T10568] do_syscall_64+0x174/0x580 [ 509.239391][T10568] ? trace_irq_disable+0x3b/0x140 [ 509.239409][T10568] ? clear_bhb_loop+0x40/0x90 [ 509.239432][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.239451][T10568] RIP: 0033:0x7fa75663de59 [ 509.239468][T10568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.239484][T10568] RSP: 002b:00007fa754896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.239505][T10568] RAX: ffffffffffffffda RBX: 00007fa7568c5fa0 RCX: 00007fa75663de59 [ 509.239520][T10568] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 509.239533][T10568] RBP: 00007fa754896090 R08: 0000000000000000 R09: 0000000000000000 [ 509.239545][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.239556][T10568] R13: 00007fa7568c6038 R14: 00007fa7568c5fa0 R15: 00007ffc36ecb0d8 [ 509.239587][T10568] [ 509.270782][T10568] syz.1.1350: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 509.271185][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.1.1350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 509.271212][T10568] Tainted: [L]=SOFTLOCKUP [ 509.271220][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.271232][T10568] Call Trace: [ 509.271240][T10568] [ 509.271247][T10568] dump_stack_lvl+0xe8/0x150 [ 509.271281][T10568] warn_alloc+0x24c/0x270 [ 509.271316][T10568] ? __pfx_warn_alloc+0x10/0x10 [ 509.271343][T10568] ? __get_vm_area_node+0x2af/0x300 [ 509.271377][T10568] __vmalloc_node_range_noprof+0x37d/0x1730 [ 509.271413][T10568] ? is_bpf_text_address+0x26/0x2b0 [ 509.271453][T10568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 509.271481][T10568] ? is_bpf_text_address+0x26/0x2b0 [ 509.271504][T10568] ? kernel_text_address+0xa5/0xe0 [ 509.271528][T10568] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.271546][T10568] __vmalloc_noprof+0xd2/0x120 [ 509.271574][T10568] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.271596][T10568] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.271614][T10568] ? bpf_prog_alloc+0x2a/0x1a0 [ 509.271636][T10568] bpf_prog_alloc+0x3c/0x1a0 [ 509.271656][T10568] bpf_prog_load+0x7f8/0x1c00 [ 509.271686][T10568] ? __pfx_bpf_prog_load+0x10/0x10 [ 509.271728][T10568] __sys_bpf+0xd0d/0xd90 [ 509.271753][T10568] ? __pfx___sys_bpf+0x10/0x10 [ 509.271773][T10568] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 509.271805][T10568] ? rt_mutex_slowunlock+0x219/0x460 [ 509.271844][T10568] ? ksys_write+0x248/0x270 [ 509.271867][T10568] ? __pfx_ksys_write+0x10/0x10 [ 509.271894][T10568] __x64_sys_bpf+0xba/0xd0 [ 509.271922][T10568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.271943][T10568] do_syscall_64+0x174/0x580 [ 509.271968][T10568] ? trace_irq_disable+0x3b/0x140 [ 509.271986][T10568] ? clear_bhb_loop+0x40/0x90 [ 509.272008][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.272027][T10568] RIP: 0033:0x7fa75663de59 [ 509.272045][T10568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.272060][T10568] RSP: 002b:00007fa754896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.272080][T10568] RAX: ffffffffffffffda RBX: 00007fa7568c5fa0 RCX: 00007fa75663de59 [ 509.272095][T10568] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 509.272107][T10568] RBP: 00007fa754896090 R08: 0000000000000000 R09: 0000000000000000 [ 509.272120][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.272131][T10568] R13: 00007fa7568c6038 R14: 00007fa7568c5fa0 R15: 00007ffc36ecb0d8 [ 509.272161][T10568] [ 509.274880][T10568] Mem-Info: [ 509.274892][T10568] active_anon:1714 inactive_anon:23975 isolated_anon:0 [ 509.274892][T10568] active_file:25104 inactive_file:37155 isolated_file:0 [ 509.274892][T10568] unevictable:784 dirty:420 writeback:0 [ 509.274892][T10568] slab_reclaimable:13105 slab_unreclaimable:107242 [ 509.274892][T10568] mapped:33045 shmem:19275 pagetables:1662 [ 509.274892][T10568] sec_pagetables:0 bounce:0 [ 509.274892][T10568] kernel_misc_reclaimable:0 [ 509.274892][T10568] free:1273087 free_pcp:9334 free_cma:0 [ 509.274943][T10568] Node 0 active_anon:6856kB inactive_anon:95900kB active_file:100224kB inactive_file:148620kB unevictable:1600kB isolated(anon):0kB isolated(file):0kB mapped:132180kB dirty:1680kB writeback:0kB shmem:75564kB kernel_stack:13912kB pagetables:6476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 509.274992][T10568] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 509.275038][T10568] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.275093][T10568] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 509.275125][T10568] Node 0 DMA32 free:1140188kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6856kB inactive_anon:95900kB active_file:100224kB inactive_file:148620kB unevictable:1600kB writepending:1680kB zspages:0kB present:3129332kB managed:2560748kB mlocked:0kB bounce:0kB free_pcp:37320kB local_pcp:23040kB free_cma:0kB [ 509.275182][T10568] lowmem_reserve[]: 0 0 1 1 1 [ 509.275211][T10568] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 509.275261][T10568] lowmem_reserve[]: 0 0 0 0 0 [ 509.275291][T10568] Node 1 Normal free:3936800kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.275369][T10568] lowmem_reserve[]: 0 0 0 0 0 [ 509.275399][T10568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 509.275508][T10568] Node 0 DMA32: 429*4kB (UME) 427*8kB (UME) 77*16kB (UME) 140*32kB (UME) 81*64kB (UME) 197*128kB (UME) 103*256kB (UME) 59*512kB (UME) 20*1024kB (UME) 5*2048kB (ME) 247*4096kB (UM) = 1140252kB [ 509.275647][T10568] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 509.275735][T10568] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 6*16kB (UM) 7*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936800kB [ 509.275873][T10568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.275889][T10568] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 509.275904][T10568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.275920][T10568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 509.275934][T10568] 81531 total pagecache pages [ 509.275946][T10568] 0 pages in swap cache [ 509.275952][T10568] Free swap = 124996kB [ 509.275960][T10568] Total swap = 124996kB [ 509.275968][T10568] 2097051 pages RAM [ 509.275975][T10568] 0 pages HighMem/MovableOnly [ 509.275982][T10568] 424784 pages reserved [ 509.275989][T10568] 0 pages cma reserved [ 509.417731][ T5716] usb 7-1: USB disconnect, device number 24 [ 511.108120][T10581] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1353'. [ 512.479401][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 512.857381][T10604] overlayfs: missing 'lowerdir' [ 514.006358][T10611] syz_tun: entered promiscuous mode [ 514.025849][T10611] vlan2: entered promiscuous mode [ 514.051156][T10618] FAULT_INJECTION: forcing a failure. [ 514.051156][T10618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.051191][T10618] CPU: 1 UID: 0 PID: 10618 Comm: syz.2.1367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.051216][T10618] Tainted: [L]=SOFTLOCKUP [ 514.051223][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.051234][T10618] Call Trace: [ 514.051241][T10618] [ 514.051247][T10618] dump_stack_lvl+0xe8/0x150 [ 514.051274][T10618] should_fail_ex+0x467/0x600 [ 514.051299][T10618] _copy_to_user+0x31/0xb0 [ 514.051316][T10618] simple_read_from_buffer+0xe1/0x170 [ 514.051335][T10618] proc_fail_nth_read+0x1be/0x230 [ 514.051352][T10618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.051373][T10618] ? rw_verify_area+0x250/0x4d0 [ 514.051391][T10618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.051404][T10618] vfs_read+0x219/0xa90 [ 514.051428][T10618] ? __pfx_vfs_read+0x10/0x10 [ 514.051446][T10618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.051470][T10618] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.051493][T10618] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.051516][T10618] ? mutex_lock_nested+0x152/0x1d0 [ 514.051545][T10618] ? fdget_pos+0x252/0x320 [ 514.051568][T10618] ksys_read+0x156/0x270 [ 514.051586][T10618] ? __pfx_ksys_read+0x10/0x10 [ 514.051607][T10618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.051622][T10618] do_syscall_64+0x174/0x580 [ 514.051642][T10618] ? trace_irq_disable+0x3b/0x140 [ 514.051656][T10618] ? clear_bhb_loop+0x40/0x90 [ 514.051673][T10618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.051686][T10618] RIP: 0033:0x7f2b3708e68e [ 514.051700][T10618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.051713][T10618] RSP: 002b:00007f2b35325fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.051730][T10618] RAX: ffffffffffffffda RBX: 00007f2b353266c0 RCX: 00007f2b3708e68e [ 514.051740][T10618] RDX: 000000000000000f RSI: 00007f2b353260a0 RDI: 0000000000000003 [ 514.051750][T10618] RBP: 00007f2b35326090 R08: 0000000000000000 R09: 0000000000000000 [ 514.051758][T10618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.051768][T10618] R13: 00007f2b37356038 R14: 00007f2b37355fa0 R15: 00007ffe00664f28 [ 514.051790][T10618] [ 514.310575][ T5704] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 514.762006][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 514.767292][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 514.767324][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.767361][ T5704] usb 2-1: New USB device found, idVendor=14b0, idProduct=474c, bcdDevice= 0.00 [ 514.767382][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.788099][ T5704] usb 2-1: config 0 descriptor?? [ 515.088619][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1368'. [ 516.015692][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.017827][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.083519][ T5704] usbhid 2-1:0.0: can't add hid device: -71 [ 516.083631][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 516.102171][ T5704] usb 2-1: USB disconnect, device number 52 [ 518.309191][T10654] overlayfs: missing 'lowerdir' [ 519.410428][ T5704] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 519.592604][ T5704] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.592638][ T5704] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 519.592677][ T5704] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.592706][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.606464][T10657] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 519.687297][ T5704] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 520.032502][T10673] FAULT_INJECTION: forcing a failure. [ 520.032502][T10673] name failslab, interval 1, probability 0, space 0, times 0 [ 520.032539][T10673] CPU: 1 UID: 0 PID: 10673 Comm: syz.1.1384 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.032570][T10673] Tainted: [L]=SOFTLOCKUP [ 520.032578][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.032597][T10673] Call Trace: [ 520.032605][T10673] [ 520.032613][T10673] dump_stack_lvl+0xe8/0x150 [ 520.032648][T10673] should_fail_ex+0x467/0x600 [ 520.032680][T10673] should_failslab+0xa8/0x100 [ 520.032703][T10673] kmem_cache_alloc_node_noprof+0xae/0x670 [ 520.032734][T10673] ? __alloc_skb+0x1d7/0x7a0 [ 520.032761][T10673] ? __alloc_skb+0x1d7/0x7a0 [ 520.032792][T10673] __alloc_skb+0x1d7/0x7a0 [ 520.032821][T10673] netlink_sendmsg+0x5d4/0xb40 [ 520.032851][T10673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.032873][T10673] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 520.032898][T10673] ? rcu_is_watching+0x15/0xb0 [ 520.032917][T10673] ? trace_hrtimer_start+0x82/0x200 [ 520.032947][T10673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.032965][T10673] sock_sendmsg_nosec+0x13a/0x180 [ 520.032993][T10673] ____sys_sendmsg+0x565/0x870 [ 520.033012][T10673] ? __might_fault+0xaf/0x130 [ 520.033037][T10673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.033065][T10673] ? import_iovec+0x73/0xa0 [ 520.033086][T10673] ___sys_sendmsg+0x2a5/0x360 [ 520.033105][T10673] ? __lock_acquire+0x683/0x2ce0 [ 520.033129][T10673] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.033179][T10673] ? __fget_files+0x2a/0x420 [ 520.033197][T10673] ? __fget_files+0x3a8/0x420 [ 520.033224][T10673] __x64_sys_sendmsg+0x1b7/0x290 [ 520.033246][T10673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.033280][T10673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.033302][T10673] do_syscall_64+0x174/0x580 [ 520.033330][T10673] ? trace_irq_disable+0x3b/0x140 [ 520.033348][T10673] ? clear_bhb_loop+0x40/0x90 [ 520.033372][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.033391][T10673] RIP: 0033:0x7fa75663de59 [ 520.033410][T10673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.033426][T10673] RSP: 002b:00007fa754896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.033447][T10673] RAX: ffffffffffffffda RBX: 00007fa7568c5fa0 RCX: 00007fa75663de59 [ 520.033462][T10673] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 520.033476][T10673] RBP: 00007fa754896090 R08: 0000000000000000 R09: 0000000000000000 [ 520.033488][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.033501][T10673] R13: 00007fa7568c6038 R14: 00007fa7568c5fa0 R15: 00007ffc36ecb0d8 [ 520.033532][T10673] [ 520.455451][ T5704] usb 7-1: USB disconnect, device number 25 [ 520.535560][ T8222] udevd[8222]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.610570][ T5606] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 520.610692][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 520.697618][T10679] FAULT_INJECTION: forcing a failure. [ 520.697618][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 520.697663][T10679] CPU: 1 UID: 0 PID: 10679 Comm: syz.2.1387 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.697690][T10679] Tainted: [L]=SOFTLOCKUP [ 520.697697][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.697711][T10679] Call Trace: [ 520.697719][T10679] [ 520.697727][T10679] dump_stack_lvl+0xe8/0x150 [ 520.697762][T10679] should_fail_ex+0x467/0x600 [ 520.697795][T10679] should_failslab+0xa8/0x100 [ 520.697819][T10679] __kmalloc_cache_noprof+0xa0/0x6b0 [ 520.697839][T10679] ? prog_array_map_alloc+0x51/0x200 [ 520.697899][T10679] ? prog_array_map_alloc+0x51/0x200 [ 520.697932][T10679] prog_array_map_alloc+0x51/0x200 [ 520.697961][T10679] map_create+0x110f/0x1e50 [ 520.697989][T10679] ? __pfx_map_create+0x10/0x10 [ 520.698017][T10679] ? bpf_lsm_bpf+0x9/0x20 [ 520.698034][T10679] ? security_bpf+0x7e/0x2d0 [ 520.698058][T10679] __sys_bpf+0xaea/0xd90 [ 520.698085][T10679] ? __pfx___sys_bpf+0x10/0x10 [ 520.698106][T10679] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 520.698139][T10679] ? rt_mutex_slowunlock+0x219/0x460 [ 520.698178][T10679] ? ksys_write+0x248/0x270 [ 520.698203][T10679] ? __pfx_ksys_write+0x10/0x10 [ 520.698229][T10679] __x64_sys_bpf+0xba/0xd0 [ 520.698257][T10679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.698278][T10679] do_syscall_64+0x174/0x580 [ 520.698305][T10679] ? trace_irq_disable+0x3b/0x140 [ 520.698322][T10679] ? clear_bhb_loop+0x40/0x90 [ 520.698343][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.698362][T10679] RIP: 0033:0x7f2b370cde59 [ 520.698380][T10679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.698396][T10679] RSP: 002b:00007f2b35326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.698418][T10679] RAX: ffffffffffffffda RBX: 00007f2b37355fa0 RCX: 00007f2b370cde59 [ 520.698432][T10679] RDX: 0000000000000050 RSI: 0000200000001500 RDI: 0000000000000000 [ 520.698444][T10679] RBP: 00007f2b35326090 R08: 0000000000000000 R09: 0000000000000000 [ 520.698462][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.698474][T10679] R13: 00007f2b37356038 R14: 00007f2b37355fa0 R15: 00007ffe00664f28 [ 520.698505][T10679] [ 520.760556][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 520.760703][ T5606] usb 4-1: Using ep0 maxpacket: 32 [ 520.813902][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 520.813933][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.813972][ T10] usb 2-1: New USB device found, idVendor=14b0, idProduct=474c, bcdDevice= 0.00 [ 520.813992][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.816175][ T5606] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 520.816198][ T5606] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 520.816218][ T5606] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 520.816238][ T5606] usb 4-1: config 1 has no interface number 0 [ 520.816277][ T5606] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.816302][ T5606] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 520.816338][ T5606] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 520.816358][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.833301][ T10] usb 2-1: config 0 descriptor?? [ 520.882583][ T5606] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 521.214560][ T5606] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 522.068369][ T5849] usb 4-1: USB disconnect, device number 54 [ 522.101184][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.101881][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.184848][ T5849] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 522.187259][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 522.188029][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 522.200900][ T10] usb 2-1: USB disconnect, device number 53 [ 522.354989][T10696] overlayfs: missing 'lowerdir' [ 522.880472][ T5606] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 523.107350][ T5606] usb 3-1: device descriptor read/64, error -71 [ 523.156218][T10710] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 523.340479][ T5606] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 523.510438][ T5606] usb 3-1: device descriptor read/64, error -71 [ 523.512717][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 523.620994][ T5606] usb usb3-port1: attempt power cycle [ 523.672273][T10725] geneve3: entered promiscuous mode [ 523.680587][ T5704] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 523.768312][T10728] bpf: Bad value for 'uid' [ 523.820577][ T5704] usb 7-1: device descriptor read/64, error -71 [ 523.960423][ T5606] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 523.980986][ T5606] usb 3-1: device descriptor read/8, error -71 [ 524.040567][ T821] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 524.080772][ T5704] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 524.143779][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'. [ 524.150227][T10732] syzkaller1: entered promiscuous mode [ 524.150252][T10732] syzkaller1: entered allmulticast mode [ 524.192269][ T821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 524.194976][ T821] usb 4-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 524.194992][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.195003][ T821] usb 4-1: Product: syz [ 524.195010][ T821] usb 4-1: Manufacturer: syz [ 524.195017][ T821] usb 4-1: SerialNumber: syz [ 524.211596][ T5704] usb 7-1: device descriptor read/64, error -71 [ 524.230376][ T5606] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 524.256155][ T5606] usb 3-1: device descriptor read/8, error -71 [ 524.330952][ T5704] usb usb7-port1: attempt power cycle [ 524.360722][ T5606] usb usb3-port1: unable to enumerate USB device [ 524.522090][ T821] option 4-1:4.0: GSM modem (1-port) converter detected [ 524.539956][ T821] usb 4-1: USB disconnect, device number 55 [ 524.543852][ T821] option 4-1:4.0: device disconnected [ 524.700431][ T5704] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 524.735300][ T5704] usb 7-1: device descriptor read/8, error -71 [ 524.820505][ T5606] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 524.971185][ T5704] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 524.971579][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 524.973953][ T5606] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 524.973978][ T5606] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 524.973998][ T5606] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 524.974011][ T5606] usb 2-1: config 1 has no interface number 0 [ 524.974036][ T5606] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.974049][ T5606] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 524.974070][ T5606] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 524.974082][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.030870][ T5704] usb 7-1: device descriptor read/8, error -71 [ 525.118287][ T5606] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 525.140876][ T5704] usb usb7-port1: unable to enumerate USB device [ 525.372974][ T5606] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 525.813363][ T5731] usb 2-1: USB disconnect, device number 54 [ 525.830093][ T5731] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 527.390405][T10768] FAULT_INJECTION: forcing a failure. [ 527.390405][T10768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.390428][T10768] CPU: 1 UID: 0 PID: 10768 Comm: syz.2.1415 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.390443][T10768] Tainted: [L]=SOFTLOCKUP [ 527.390447][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.390454][T10768] Call Trace: [ 527.390458][T10768] [ 527.390463][T10768] dump_stack_lvl+0xe8/0x150 [ 527.390491][T10768] should_fail_ex+0x467/0x600 [ 527.390509][T10768] _copy_from_user+0x2d/0xb0 [ 527.390521][T10768] kstrtouint_from_user+0xd6/0x180 [ 527.390537][T10768] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 527.390550][T10768] ? __lock_acquire+0x683/0x2ce0 [ 527.390569][T10768] proc_fail_nth_write+0x8e/0x210 [ 527.390580][T10768] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 527.390594][T10768] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 527.390604][T10768] vfs_write+0x29f/0xbb0 [ 527.390621][T10768] ? __pfx_vfs_write+0x10/0x10 [ 527.390634][T10768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 527.390650][T10768] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.390664][T10768] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 527.390678][T10768] ? mutex_lock_nested+0x152/0x1d0 [ 527.390689][T10768] ? fdget_pos+0x252/0x320 [ 527.390703][T10768] ksys_write+0x156/0x270 [ 527.390716][T10768] ? __pfx_ksys_write+0x10/0x10 [ 527.390732][T10768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.390743][T10768] do_syscall_64+0x174/0x580 [ 527.390759][T10768] ? clear_bhb_loop+0x40/0x90 [ 527.390771][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.390782][T10768] RIP: 0033:0x7f2b3708e68e [ 527.390792][T10768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.390801][T10768] RSP: 002b:00007f2b35325fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 527.390812][T10768] RAX: ffffffffffffffda RBX: 00007f2b353266c0 RCX: 00007f2b3708e68e [ 527.390819][T10768] RDX: 0000000000000001 RSI: 00007f2b353260a0 RDI: 0000000000000006 [ 527.390826][T10768] RBP: 00007f2b35326090 R08: 0000000000000000 R09: 0000000000000000 [ 527.390832][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.390838][T10768] R13: 00007f2b37356038 R14: 00007f2b37355fa0 R15: 00007ffe00664f28 [ 527.390855][T10768] [ 529.455094][ T5731] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 529.739240][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 529.780463][ T5731] usb 7-1: device descriptor read/64, error -71 [ 530.246358][ T5731] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 530.730409][ T5731] usb 7-1: device descriptor read/64, error -71 [ 530.841692][ T5731] usb usb7-port1: attempt power cycle [ 531.212704][ T5731] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 531.933113][ T5731] usb 7-1: device descriptor read/8, error -71 [ 532.155305][T10812] FAULT_INJECTION: forcing a failure. [ 532.155305][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 532.155339][T10812] CPU: 1 UID: 0 PID: 10812 Comm: syz.6.1427 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.155364][T10812] Tainted: [L]=SOFTLOCKUP [ 532.155372][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.155384][T10812] Call Trace: [ 532.155392][T10812] [ 532.155401][T10812] dump_stack_lvl+0xe8/0x150 [ 532.155437][T10812] should_fail_ex+0x467/0x600 [ 532.155471][T10812] should_failslab+0xa8/0x100 [ 532.155495][T10812] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 532.155517][T10812] ? __get_vm_area_node+0x136/0x300 [ 532.155545][T10812] ? __get_vm_area_node+0x136/0x300 [ 532.155578][T10812] __get_vm_area_node+0x136/0x300 [ 532.155610][T10812] __vmalloc_node_range_noprof+0x358/0x1730 [ 532.155641][T10812] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 532.155668][T10812] ? is_bpf_text_address+0x26/0x2b0 [ 532.155702][T10812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.155730][T10812] ? is_bpf_text_address+0x26/0x2b0 [ 532.155753][T10812] ? kernel_text_address+0xa5/0xe0 [ 532.155776][T10812] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 532.155793][T10812] __vmalloc_noprof+0xd2/0x120 [ 532.155819][T10812] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 532.155839][T10812] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 532.155856][T10812] ? bpf_prog_alloc+0x2a/0x1a0 [ 532.155878][T10812] bpf_prog_alloc+0x3c/0x1a0 [ 532.155899][T10812] bpf_prog_load+0x7f8/0x1c00 [ 532.155931][T10812] ? __pfx_bpf_prog_load+0x10/0x10 [ 532.155974][T10812] __sys_bpf+0xd0d/0xd90 [ 532.155999][T10812] ? __pfx___sys_bpf+0x10/0x10 [ 532.156019][T10812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 532.156052][T10812] ? rt_mutex_slowunlock+0x219/0x460 [ 532.156089][T10812] ? ksys_write+0x248/0x270 [ 532.156115][T10812] ? __pfx_ksys_write+0x10/0x10 [ 532.156141][T10812] __x64_sys_bpf+0xba/0xd0 [ 532.156169][T10812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.156199][T10812] do_syscall_64+0x174/0x580 [ 532.156225][T10812] ? trace_irq_disable+0x3b/0x140 [ 532.156241][T10812] ? clear_bhb_loop+0x40/0x90 [ 532.156263][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.156281][T10812] RIP: 0033:0x7f05c4ccde59 [ 532.156297][T10812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.156313][T10812] RSP: 002b:00007f05c2f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.156333][T10812] RAX: ffffffffffffffda RBX: 00007f05c4f56090 RCX: 00007f05c4ccde59 [ 532.156347][T10812] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 532.156358][T10812] RBP: 00007f05c2f05090 R08: 0000000000000000 R09: 0000000000000000 [ 532.156369][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.156380][T10812] R13: 00007f05c4f56128 R14: 00007f05c4f56090 R15: 00007ffdb5f31168 [ 532.156410][T10812] [ 532.161197][T10812] syz.6.1427: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 532.161266][T10812] CPU: 1 UID: 0 PID: 10812 Comm: syz.6.1427 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.161292][T10812] Tainted: [L]=SOFTLOCKUP [ 532.161299][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.161311][T10812] Call Trace: [ 532.161318][T10812] [ 532.161329][T10812] dump_stack_lvl+0xe8/0x150 [ 532.161363][T10812] warn_alloc+0x24c/0x270 [ 532.161389][T10812] ? __pfx_warn_alloc+0x10/0x10 [ 532.161417][T10812] ? __get_vm_area_node+0x2af/0x300 [ 532.161451][T10812] __vmalloc_node_range_noprof+0x37d/0x1730 [ 532.161487][T10812] ? is_bpf_text_address+0x26/0x2b0 [ 532.161525][T10812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.161553][T10812] ? is_bpf_text_address+0x26/0x2b0 [ 532.161576][T10812] ? kernel_text_address+0xa5/0xe0 [ 532.161600][T10812] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 532.161618][T10812] __vmalloc_noprof+0xd2/0x120 [ 532.161647][T10812] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 532.161669][T10812] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 532.161687][T10812] ? bpf_prog_alloc+0x2a/0x1a0 [ 532.161708][T10812] bpf_prog_alloc+0x3c/0x1a0 [ 532.161729][T10812] bpf_prog_load+0x7f8/0x1c00 [ 532.161760][T10812] ? __pfx_bpf_prog_load+0x10/0x10 [ 532.161800][T10812] __sys_bpf+0xd0d/0xd90 [ 532.161826][T10812] ? __pfx___sys_bpf+0x10/0x10 [ 532.161847][T10812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 532.161880][T10812] ? rt_mutex_slowunlock+0x219/0x460 [ 532.161919][T10812] ? ksys_write+0x248/0x270 [ 532.161943][T10812] ? __pfx_ksys_write+0x10/0x10 [ 532.161971][T10812] __x64_sys_bpf+0xba/0xd0 [ 532.161998][T10812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.162019][T10812] do_syscall_64+0x174/0x580 [ 532.162046][T10812] ? trace_irq_disable+0x3b/0x140 [ 532.162064][T10812] ? clear_bhb_loop+0x40/0x90 [ 532.162086][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.162105][T10812] RIP: 0033:0x7f05c4ccde59 [ 532.162123][T10812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.162139][T10812] RSP: 002b:00007f05c2f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.162158][T10812] RAX: ffffffffffffffda RBX: 00007f05c4f56090 RCX: 00007f05c4ccde59 [ 532.162172][T10812] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 532.162184][T10812] RBP: 00007f05c2f05090 R08: 0000000000000000 R09: 0000000000000000 [ 532.162203][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.162214][T10812] R13: 00007f05c4f56128 R14: 00007f05c4f56090 R15: 00007ffdb5f31168 [ 532.162244][T10812] [ 532.162261][T10812] Mem-Info: [ 532.162270][T10812] active_anon:211 inactive_anon:23366 isolated_anon:0 [ 532.162270][T10812] active_file:25649 inactive_file:36618 isolated_file:0 [ 532.162270][T10812] unevictable:783 dirty:288 writeback:0 [ 532.162270][T10812] slab_reclaimable:13185 slab_unreclaimable:108354 [ 532.162270][T10812] mapped:30322 shmem:17784 pagetables:1581 [ 532.162270][T10812] sec_pagetables:0 bounce:0 [ 532.162270][T10812] kernel_misc_reclaimable:0 [ 532.162270][T10812] free:1275724 free_pcp:7793 free_cma:0 [ 532.162320][T10812] Node 0 active_anon:844kB inactive_anon:93464kB active_file:102404kB inactive_file:146472kB unevictable:1596kB isolated(anon):0kB isolated(file):0kB mapped:121288kB dirty:1152kB writeback:0kB shmem:69600kB kernel_stack:13460kB pagetables:6152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 532.162367][T10812] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 532.162411][T10812] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.162464][T10812] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 532.162495][T10812] Node 0 DMA32 free:1150736kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:844kB inactive_anon:93464kB active_file:102404kB inactive_file:146472kB unevictable:1596kB writepending:1152kB zspages:0kB present:3129332kB managed:2560748kB mlocked:0kB bounce:0kB free_pcp:31156kB local_pcp:10648kB free_cma:0kB [ 532.162553][T10812] lowmem_reserve[]: 0 0 1 1 1 [ 532.162582][T10812] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 532.162634][T10812] lowmem_reserve[]: 0 0 0 0 0 [ 532.167735][T10812] Node 1 Normal free:3936800kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.167886][T10812] lowmem_reserve[]: 0 0 0 0 0 [ 532.168146][T10812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 532.169026][T10812] Node 0 DMA32: 275*4kB (UME) 481*8kB (UME) 62*16kB (UME) 107*32kB (ME) 212*64kB (UME) 173*128kB (UME) 103*256kB (UME) 54*512kB (ME) 23*1024kB (ME) 6*2048kB (ME) 248*4096kB (UM) = 1150740kB [ 532.173606][T10812] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 532.173700][T10812] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 6*16kB (UM) 7*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936800kB [ 532.173839][T10812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.173856][T10812] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 532.173872][T10812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.173887][T10812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 532.173902][T10812] 80047 total pagecache pages [ 532.173910][T10812] 0 pages in swap cache [ 532.173917][T10812] Free swap = 124996kB [ 532.173924][T10812] Total swap = 124996kB [ 532.173932][T10812] 2097051 pages RAM [ 532.173939][T10812] 0 pages HighMem/MovableOnly [ 532.173947][T10812] 424784 pages reserved [ 532.173954][T10812] 0 pages cma reserved [ 532.581401][T10824] overlayfs: missing 'lowerdir' [ 533.511270][ T5704] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 533.692010][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 533.715006][ T5704] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 533.715034][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.715053][ T5704] usb 3-1: Product: syz [ 533.715067][ T5704] usb 3-1: Manufacturer: syz [ 533.715082][ T5704] usb 3-1: SerialNumber: syz [ 533.744289][ T5704] usb 3-1: config 0 descriptor?? [ 534.230763][ T5731] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 534.265976][ T5704] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 534.265996][ T5704] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 534.463267][ T5731] usb 2-1: device descriptor read/64, error -71 [ 534.987497][ T10] usb 3-1: USB disconnect, device number 58 [ 535.020384][ T5731] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 535.112572][T10851] overlayfs: missing 'lowerdir' [ 535.150543][ T5731] usb 2-1: device descriptor read/64, error -71 [ 535.262295][ T5731] usb usb2-port1: attempt power cycle [ 535.365319][T10862] overlayfs: missing 'lowerdir' [ 535.711141][ T5731] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 535.949524][ T5731] usb 2-1: device descriptor read/8, error -71 [ 536.310428][ T5731] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 536.332100][ T5731] usb 2-1: device descriptor read/8, error -71 [ 536.441101][ T5731] usb usb2-port1: unable to enumerate USB device [ 536.650402][ T5849] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 536.809208][ T5849] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 536.809238][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.809265][ T5849] usb 3-1: Product: syz [ 536.809279][ T5849] usb 3-1: Manufacturer: syz [ 536.809293][ T5849] usb 3-1: SerialNumber: syz [ 536.819895][ T5849] usb 3-1: config 0 descriptor?? [ 537.014670][T10895] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 537.014726][T10895] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 537.095463][ T5849] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 537.311364][ T5731] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 537.670353][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 537.674735][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 537.674775][ T5731] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.674814][ T5731] usb 2-1: New USB device found, idVendor=14b0, idProduct=474c, bcdDevice= 0.00 [ 537.674835][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.731221][ T5731] usb 2-1: config 0 descriptor?? [ 537.935535][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 537.935553][ T36] audit: type=1326 audit(1783841357.423:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.937066][ T36] audit: type=1326 audit(1783841357.423:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.938849][ T36] audit: type=1326 audit(1783841357.423:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.939617][ T36] audit: type=1326 audit(1783841357.423:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.943317][ T36] audit: type=1326 audit(1783841357.433:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.946128][ T36] audit: type=1326 audit(1783841357.433:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.946816][ T36] audit: type=1326 audit(1783841357.433:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.950600][ T36] audit: type=1326 audit(1783841357.433:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.951391][ T36] audit: type=1326 audit(1783841357.443:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 537.956280][ T36] audit: type=1326 audit(1783841357.443:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10910 comm="syz.3.1460" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57867de59 code=0x7ffc0000 [ 538.164509][T10915] FAULT_INJECTION: forcing a failure. [ 538.164509][T10915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.164928][T10915] CPU: 1 UID: 0 PID: 10915 Comm: syz.6.1461 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 538.164955][T10915] Tainted: [L]=SOFTLOCKUP [ 538.164962][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.164974][T10915] Call Trace: [ 538.164982][T10915] [ 538.164991][T10915] dump_stack_lvl+0xe8/0x150 [ 538.165028][T10915] should_fail_ex+0x467/0x600 [ 538.165061][T10915] _copy_to_user+0x31/0xb0 [ 538.165084][T10915] bpf_prog_test_run_syscall+0x343/0x4c0 [ 538.165109][T10915] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 538.165137][T10915] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 538.165159][T10915] bpf_prog_test_run+0x2cb/0x340 [ 538.165184][T10915] __sys_bpf+0xa22/0xd90 [ 538.165210][T10915] ? __pfx___sys_bpf+0x10/0x10 [ 538.165231][T10915] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 538.165272][T10915] ? rt_mutex_slowunlock+0x219/0x460 [ 538.165311][T10915] ? ksys_write+0x248/0x270 [ 538.165336][T10915] ? __pfx_ksys_write+0x10/0x10 [ 538.165362][T10915] __x64_sys_bpf+0xba/0xd0 [ 538.165390][T10915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.165412][T10915] do_syscall_64+0x174/0x580 [ 538.165439][T10915] ? trace_irq_disable+0x3b/0x140 [ 538.165455][T10915] ? clear_bhb_loop+0x40/0x90 [ 538.165478][T10915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.165497][T10915] RIP: 0033:0x7f05c4ccde59 [ 538.165515][T10915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.165531][T10915] RSP: 002b:00007f05c2f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 538.165551][T10915] RAX: ffffffffffffffda RBX: 00007f05c4f55fa0 RCX: 00007f05c4ccde59 [ 538.165565][T10915] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 538.165578][T10915] RBP: 00007f05c2f26090 R08: 0000000000000000 R09: 0000000000000000 [ 538.165590][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.165602][T10915] R13: 00007f05c4f56038 R14: 00007f05c4f55fa0 R15: 00007ffdb5f31168 [ 538.165631][T10915] [ 538.607074][T10916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.615165][T10916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.742748][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.747761][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.875977][ T5731] usbhid 2-1:0.0: can't add hid device: -71 [ 538.876095][ T5731] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 538.911917][ T5731] usb 2-1: USB disconnect, device number 59 [ 539.220849][ T5849] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 539.590736][ T5849] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 539.740478][ T5849] usb 7-1: device descriptor read/64, error -71 [ 539.740605][ T5848] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 539.870621][ T5848] usb 2-1: device descriptor read/64, error -71 [ 539.991322][ T5849] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 540.120468][ T5848] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 540.120853][ T5849] usb 7-1: device descriptor read/64, error -71 [ 540.232231][ T5849] usb usb7-port1: attempt power cycle [ 540.250463][ T5848] usb 2-1: device descriptor read/64, error -71 [ 540.300439][ T5731] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 540.379383][ T5848] usb usb2-port1: attempt power cycle [ 540.450429][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 540.464430][ T5731] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 540.464456][ T5731] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 540.464476][ T5731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 540.464496][ T5731] usb 4-1: config 1 has no interface number 0 [ 540.464536][ T5731] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.464560][ T5731] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 540.464596][ T5731] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 540.464618][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.503703][ T5731] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 540.564326][ T10] usb 3-1: USB disconnect, device number 59 [ 540.686543][ T5731] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 540.807734][ T5849] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 540.821233][ T5849] usb 7-1: device descriptor read/8, error -71 [ 540.860428][ T5848] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 541.314117][ T5848] usb 2-1: device descriptor read/8, error -71 [ 541.713422][ T5849] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 541.858870][ T10] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 541.903263][ T5848] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 541.932021][ T5848] usb 2-1: device descriptor read/8, error -71 [ 542.040808][ T5848] usb usb2-port1: unable to enumerate USB device [ 542.042393][T10938] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 542.042718][T10938] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 542.050042][ T5849] usb 7-1: device descriptor read/8, error -71 [ 542.150812][ T5849] usb usb7-port1: unable to enumerate USB device [ 542.169543][ T5848] usb 4-1: USB disconnect, device number 56 [ 542.182413][ T5848] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 544.760469][ T5849] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 544.785450][T10973] FAULT_INJECTION: forcing a failure. [ 544.785450][T10973] name failslab, interval 1, probability 0, space 0, times 0 [ 544.785483][T10973] CPU: 0 UID: 0 PID: 10973 Comm: syz.2.1477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.785510][T10973] Tainted: [L]=SOFTLOCKUP [ 544.785517][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.785529][T10973] Call Trace: [ 544.785537][T10973] [ 544.785546][T10973] dump_stack_lvl+0xe8/0x150 [ 544.785580][T10973] should_fail_ex+0x467/0x600 [ 544.785614][T10973] should_failslab+0xa8/0x100 [ 544.785638][T10973] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 544.785661][T10973] ? __get_vm_area_node+0x136/0x300 [ 544.785688][T10973] ? __get_vm_area_node+0x136/0x300 [ 544.785722][T10973] __get_vm_area_node+0x136/0x300 [ 544.785762][T10973] __vmalloc_node_range_noprof+0x358/0x1730 [ 544.785792][T10973] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 544.785820][T10973] ? is_bpf_text_address+0x26/0x2b0 [ 544.785858][T10973] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.785887][T10973] ? is_bpf_text_address+0x26/0x2b0 [ 544.785910][T10973] ? kernel_text_address+0xa5/0xe0 [ 544.785935][T10973] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 544.785952][T10973] __vmalloc_noprof+0xd2/0x120 [ 544.785981][T10973] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 544.786004][T10973] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 544.786022][T10973] ? bpf_prog_alloc+0x2a/0x1a0 [ 544.786043][T10973] bpf_prog_alloc+0x3c/0x1a0 [ 544.786066][T10973] bpf_prog_load+0x7f8/0x1c00 [ 544.786097][T10973] ? __pfx_bpf_prog_load+0x10/0x10 [ 544.786140][T10973] __sys_bpf+0xd0d/0xd90 [ 544.786167][T10973] ? __pfx___sys_bpf+0x10/0x10 [ 544.786188][T10973] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 544.786223][T10973] ? rt_mutex_slowunlock+0x219/0x460 [ 544.786269][T10973] ? ksys_write+0x248/0x270 [ 544.786295][T10973] ? __pfx_ksys_write+0x10/0x10 [ 544.786323][T10973] __x64_sys_bpf+0xba/0xd0 [ 544.786352][T10973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.786374][T10973] do_syscall_64+0x174/0x580 [ 544.786402][T10973] ? trace_irq_disable+0x3b/0x140 [ 544.786420][T10973] ? clear_bhb_loop+0x40/0x90 [ 544.786444][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.786464][T10973] RIP: 0033:0x7f2b370cde59 [ 544.786482][T10973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.786498][T10973] RSP: 002b:00007f2b35326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.786520][T10973] RAX: ffffffffffffffda RBX: 00007f2b37355fa0 RCX: 00007f2b370cde59 [ 544.786535][T10973] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 544.786548][T10973] RBP: 00007f2b35326090 R08: 0000000000000000 R09: 0000000000000000 [ 544.786561][T10973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.786573][T10973] R13: 00007f2b37356038 R14: 00007f2b37355fa0 R15: 00007ffe00664f28 [ 544.786603][T10973] [ 544.839464][T10973] syz.2.1477: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 544.839533][T10973] CPU: 0 UID: 0 PID: 10973 Comm: syz.2.1477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.839559][T10973] Tainted: [L]=SOFTLOCKUP [ 544.839565][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.839577][T10973] Call Trace: [ 544.839588][T10973] [ 544.839597][T10973] dump_stack_lvl+0xe8/0x150 [ 544.839632][T10973] warn_alloc+0x24c/0x270 [ 544.839655][T10973] ? __pfx_warn_alloc+0x10/0x10 [ 544.839682][T10973] ? __get_vm_area_node+0x2af/0x300 [ 544.839711][T10973] __vmalloc_node_range_noprof+0x37d/0x1730 [ 544.839745][T10973] ? is_bpf_text_address+0x26/0x2b0 [ 544.839782][T10973] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.839809][T10973] ? is_bpf_text_address+0x26/0x2b0 [ 544.839831][T10973] ? kernel_text_address+0xa5/0xe0 [ 544.839854][T10973] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 544.839874][T10973] __vmalloc_noprof+0xd2/0x120 [ 544.839903][T10973] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 544.839924][T10973] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 544.839942][T10973] ? bpf_prog_alloc+0x2a/0x1a0 [ 544.839963][T10973] bpf_prog_alloc+0x3c/0x1a0 [ 544.839985][T10973] bpf_prog_load+0x7f8/0x1c00 [ 544.840015][T10973] ? __pfx_bpf_prog_load+0x10/0x10 [ 544.840055][T10973] __sys_bpf+0xd0d/0xd90 [ 544.840082][T10973] ? __pfx___sys_bpf+0x10/0x10 [ 544.840104][T10973] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 544.840136][T10973] ? rt_mutex_slowunlock+0x219/0x460 [ 544.840173][T10973] ? ksys_write+0x248/0x270 [ 544.840198][T10973] ? __pfx_ksys_write+0x10/0x10 [ 544.840224][T10973] __x64_sys_bpf+0xba/0xd0 [ 544.840250][T10973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.840269][T10973] do_syscall_64+0x174/0x580 [ 544.840304][T10973] ? trace_irq_disable+0x3b/0x140 [ 544.840321][T10973] ? clear_bhb_loop+0x40/0x90 [ 544.840344][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.840363][T10973] RIP: 0033:0x7f2b370cde59 [ 544.840382][T10973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.840398][T10973] RSP: 002b:00007f2b35326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.840422][T10973] RAX: ffffffffffffffda RBX: 00007f2b37355fa0 RCX: 00007f2b370cde59 [ 544.840437][T10973] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 544.840450][T10973] RBP: 00007f2b35326090 R08: 0000000000000000 R09: 0000000000000000 [ 544.840462][T10973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.840474][T10973] R13: 00007f2b37356038 R14: 00007f2b37355fa0 R15: 00007ffe00664f28 [ 544.840502][T10973] [ 544.843954][T10973] Mem-Info: [ 544.843969][T10973] active_anon:481 inactive_anon:41756 isolated_anon:0 [ 544.843969][T10973] active_file:25724 inactive_file:36622 isolated_file:0 [ 544.843969][T10973] unevictable:783 dirty:240 writeback:25 [ 544.843969][T10973] slab_reclaimable:13144 slab_unreclaimable:107784 [ 544.843969][T10973] mapped:30986 shmem:36128 pagetables:1610 [ 544.843969][T10973] sec_pagetables:0 bounce:0 [ 544.843969][T10973] kernel_misc_reclaimable:0 [ 544.843969][T10973] free:1257611 free_pcp:7545 free_cma:0 [ 544.844031][T10973] Node 0 active_anon:1924kB inactive_anon:167024kB active_file:102704kB inactive_file:146488kB unevictable:1596kB isolated(anon):0kB isolated(file):0kB mapped:123944kB dirty:960kB writeback:100kB shmem:142976kB kernel_stack:13704kB pagetables:6268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 544.844080][T10973] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 544.844123][T10973] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.844176][T10973] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 544.844208][T10973] Node 0 DMA32 free:1078284kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1924kB inactive_anon:167024kB active_file:102704kB inactive_file:146488kB unevictable:1596kB writepending:1060kB zspages:0kB present:3129332kB managed:2560748kB mlocked:0kB bounce:0kB free_pcp:30164kB local_pcp:22140kB free_cma:0kB [ 544.844264][T10973] lowmem_reserve[]: 0 0 1 1 1 [ 544.885681][T10973] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 544.885737][T10973] lowmem_reserve[]: 0 0 0 0 0 [ 544.885780][T10973] Node 1 Normal free:3936800kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.885834][T10973] lowmem_reserve[]: 0 0 0 0 0 [ 544.885864][T10973] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 544.885968][T10973] Node 0 DMA32: 5*4kB (ME) 10*8kB (UE) 13*16kB (UME) 73*32kB (UME) 14*64kB (UME) 7*128kB (UME) 3*256kB (UE) 34*512kB (UME) 21*1024kB (ME) 7*2048kB (ME) 249*4096kB (UM) = 1078356kB [ 544.886108][T10973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 544.886198][T10973] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 6*16kB (UM) 7*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936800kB [ 544.886341][T10973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.886358][T10973] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 544.886373][T10973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.886389][T10973] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.886403][T10973] 98470 total pagecache pages [ 544.886411][T10973] 0 pages in swap cache [ 544.886418][T10973] Free swap = 124996kB [ 544.886425][T10973] Total swap = 124996kB [ 544.886433][T10973] 2097051 pages RAM [ 544.886439][T10973] 0 pages HighMem/MovableOnly [ 544.886447][T10973] 424784 pages reserved [ 544.886453][T10973] 0 pages cma reserved [ 544.920397][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 544.921934][ T5849] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 544.921949][ T5849] usb 4-1: config 0 has no interface number 0 [ 544.921973][ T5849] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 544.921986][ T5849] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 544.988800][ T5849] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 544.988818][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.988828][ T5849] usb 4-1: Product: syz [ 544.988835][ T5849] usb 4-1: Manufacturer: syz [ 544.988842][ T5849] usb 4-1: SerialNumber: syz [ 545.256307][ T5849] usb 4-1: config 0 descriptor?? [ 545.368563][T10975] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 545.368614][T10975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 545.421010][T10962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.421123][T10962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.564262][ T5730] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 545.623025][T10962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.623150][T10962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.790419][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 545.801851][ T5730] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 545.801876][ T5730] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 545.801896][ T5730] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 545.801951][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 545.801973][ T5730] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 545.801994][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 545.802031][ T5730] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 545.802052][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.830234][ T5730] usb 2-1: config 0 descriptor?? [ 545.992100][ T5849] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 545.992370][ T5849] asix 4-1:0.34: probe with driver asix failed with error -71 [ 546.033290][ T5849] usb 4-1: USB disconnect, device number 57 [ 546.061636][T10982] FAULT_INJECTION: forcing a failure. [ 546.061636][T10982] name failslab, interval 1, probability 0, space 0, times 0 [ 546.061669][T10982] CPU: 1 UID: 0 PID: 10982 Comm: syz.6.1483 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 546.061695][T10982] Tainted: [L]=SOFTLOCKUP [ 546.061702][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.061714][T10982] Call Trace: [ 546.061722][T10982] [ 546.061730][T10982] dump_stack_lvl+0xe8/0x150 [ 546.061774][T10982] should_fail_ex+0x467/0x600 [ 546.061807][T10982] should_failslab+0xa8/0x100 [ 546.061830][T10982] __kmalloc_noprof+0xfe/0x780 [ 546.061850][T10982] ? sock_kmalloc+0xd6/0x160 [ 546.061870][T10982] ? sock_kmalloc+0xd6/0x160 [ 546.061895][T10982] sock_kmalloc+0xd6/0x160 [ 546.061918][T10982] af_alg_alloc_areq+0x8c/0x200 [ 546.061972][T10982] skcipher_recvmsg+0x31e/0xe10 [ 546.062010][T10982] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 546.062031][T10982] ? __lock_acquire+0x683/0x2ce0 [ 546.062054][T10982] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 546.062079][T10982] ? security_socket_recvmsg+0x7e/0x2c0 [ 546.062107][T10982] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 546.062129][T10982] sock_recvmsg+0x196/0x1e0 [ 546.062157][T10982] ____sys_recvmsg+0x1f2/0x4b0 [ 546.062184][T10982] ? __pfx_____sys_recvmsg+0x10/0x10 [ 546.062215][T10982] ? import_iovec+0x73/0xa0 [ 546.062240][T10982] ___sys_recvmsg+0x213/0x5a0 [ 546.062264][T10982] ? __pfx____sys_recvmsg+0x10/0x10 [ 546.062287][T10982] ? __fget_files+0x2a/0x420 [ 546.062319][T10982] ? __fget_files+0x3a8/0x420 [ 546.062346][T10982] __x64_sys_recvmsg+0x1b4/0x290 [ 546.062369][T10982] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 546.062406][T10982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.062426][T10982] do_syscall_64+0x174/0x580 [ 546.062456][T10982] ? clear_bhb_loop+0x40/0x90 [ 546.062479][T10982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.062499][T10982] RIP: 0033:0x7f05c4ccde59 [ 546.062518][T10982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.062534][T10982] RSP: 002b:00007f05c2f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 546.062555][T10982] RAX: ffffffffffffffda RBX: 00007f05c4f55fa0 RCX: 00007f05c4ccde59 [ 546.062569][T10982] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 546.062580][T10982] RBP: 00007f05c2f26090 R08: 0000000000000000 R09: 0000000000000000 [ 546.062592][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.062603][T10982] R13: 00007f05c4f56038 R14: 00007f05c4f55fa0 R15: 00007ffdb5f31168 [ 546.062630][T10982] [ 546.446540][ T5730] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 546.481596][ T5730] usb 2-1: USB disconnect, device number 64 [ 546.578467][ T5730] usblp0: removed [ 546.831583][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 546.831601][ T36] audit: type=1326 audit(1783841366.323:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.831644][ T36] audit: type=1326 audit(1783841366.323:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.831682][ T36] audit: type=1326 audit(1783841366.323:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.832442][ T36] audit: type=1326 audit(1783841366.323:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.832573][ T36] audit: type=1326 audit(1783841366.323:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.832768][ T36] audit: type=1326 audit(1783841366.323:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.832953][ T36] audit: type=1326 audit(1783841366.323:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.833419][ T36] audit: type=1326 audit(1783841366.323:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.833819][ T36] audit: type=1326 audit(1783841366.323:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 546.834030][ T36] audit: type=1326 audit(1783841366.323:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10988 comm="syz.2.1487" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b370cde59 code=0x7ffc0000 [ 548.003947][ T5730] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 548.220420][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 548.226899][ T5730] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 548.226926][ T5730] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 548.226945][ T5730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 548.226965][ T5730] usb 2-1: config 1 has no interface number 0 [ 548.227007][ T5730] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.227031][ T5730] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 548.227067][ T5730] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 548.227097][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.293999][ T5730] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 548.467349][ T5730] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 548.951089][ T821] usb 2-1: USB disconnect, device number 65 [ 548.954192][ T821] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 549.435858][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.456535][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.458239][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.463610][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.464749][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.644962][T11012] FAULT_INJECTION: forcing a failure. [ 549.644962][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 549.644997][T11012] CPU: 1 UID: 0 PID: 11012 Comm: syz.1.1494 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.645022][T11012] Tainted: [L]=SOFTLOCKUP [ 549.645030][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 549.645042][T11012] Call Trace: [ 549.645050][T11012] [ 549.645059][T11012] dump_stack_lvl+0xe8/0x150 [ 549.645089][T11012] should_fail_ex+0x467/0x600 [ 549.645114][T11012] should_failslab+0xa8/0x100 [ 549.645133][T11012] __kmalloc_noprof+0xfe/0x780 [ 549.645149][T11012] ? bpf_test_init+0x9f/0x150 [ 549.645163][T11012] ? bpf_test_init+0x9f/0x150 [ 549.645181][T11012] bpf_test_init+0x9f/0x150 [ 549.645198][T11012] bpf_prog_test_run_skb+0x31e/0x2230 [ 549.645233][T11012] ? __fget_files+0x3a8/0x420 [ 549.645250][T11012] ? __fget_files+0x2a/0x420 [ 549.645273][T11012] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 549.645292][T11012] bpf_prog_test_run+0x2cb/0x340 [ 549.645316][T11012] __sys_bpf+0xa22/0xd90 [ 549.645341][T11012] ? __pfx___sys_bpf+0x10/0x10 [ 549.645359][T11012] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.645392][T11012] ? rt_mutex_slowunlock+0x219/0x460 [ 549.645430][T11012] ? ksys_write+0x248/0x270 [ 549.645455][T11012] ? __pfx_ksys_write+0x10/0x10 [ 549.645489][T11012] __x64_sys_bpf+0xba/0xd0 [ 549.645511][T11012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.645531][T11012] do_syscall_64+0x174/0x580 [ 549.645557][T11012] ? trace_irq_disable+0x3b/0x140 [ 549.645572][T11012] ? clear_bhb_loop+0x40/0x90 [ 549.645592][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.645610][T11012] RIP: 0033:0x7fa75663de59 [ 549.645626][T11012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.645641][T11012] RSP: 002b:00007fa754896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.645661][T11012] RAX: ffffffffffffffda RBX: 00007fa7568c5fa0 RCX: 00007fa75663de59 [ 549.645675][T11012] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 549.645687][T11012] RBP: 00007fa754896090 R08: 0000000000000000 R09: 0000000000000000 [ 549.645698][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.645710][T11012] R13: 00007fa7568c6038 R14: 00007fa7568c5fa0 R15: 00007ffc36ecb0d8 [ 549.645739][T11012] [ 549.697938][ T1239] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.975767][T11017] bpf: Bad value for 'uid' [ 550.240561][ T5606] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 550.492880][ T5606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 550.496255][ T5606] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 550.496281][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.496298][ T5606] usb 2-1: Product: syz [ 550.496306][ T5606] usb 2-1: Manufacturer: syz [ 550.496314][ T5606] usb 2-1: SerialNumber: syz [ 551.543908][ T1239] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.600455][ T5614] Bluetooth: hci3: command tx timeout [ 551.722947][ T5606] option 2-1:4.0: GSM modem (1-port) converter detected [ 551.757625][ T5606] usb 2-1: USB disconnect, device number 66 [ 551.784410][ T5606] option 2-1:4.0: device disconnected [ 552.036905][ T1239] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.685963][ T5614] Bluetooth: hci3: command tx timeout [ 553.710584][ T5849] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 553.817005][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 553.900473][ T5849] usb 2-1: Using ep0 maxpacket: 8 [ 553.901467][ T5849] usb 2-1: no configurations [ 553.901483][ T5849] usb 2-1: can't read configurations, error -22 [ 553.976635][ T1239] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.040503][ T5849] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 554.220413][ T5849] usb 2-1: Using ep0 maxpacket: 8 [ 554.221375][ T5849] usb 2-1: no configurations [ 554.221391][ T5849] usb 2-1: can't read configurations, error -22 [ 554.221899][ T5849] usb usb2-port1: attempt power cycle [ 554.618130][T11055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1505'. [ 555.340456][ T5849] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 555.361483][ T5849] usb 2-1: Using ep0 maxpacket: 8 [ 555.362117][ T5849] usb 2-1: no configurations [ 555.362131][ T5849] usb 2-1: can't read configurations, error -22 [ 555.492991][ T5849] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 555.511738][ T5849] usb 2-1: Using ep0 maxpacket: 8 [ 555.515923][ T5849] usb 2-1: no configurations [ 555.515943][ T5849] usb 2-1: can't read configurations, error -22 [ 555.517638][ T5849] usb usb2-port1: unable to enumerate USB device [ 555.762144][ T5614] Bluetooth: hci3: command tx timeout [ 556.924957][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.925237][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.925896][T11004] bridge_slave_0: entered allmulticast mode [ 556.933580][T11004] bridge_slave_0: entered promiscuous mode [ 558.549799][ T5614] Bluetooth: hci3: command tx timeout [ 558.583688][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.583753][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.583876][T11004] bridge_slave_1: entered allmulticast mode [ 558.597127][T11004] bridge_slave_1: entered promiscuous mode [ 559.136109][T11097] 9p: Bad value for 'rfdno' [ 559.240785][ T1239] bridge_slave_1: left allmulticast mode [ 559.246771][ T1239] bridge_slave_1: left promiscuous mode [ 559.247033][ T1239] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.434389][ T1239] bridge_slave_0: left allmulticast mode [ 559.434424][ T1239] bridge_slave_0: left promiscuous mode [ 559.434639][ T1239] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.470423][ T5730] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 560.237273][ T5614] ================================================================== [ 560.237361][ T5614] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 560.237404][ T5614] Read of size 8 at addr ffffc9001d92d008 by task kworker/u9:5/5614 [ 560.237421][ T5614] [ 560.237469][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.237504][ T5614] Tainted: [L]=SOFTLOCKUP [ 560.237511][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 560.237524][ T5614] Workqueue: hci1 hci_rx_work [ 560.237603][ T5614] Call Trace: [ 560.237612][ T5614] [ 560.237622][ T5614] dump_stack_lvl+0xe8/0x150 [ 560.237652][ T5614] print_address_description+0x55/0x1e0 [ 560.237685][ T5614] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 560.237712][ T5614] print_report+0x58/0x70 [ 560.237738][ T5614] kasan_report+0x117/0x150 [ 560.237767][ T5614] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 560.237800][ T5614] __list_del_entry_valid_or_report+0xb5/0x190 [ 560.237830][ T5614] kcov_remote_start+0x295/0x6f0 [ 560.237866][ T5614] hci_rx_work+0x10f/0x1020 [ 560.237897][ T5614] ? process_scheduled_works+0xa20/0x14e0 [ 560.237920][ T5614] process_scheduled_works+0xa8e/0x14e0 [ 560.237954][ T5614] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.237978][ T5614] ? assign_work+0x3cf/0x5d0 [ 560.238001][ T5614] worker_thread+0xa47/0xfb0 [ 560.238035][ T5614] kthread+0x388/0x470 [ 560.238062][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 560.238091][ T5614] ? __pfx_kthread+0x10/0x10 [ 560.238118][ T5614] ret_from_fork+0x514/0xb70 [ 560.238157][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 560.238184][ T5614] ? __switch_to+0xc89/0x1420 [ 560.238209][ T5614] ? __pfx_kthread+0x10/0x10 [ 560.238236][ T5614] ret_from_fork_asm+0x1a/0x30 [ 560.238261][ T5614] [ 560.238269][ T5614] [ 560.238275][ T5614] The buggy address belongs to a vmalloc virtual mapping [ 560.238326][ T5614] Memory state around the buggy address: [ 560.238337][ T5614] ffffc9001d92cf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.238351][ T5614] ffffc9001d92cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.238364][ T5614] >ffffc9001d92d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.238374][ T5614] ^ [ 560.238413][ T5614] ffffc9001d92d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.238426][ T5614] ffffc9001d92d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 560.238436][ T5614] ================================================================== [ 560.239032][ T5614] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 560.239051][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.239086][ T5614] Tainted: [L]=SOFTLOCKUP [ 560.239094][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 560.239107][ T5614] Workqueue: hci1 hci_rx_work [ 560.239135][ T5614] Call Trace: [ 560.239143][ T5614] [ 560.239150][ T5614] vpanic+0x56c/0xa60 [ 560.239172][ T5614] ? __pfx_vpanic+0x10/0x10 [ 560.239190][ T5614] ? irqentry_exit+0x218/0x8f0 [ 560.239217][ T5614] ? lockdep_hardirqs_on+0x7a/0x110 [ 560.239247][ T5614] panic+0xc5/0xd0 [ 560.239264][ T5614] ? __pfx_panic+0x10/0x10 [ 560.239280][ T5614] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 560.239314][ T5614] ? __pfx_panic+0x10/0x10 [ 560.239331][ T5614] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 560.239360][ T5614] check_panic_on_warn+0x89/0xb0 [ 560.239389][ T5614] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 560.239417][ T5614] end_report+0x73/0x170 [ 560.239437][ T5614] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 560.239465][ T5614] kasan_report+0x128/0x150 [ 560.239486][ T5614] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 560.239518][ T5614] __list_del_entry_valid_or_report+0xb5/0x190 [ 560.239548][ T5614] kcov_remote_start+0x295/0x6f0 [ 560.239578][ T5614] hci_rx_work+0x10f/0x1020 [ 560.239608][ T5614] ? process_scheduled_works+0xa20/0x14e0 [ 560.239631][ T5614] process_scheduled_works+0xa8e/0x14e0 [ 560.239664][ T5614] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.239688][ T5614] ? assign_work+0x3cf/0x5d0 [ 560.239714][ T5614] worker_thread+0xa47/0xfb0 [ 560.239747][ T5614] kthread+0x388/0x470 [ 560.239774][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 560.239796][ T5614] ? __pfx_kthread+0x10/0x10 [ 560.239822][ T5614] ret_from_fork+0x514/0xb70 [ 560.239852][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 560.239879][ T5614] ? __switch_to+0xc89/0x1420 [ 560.239903][ T5614] ? __pfx_kthread+0x10/0x10 [ 560.239931][ T5614] ret_from_fork_asm+0x1a/0x30 [ 560.239956][ T5614] [ 560.240110][ T5614] Kernel Offset: disabled