last executing test programs: 16m22.571154601s ago: executing program 3 (id=4): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f600020301090212"], 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) 16m19.190133025s ago: executing program 3 (id=10): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000"], 0x0) r1 = fsopen(&(0x7f0000000080)='efs\x00', 0x1) fgetxattr(r1, &(0x7f00000002c0)=@known='security.apparmor\x00', &(0x7f0000000300)=""/41, 0x29) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) close(0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0xc, 0x0, 0x82, 0xffffffff, 'syz1\x00', 0x1000}, 0x0, [0x0, 0x4000100, 0x4, 0x0, 0x9, 0x100000000, 0x2, 0x4, 0x8, 0x1, 0xc3, 0x7f, 0x1, 0x0, 0x8, 0xfff, 0x8, 0x0, 0x1, 0x1, 0x0, 0xd, 0x0, 0x3, 0x3, 0xee8000000000000, 0x0, 0x5, 0x0, 0x4, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0x7, 0x40000, 0x0, 0x3, 0x1e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0xffffffffffffffff, 0x100000001, 0x0, 0x40000000, 0x59, 0x0, 0x1, 0x401, 0xb4f, 0xffffffff, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0xee, 0xd87, 0x0, 0x44, 0x0, 0xfffffffffffffffe, 0xf, 0x0, 0x0, 0x0, 0x4aa, 0xcc64, 0x800000000002, 0x5f9cd92, 0x8000200, 0xf8b, 0x5, 0xd, 0x0, 0x0, 0xbb, 0x3, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x80000000, 0x4, 0x11d, 0x2, 0x3, 0x0, 0xfffffffc, 0x556a766c, 0x20000, 0x3, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0xb, 0x81, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x1, 0x0) getdents64(r3, 0xffffffffffffffff, 0x43) openat$mixer(0xffffff9c, &(0x7f0000000040), 0xc04041, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r7, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x6, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 16m14.140575635s ago: executing program 3 (id=21): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x18, 0xb1, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4050}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x280000, {0x0, 0x0, 0x0, 0x0, 0x1, 0xc001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c844}, 0x20004000) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfff, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@private0, @private=0xa010100, 0xd, 0xb}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)="e642deb91ca1046426", 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_netdev_private(r4, 0x8948, &(0x7f0000000080)="a6cc0409d8f1809caf72468ab8929aa93d8cd508e0c38afbf14b29f26e3aeac6f91b8816edf5e8016dfa2b07bdc1e2b52d7b773cb97ea4a8c723059fb28c8825ea334bf134") socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) flistxattr(r5, &(0x7f0000000140)=""/31, 0x11) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40041, 0x0) 15m58.610446714s ago: executing program 32 (id=21): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x18, 0xb1, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4050}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x280000, {0x0, 0x0, 0x0, 0x0, 0x1, 0xc001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c844}, 0x20004000) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfff, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@private0, @private=0xa010100, 0xd, 0xb}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)="e642deb91ca1046426", 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_netdev_private(r4, 0x8948, &(0x7f0000000080)="a6cc0409d8f1809caf72468ab8929aa93d8cd508e0c38afbf14b29f26e3aeac6f91b8816edf5e8016dfa2b07bdc1e2b52d7b773cb97ea4a8c723059fb28c8825ea334bf134") socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) flistxattr(r5, &(0x7f0000000140)=""/31, 0x11) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40041, 0x0) 15m19.077166955s ago: executing program 2 (id=55): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @dev}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000380), 0x0, 0x20004001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) 15m19.051436513s ago: executing program 2 (id=59): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file1\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000240)) r5 = eventfd2(0xfb6, 0x1) write$eventfd(r5, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000180)=@l={0x92, 0xd, 0x0, 0x9, 0x3, 0xca, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 15m17.780847728s ago: executing program 2 (id=63): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) close(0x3) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0xc0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/196, 0xc4, 0x0, 0x2, 0x3}}, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000000100)={0x9, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x27, 0x0, &(0x7f0000000380)) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000500)='rw\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x7) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000500)={0x5, 0xfffffe00, 0x372, 0x1a, &(0x7f0000000180)=""/26, 0xcc, &(0x7f00000003c0)=""/204, 0x26, &(0x7f00000004c0)=""/38}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 15m16.300587462s ago: executing program 2 (id=68): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x4, 0x4, 0x1, 0x0, 0x2}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/28, 0x1c}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca0009"], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @local}, 0x14) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) writev(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xa, 0x0) syz_emit_ethernet(0xe0, &(0x7f0000000800)={@random="347af73a72c8", @broadcast, @void, {@ipv4={0x800, @tipc={{0x28, 0x4, 0x3, 0x3, 0xd2, 0x64, 0x0, 0x5, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, {[@noop, @generic={0x88, 0x6, "d3c642cd"}, @rr={0x7, 0x3, 0x95}, @generic={0x86, 0x7, "e7060058fc"}, @end, @end, @timestamp_addr={0x44, 0x44, 0xb7, 0x1, 0x1, [{@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@remote, 0xfff}, {@local, 0x3}, {@broadcast, 0x2133}, {@empty, 0x8}, {@rand_addr=0x64010100, 0xffffff7d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @generic={0x89, 0x10, "14bb6922192a493f07b9fc69688a"}, @timestamp_prespec={0x44, 0x24, 0xc9, 0x3, 0x9, [{@broadcast, 0xb723}, {@multicast1, 0x2}, {@local, 0x1}, {@loopback, 0x1}]}]}}, @payload_named={{{{{0x32, 0x0, 0x0, 0x1, 0x0, 0xa, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x3, 0x0, 0x2, 0x4, 0x101, 0x3, 0x4e23, 0x4e23}, 0x1, 0x4}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f00000007c0)={0x1, 0x2, [0x7c, 0x4a6, 0x43, 0x41f]}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@mmap={0x10001, 0x1, 0x4, 0x70000, 0x2, {0x77359400}, {0x2, 0xc, 0x2, 0x4, 0xfd, 0x4, "7365981f"}, 0xb24, 0x1, {}, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000240)={0x800100, 0xa461, 0x1f, 0xe1d9, 0x1901}) 15m11.255602952s ago: executing program 2 (id=79): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb0100180000002800000007000000010000000100000f032000000500000000000000e10000004d3655100000000000000f01000000b5005f2e612e6100"], &(0x7f0000001b00)=""/3, 0x47, 0x3, 0x1, 0x5}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) 15m3.899996388s ago: executing program 2 (id=88): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @dev}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000380), 0x0, 0x20004001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$user(0x0, 0x0, &(0x7f0000000540)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd1644", 0x1b, r5) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r6, r4}, &(0x7f0000000440)=""/206, 0xce, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 14m48.088828963s ago: executing program 33 (id=88): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @dev}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000380), 0x0, 0x20004001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r6 = add_key$user(0x0, 0x0, &(0x7f0000000540)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd1644", 0x1b, r5) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r6, r4}, &(0x7f0000000440)=""/206, 0xce, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6m9.509057896s ago: executing program 5 (id=2201): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) write$P9_RAUTH(r1, &(0x7f0000001040)={0x14, 0x67, 0x1, {0x4, 0x4}}, 0x14) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6m9.243762275s ago: executing program 5 (id=2203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0xfd}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0xdddd0000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="022e2ea8e8f4c6b8e22e3d9e53c6f5e88716aa3e4f42a9876ae4845b8e59688a0f2b7086c3a49f5c815a51290cc91557e15aa3c35b7ae103f9165d7df3476f060e89d9ded5976d80f89c72c7b706d628817160917e09865daeafb548a07d48504d508ee2b17fe0e52df20daee3f3d8ddd52901e4a62f", 0x76}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) eventfd2(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x39000, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r12, 0x7c80, 0x0) 6m3.824465376s ago: executing program 5 (id=2231): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb4, 0x1c080, 0xa, 0x3bf}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x6, 0x8002, 0x80}, {0x2, 0x1, 0x1, 0x1, 0x624, 0x7, 0x8001}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) r2 = socket(0x18, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x3, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)}, 0x20040890) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000280)=0x800, 0x4) r5 = shmget(0x1, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) shmat(r5, &(0x7f00003b5000/0x13000)=nil, 0x1000) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x20020, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 6m2.188755341s ago: executing program 5 (id=2237): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=[@iv={0x60, 0x117, 0x2, 0x4a, "92ef300468be1d79871bfde9a3b5bb870d56866373f84b239ffe9595580b59a813d816b6f8da74e34586e11e0b00a2f703ddab3215943c636ac675d0ac5ea09440014d8dc47adc3db22a"}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}], 0xa8, 0x4008000}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000002c0)="c2cd5432e119d157adce18976f9aff5b4ca485a4849da4198936c8", 0x1b}, {&(0x7f0000000300)="4f01ce5c8a31a1dda853547152f0bdda79cb1e198a850fbe49ab83b439e6b355bf52aad92322e215ec852c4cf759953d185dfd1c55c73605d33c79cd33da2fdebdc76ac1dd6c7f2514df12c3c4f86dd59a6429bd6bb97a32a7d069520f708294a7ed6f58829d60b2040eafc99335358d8185de2da81bfdc66a8bbd97a36ff864250ae45c879125eac5944c8a647c89d7fed3e1585873a9538d551153a5d33feb2815d77908077a4dd034a73ceded72504e7b690c9f7a62015d2b22f0909f9f7cdd750d092641a641bee900a76b05697b7ff2d1be9aa4d763de97ae480d371dce6851ed11", 0xe4}, {&(0x7f0000000440)="3fbb6e6c84fba2e1a7830265b86b2e313db1268405bcb12c67d349013a949b0a9a028f67398401a0d2db0eda35ae87474ae059f017f33a", 0x37}, {&(0x7f00000005c0)="6cb09907a299b2c6644c4b812b2f43d3aec7fd0727f84071db0beaa4bd90a73987eea3e448152e5c8d3fdee5abeeeed130af4eeb984fa5559b51d7e30fd240ed6f152ce16e0b21cfdccef25dbacb84e5b663ba5dfd797d4cf4bf951c3ab4740b20323a999b59c0c9a0fc3ec3adc32cc851fcb71cf53194e999b879e454d404e59b02c8c1c04a559625cfad11dd160660ea24bd9d60ef99159456a75baacef2219c20dd75d8df0c0c40", 0xa9}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="347ce8992c8c430c47c127c3d4236f20c60ba7923c5871f42fd7d7278980dbba8416edb38416b420bdb9e801bc5f9a0451e582b77718274c3b9259754886d3fc4d13adf3ef8558", 0x47}, {&(0x7f0000001a00)}], 0x7, &(0x7f0000001ac0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0xc0, 0x40}], 0x2, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2e2e00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 6m2.067615668s ago: executing program 5 (id=2239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0xfffffffffffffed5) socket$inet_udp(0x2, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000000080004d9", @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES32=r3], 0x38}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x4}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00008da000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x1010, r0, 0x97f91000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x72) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) brk(0x5d555ede6000) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0xc060}, 0x804) sched_setaffinity(r6, 0x8, &(0x7f0000000300)=0x3) syz_open_procfs(0x0, &(0x7f0000000280)='attr/exec\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m0.994830386s ago: executing program 5 (id=2241): r0 = socket$inet6(0xa, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x9, 0x3) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=@can_newroute={0x2b4, 0x18, 0x600, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_CS_CRC8={0x11e, 0x6, {0x39, 0x2e, 0x78, 0x9, 0xa, "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", 0x2, "72cdb344a5bc5cff40101b479e92f9a03755597c"}}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_CS_CRC8={0x11e, 0x6, {0x35, 0x12, 0x4c, 0x81, 0x10, "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", 0x2, "1c3afdab311f6403ae424367e0e41344b06e962a"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "f3eef4e6ae824641"}, 0x7}}, @CGW_LIM_HOPS={0x5, 0xd, 0x58}, @CGW_MOD_AND={0x15, 0x1, {{{0x4}, 0x3, 0x1, 0x0, 0x0, "cca20ca07f2e2535"}, 0x6}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1}}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0xc1c0}, 0x48000) 5m45.364408969s ago: executing program 34 (id=2241): r0 = socket$inet6(0xa, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x9, 0x3) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=@can_newroute={0x2b4, 0x18, 0x600, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x7}, [@CGW_CS_CRC8={0x11e, 0x6, {0x39, 0x2e, 0x78, 0x9, 0xa, "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", 0x2, "72cdb344a5bc5cff40101b479e92f9a03755597c"}}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_CS_CRC8={0x11e, 0x6, {0x35, 0x12, 0x4c, 0x81, 0x10, "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", 0x2, "1c3afdab311f6403ae424367e0e41344b06e962a"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "f3eef4e6ae824641"}, 0x7}}, @CGW_LIM_HOPS={0x5, 0xd, 0x58}, @CGW_MOD_AND={0x15, 0x1, {{{0x4}, 0x3, 0x1, 0x0, 0x0, "cca20ca07f2e2535"}, 0x6}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1}}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0xc1c0}, 0x48000) 15.092929964s ago: executing program 1 (id=3426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) link(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@mcast2, 0x4e20, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000002580)=ANY=[@ANYBLOB="0200000001000500", @ANYRES32, @ANYBLOB="040001000000000008000100", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32], 0x4c, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a2fcab1219afa55c8075258f9f0529462a", @ANYRES16=r6, @ANYBLOB="040028bd7000fddbdf25320000000c0099000300000061000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24040850) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000180)={0x2001, 0x5}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x25}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x45}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r9, 0x40305829, &(0x7f0000000040)={0x0, 0x3, 0x3ff, 0x4, 0x9, 0x9}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x600880, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2603) move_mount(r8, 0x0, r8, 0x0, 0x64) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240), 0x8) sendmsg$nl_netfilter(r11, &(0x7f0000001f40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f00)={&(0x7f0000000bc0)=ANY=[], 0x1320}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c000000180001000000000000000000020000000000000900270000060015000500000028001680040001"], 0x4c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020) 14.85634088s ago: executing program 7 (id=3430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e", 0x1d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55", 0x3f}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ff", 0x93}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x3ff, 0x689c1e0c043b1181) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1040000) 13.607932401s ago: executing program 6 (id=3431): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r3 = timerfd_create(0x0, 0x0) r4 = timerfd_create(0xb, 0xc0000) timerfd_settime(r4, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf255c00000008000300", @ANYRES32=r6, @ANYBLOB="08006b0078ec34"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008804) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0x487ee599) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.497788123s ago: executing program 6 (id=3433): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000800000091114e0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x82, 0x0, &(0x7f0000000000)=0x3, 0x5000002) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000041400042dbd7000fcdbdf250800010001000000080001000000000008000100010000000800010000020000080001000002ed00"], 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x44040) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000044) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0), 0x0) timer_create(0x1, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000540)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c0000", 0x17}], 0x1}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x9255, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x114}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0xee4ade40126dd3ad, 0x1ffd, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35ac, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6388, 0x0, 0x20000000, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x2, 0x363}}], 0x1, &(0x7f00000006c0)={0x2e, 0x60, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r6, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x13f, 0xa}}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035", 0x47}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25", 0x9a}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYRES32, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 12.225328619s ago: executing program 7 (id=3437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x4) clock_gettime(0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_io_uring_setup(0xefc, &(0x7f0000000140)={0x0, 0x224f, 0x10000, 0x0, 0x28e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe"], 0x48}}, 0x0) 11.941793409s ago: executing program 4 (id=3438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x4) clock_gettime(0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_io_uring_setup(0xefc, &(0x7f0000000140)={0x0, 0x224f, 0x10000, 0x0, 0x28e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe"], 0x48}}, 0x0) 10.880935884s ago: executing program 1 (id=3440): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa, &(0x7f0000006680)) pivot_root(0x0, 0x0) truncate(0x0, 0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0xc, 0x2) mmap$snddsp(&(0x7f0000322000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r0 = socket$netlink(0x10, 0x3, 0xe) unshare(0x8000000) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x10010, r1, 0xb2aae000) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x800, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000400)={0x980000, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a7c, 0x6, '\x00', @value64=0x2}}) close(r1) 10.832302208s ago: executing program 7 (id=3441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x4) clock_gettime(0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_io_uring_setup(0xefc, &(0x7f0000000140)={0x0, 0x224f, 0x10000, 0x0, 0x28e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r7, &(0x7f0000000340)=""/19, 0x13, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe"], 0x48}}, 0x0) 9.706874449s ago: executing program 4 (id=3442): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0xe4, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x403}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 8.414777563s ago: executing program 4 (id=3444): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)=""/132, &(0x7f0000000340)=0x84) fallocate(r0, 0x0, 0x1000000, 0x3) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket(0x10, 0x803, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x101000, 0x0) ioctl$COMEDI_CHANINFO(r2, 0x80306403, &(0x7f0000034e40)={0x0, 0x0, &(0x7f0000027200), 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ec32301895fb71b86ae8de019c44d706269fe513397046f91215d70419454af3b1ad9e1a13bb129f6fe54baa2843d4962ae0163f1edbe24c7dd3543a02271e1bc3372f25ffcb163f7ab9b6cdbd89226702d6d2d0ee6948ec3ebf3ba2534e94e5d4a7d8f0ac252a34b99ab679ba7fe0670a45dbeaf75626aab86fd8f2b0ca83f8917ec88f0cbb29c73e90b2d6c39938d650a8ef0409ba92b244a5f1a65d1ea19f98bd86f409e26a", 0xa7) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) 8.396170231s ago: executing program 7 (id=3445): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f00007b8000/0x2000)=nil, 0x2000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa, &(0x7f0000006680)) pivot_root(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0xc, 0x2) mmap$snddsp(&(0x7f0000322000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r0 = socket$netlink(0x10, 0x3, 0xe) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x8000000000000001, 0x6) mmap$usbmon(&(0x7f00008f8000/0x2000)=nil, 0x2000, 0x1000002, 0x4000010, r1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x10010, r1, 0xb2aae000) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x800, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close(r1) 7.421079064s ago: executing program 6 (id=3446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) syz_extract_tcp_res(0x0, 0x80000000, 0xd) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5319, 0x0) 7.205224096s ago: executing program 4 (id=3448): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x248000, 0x9d) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x12c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7b9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x659a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004041}, 0x40004) r2 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private1, 0xb}]}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000e00)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac3", 0x0, 0xa0000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000c}, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x130, 0x0, 0x6, {0x6, 0x6, 0x0, '\x00', {0x6fff, 0x0, 0x1, 0x5, 0x0, r4, 0x8000, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0xabe, 0x5, {0x73c0, 0x2}, {0x8, 0x29}, {0x100000003, 0x7b1}, {0x5, 0x5710}, 0x8006, 0x6, 0xec, 0x80000000}}}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r9, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'nl80211\x00'}}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@access_uid={'access', 0x3d, r5}}, {@access_uid={'access', 0x3d, r7}}, {@cache_mmap}, {@noextend}, {@mmap}, {@ignoreqv}, {@access_client}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_lt={'euid<', r8}}, {@flag='rw'}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x33, 0x34, 0x37, 0x36, 0x30, 0x64, 0x36], 0x2d, [0x30, 0x30, 0x32, 0x36], 0x2d, [0x64, 0x65, 0x37, 0xd26558d500f6d00], 0x2d, [0x66, 0x36, 0x64, 0x31], 0x2d, [0x61, 0x61, 0x33, 0x31, 0x34, 0x0, 0x62, 0x64]}}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fowner_gt={'fowner>', r9}}, {@obj_user={'obj_user', 0x3d, '#:\''}}, {@fsname}]}}) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r12, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r11, 0xffffffffffffffff, 0x0) 6.545536312s ago: executing program 0 (id=3449): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2842, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) dup2(r0, 0xffffffffffffffff) readv(r0, &(0x7f0000002640)=[{&(0x7f0000001400)=""/57, 0x39}, {0x0}], 0x2) 6.462962506s ago: executing program 4 (id=3450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) link(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@mcast2, 0x4e20, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000002580)=ANY=[@ANYBLOB="0200000001000500", @ANYRES32, @ANYBLOB="040001000000000008000100", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32], 0x4c, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a2fcab1219afa55c8075258f9f0529462a", @ANYRES16=r6, @ANYBLOB="040028bd7000fddbdf25320000000c0099000300000061000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24040850) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000180)={0x2001, 0x5}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x25}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x45}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r9, 0x40305829, &(0x7f0000000040)={0x0, 0x3, 0x3ff, 0x4, 0x9, 0x9}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x600880, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2603) move_mount(r8, 0x0, r8, 0x0, 0x64) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240), 0x8) sendmsg$nl_netfilter(r11, &(0x7f0000001f40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f00)={&(0x7f0000000bc0)=ANY=[], 0x1320}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c000000180001000000000000000000020000000000000900270000060015000500000028001680040001"], 0x4c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020) 6.425471706s ago: executing program 6 (id=3451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x4) clock_gettime(0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_io_uring_setup(0xefc, &(0x7f0000000140)={0x0, 0x224f, 0x10000, 0x0, 0x28e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe"], 0x48}}, 0x0) 6.361017398s ago: executing program 1 (id=3452): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) (async, rerun: 64) r1 = userfaultfd(0x1) (rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x2000}) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/198, 0xc6}, {0x0}], 0x2, 0x7, 0x9) (async) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "31a63f442c039cf89fe4060bad671b01b5af0b91d2f81dd370a5a108356bb1f889b27055b05929af98db612c692803f38d6b4c42630fa7c5910c032e7a21d73b"}}}}, 0x0) 6.359670577s ago: executing program 0 (id=3453): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x42, 0x6, 0x3, 0x0, 0x1}, 0x50) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x1}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f0000000040)=')&-}\x00', 0x28c43, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x4]}, {0x0, 0xe7, 0x9408, 0xfffffffffffff800}}, 0x5, &(0x7f00000001c0), &(0x7f0000000240)=0x1}, 0x5, &(0x7f0000000800)=[{0x1, 0x0, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="8d02f4a680ad45dd61f03fd85970f2b70085790d3345712f98a45f90d8ffdc5645fd4289ee4f72ee74255592c6a96735274c41", 0x33, 0x1a}, {0x3, 0xfe00000, &(0x7f0000000300)='\'\x00', &(0x7f0000000480)="aa5ca66c24242aa8c5091d14586f145f582695e311325db5537501c41f8451e7aaa2dc07ff3d853d876fd64ac83e3640eb47769f4c29536f267a14ce3468851022da7a5bf236fed7f20af09a6a7a09dc42abc85e226d896d1eeda79af274e538f3f44675921c1fe83f8b858a21df3c2c8bf966490698227e0bb692c9939812c1a9bb9a1ce67f529777fe0b610c1ee8f98988dfb97ec82dbc7a8a09fd868e15beb1283b1714b106ee432538f9699cb62a517234da14c0259d8716bd01a5c434034906c1f5cf90a27a15a1251aefc77d", 0xcf, 0x18}, {0x2, 0x9, &(0x7f0000000580)='{-\x00', &(0x7f00000005c0)="ed0b22f8fa78eed7c249df484eb5c38a34e58d93fb94913d4ebba276cff433a43a37a0090d01e91d735951158c7099f5e3665515d826cb0a162889ba188303835a3d1001a854e52516bc2a7a5a0f3cec1a86672a414dbb13a5df37b90cce2f628e4c7fb92e1f894b44a43a9d3e0aa3a019150b7f00ab9d126cafc26f3ab680db5398cc4d7c0024537a8ee1c8e1f1c5f290f6fcc075a6b9d7c4af18c423e623010827c497e8af962a4908e2458f13ec4727482d3eb9d946da8af454b1eb85326ed990c455ac2087af90d5881f4186b230caa82dd517b0f97015ecf565d58601ab2e", 0xe1, 0x10}, {0x3, 0x5, &(0x7f00000006c0)='cgroup2\x00', &(0x7f0000000700)="528b5183d0ecb7009725d3d339d3dce32b57e038e1db67dfbd2642251f3ab4ea16ec4cc6eb18af9928136e4b8d0b8148a46b7674e0ea18999048e65a5a102b5ad78e9aa4df6713fffa", 0x49, 0x20}, {0x1, 0x3, 0x0, &(0x7f00000007c0)="1a8f8c4ce37689dc97459173e24e648ac6f66f68dae2634727b7f889296bd8264081239e0c77c3b0b84500"/58, 0x3a, 0x2}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0xc4, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa) ioctl$UBLK_U_IO_FETCH_REQ(r6, 0xc0107520, &(0x7f00000019c0)={0x4, 0x60b, 0x0, &(0x7f00000009c0)=@buf_512="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"}) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="ff", 0x1}], 0x1}, 0x3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.909649783s ago: executing program 1 (id=3456): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000030000000000000000000000bc0008000000000095000000000000008b553b1e0272b8616884fc7cc396efbcbe5d9778fb1223e1e77d61f38ebe98ac621cdd5880bf92eb468833d01b29dbb9b5f0d8538ad7"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0xc1, 0x7f, 0x20203143, 0x3f, [0x2], [0x800, 0xfffffffc, 0x6], [0x0, 0x20000000], [0x0, 0x0, 0x0, 0x7]}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000100)={0x0, 0x30314752, 0x140, 0x7ff, 0x2, @stepwise={{0x3, 0xa}, {0x1, 0xa}, {0x4934c26b}}}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @empty, @private}, &(0x7f0000000540)=0xc) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="76a8bc249fd0a704306d60ad08565aaf50d2e4e159c6904cc6a4c1eecb561219bff086b13134dd00a32d0d3b167382819251417d26031569a30f6e8ca45266c0eebabe5ece3a1617e452348e63b78a72b6db49a179fc1d6ac9", 0x59}, {&(0x7f0000000300)="032c5a0847e29ad3d236fe8b4119f928ef9697bdaad3f2405ef59187846ee9a931af23602be6b8668ff408e3feb4e06d3698a721be9fccb8a7ba7df306dc2cfd74f6b194b24d02460e158a3fc2efe5b9a80032b6abd0fb53a4a144d7ebffe19a2e153292f1de1f88814cd20597f3e2e0e246ad01e143f4cfe1bfb6fc6478ee02d78a36ff1009b7d58b8dc4b49922e7ec92f706236f0da5cadbb177f8ea9eb9f31c62f9bfb8c2bef3bdcee1307e6702007308752dc9a3eab07d466022e52552fc2a854ca678a04094ab38509c1b7da1b284148b8740881aa894543b43", 0xdc}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8b}}], 0x70}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}}, 0x8080) 3.536260116s ago: executing program 1 (id=3457): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000800000091114e0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x82, 0x0, &(0x7f0000000000)=0x3, 0x5000002) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000041400042dbd7000fcdbdf250800010001000000080001000000000008000100010000000800010000020000080001000002ed00"], 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x44040) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000044) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0), 0x0) timer_create(0x1, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000540)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c0000", 0x17}], 0x1}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x9255, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r3, r4, r5, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x3, 0x114}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0xee4ade40126dd3ad, 0x1ffd, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35ac, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6388, 0x0, 0x20000000, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x2, 0x363}}], 0x1, &(0x7f00000006c0)={0x2e, 0x60, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r6, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x13f, 0xa}}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYRES32, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 3.477519787s ago: executing program 0 (id=3458): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB="08006b0078ec34"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4008804) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0x487ee599) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.367216811s ago: executing program 0 (id=3459): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3, 0x20) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x10, 0x8}}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x2b, 0x0, "37ddfa1f1047a0a2be08f9683d9cfc56da791df0d11b215ea51282432449decea58c0afa4c3ec4bcd97121f3cfd07cfd0b2b742475102f6aae7d06a87b36734a8de7a7eb274221db71e0066e94e7de16"}, 0xd8) sendmmsg$inet(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)='=', 0x1}], 0x1}}], 0x1, 0x24040014) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r4 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={r6, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x4}, 0x90) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000540)="e9", 0x1}], 0x1) r7 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000300)={0x9a8, 0x2, 0x1, 0x0, 0x8}) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil) 2.206140764s ago: executing program 4 (id=3460): mount$fuse(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRES8, @ANYRESOCT]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b18", 0xd2}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a"], 0xb8, 0x40800}], 0x1, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x3ff, 0x689c1e0c043b1181) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907", 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@mpls_getnetconf={0x14, 0x52, 0xbe445738e849e0f2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) 2.187073645s ago: executing program 7 (id=3461): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x248000, 0x9d) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x130, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7b9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x659a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004041}, 0x40004) r2 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private1, 0xb}]}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000e00)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac3", 0x0, 0xa0000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000c}, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000300000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x130, 0x0, 0x6, {0x6, 0x6, 0x0, '\x00', {0x6fff, 0x0, 0x1, 0x5, 0x0, r4, 0x8000, '\x00', 0xff7fffffffffffff, 0x7fffffff, 0xabe, 0x5, {0x73c0, 0x2}, {0x8, 0x29}, {0x100000003, 0x7b1}, {0x5, 0x5710}, 0x8006, 0x6, 0xec, 0x80000000}}}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r9, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'nl80211\x00'}}, {@fscache}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@access_uid={'access', 0x3d, r5}}, {@access_uid={'access', 0x3d, r7}}, {@cache_mmap}, {@noextend}, {@mmap}, {@ignoreqv}, {@access_client}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_lt={'euid<', r8}}, {@flag='rw'}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x33, 0x34, 0x37, 0x36, 0x30, 0x64, 0x36], 0x2d, [0x30, 0x30, 0x32, 0x36], 0x2d, [0x64, 0x65, 0x37, 0xd26558d500f6d00], 0x2d, [0x66, 0x36, 0x64, 0x31], 0x2d, [0x61, 0x61, 0x33, 0x31, 0x34, 0x0, 0x62, 0x64]}}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fowner_gt={'fowner>', r9}}, {@obj_user={'obj_user', 0x3d, '#:\''}}, {@fsname}]}}) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r12, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r11, 0xffffffffffffffff, 0x0) 1.916781948s ago: executing program 7 (id=3462): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa, &(0x7f0000006680)) pivot_root(0x0, 0x0) truncate(0x0, 0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0xc, 0x2) mmap$snddsp(&(0x7f0000322000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r0 = socket$netlink(0x10, 0x3, 0xe) unshare(0x8000000) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x10010, r1, 0xb2aae000) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x800, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000400)={0x980000, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a7c, 0x6, '\x00', @value64=0x2}}) close(r1) 1.081902344s ago: executing program 0 (id=3463): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x7) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x11}, 0xfdeb}, 0x80) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x8, {0x8, 0x22, "59a1b95388e8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) 1.044546151s ago: executing program 6 (id=3464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x4) clock_gettime(0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x6}, 0xa) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_io_uring_setup(0xefc, &(0x7f0000000140)={0x0, 0x224f, 0x10000, 0x0, 0x28e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r7, &(0x7f0000000340)=""/19, 0x13, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=3465): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x42, 0x6, 0x3, 0x0, 0x1}, 0x50) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x1}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f0000000040)=')&-}\x00', 0x28c43, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x4]}, {0x0, 0xe7, 0x9408, 0xfffffffffffff800}}, 0x5, &(0x7f00000001c0), &(0x7f0000000240)=0x1}, 0x5, &(0x7f0000000800)=[{0x1, 0x0, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="8d02f4a680ad45dd61f03fd85970f2b70085790d3345712f98a45f90d8ffdc5645fd4289ee4f72ee74255592c6a96735274c41", 0x33, 0x1a}, {0x3, 0xfe00000, &(0x7f0000000300)='\'\x00', &(0x7f0000000480)="aa5ca66c24242aa8c5091d14586f145f582695e311325db5537501c41f8451e7aaa2dc07ff3d853d876fd64ac83e3640eb47769f4c29536f267a14ce3468851022da7a5bf236fed7f20af09a6a7a09dc42abc85e226d896d1eeda79af274e538f3f44675921c1fe83f8b858a21df3c2c8bf966490698227e0bb692c9939812c1a9bb9a1ce67f529777fe0b610c1ee8f98988dfb97ec82dbc7a8a09fd868e15beb1283b1714b106ee432538f9699cb62a517234da14c0259d8716bd01a5c434034906c1f5cf90a27a15a1251aefc77d", 0xcf, 0x18}, {0x2, 0x9, &(0x7f0000000580)='{-\x00', &(0x7f00000005c0)="ed0b22f8fa78eed7c249df484eb5c38a34e58d93fb94913d4ebba276cff433a43a37a0090d01e91d735951158c7099f5e3665515d826cb0a162889ba188303835a3d1001a854e52516bc2a7a5a0f3cec1a86672a414dbb13a5df37b90cce2f628e4c7fb92e1f894b44a43a9d3e0aa3a019150b7f00ab9d126cafc26f3ab680db5398cc4d7c0024537a8ee1c8e1f1c5f290f6fcc075a6b9d7c4af18c423e623010827c497e8af962a4908e2458f13ec4727482d3eb9d946da8af454b1eb85326ed990c455ac2087af90d5881f4186b230caa82dd517b0f97015ecf565d58601ab2e", 0xe1, 0x10}, {0x3, 0x5, &(0x7f00000006c0)='cgroup2\x00', &(0x7f0000000700)="528b5183d0ecb7009725d3d339d3dce32b57e038e1db67dfbd2642251f3ab4ea16ec4cc6eb18af9928136e4b8d0b8148a46b7674e0ea18999048e65a5a102b5ad78e9aa4df6713fffa", 0x49, 0x20}, {0x1, 0x3, 0x0, &(0x7f00000007c0)="1a8f8c4ce37689dc97459173e24e648ac6f66f68dae2634727b7f889296bd8264081239e0c77c3b0b84500"/58, 0x3a, 0x2}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0xc4, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a [ 891.121985][T15754] dump_stack_lvl+0xe8/0x150 [ 891.122017][T15754] should_fail_ex+0x467/0x600 [ 891.122047][T15754] should_failslab+0xa8/0x100 [ 891.122070][T15754] kmem_cache_alloc_noprof+0xa4/0x650 [ 891.122096][T15754] ? skb_clone+0x212/0x3a0 [ 891.122114][T15754] ? skb_clone+0x212/0x3a0 [ 891.122138][T15754] skb_clone+0x212/0x3a0 [ 891.122155][T15754] ? nfnetlink_rcv+0x4b0/0x28d0 [ 891.122182][T15754] nfnetlink_rcv+0x4e2/0x28d0 [ 891.122230][T15754] ? psi_group_change+0xacb/0x1080 [ 891.122346][T15754] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 891.122390][T15754] ? do_raw_spin_unlock+0xf5/0x210 [ 891.122417][T15754] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 891.122452][T15754] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 891.122474][T15754] ? lockdep_hardirqs_on+0x7a/0x110 [ 891.122498][T15754] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 891.122521][T15754] ? rcu_preempt_deferred_qs_irqrestore+0x911/0xb90 [ 891.122563][T15754] netlink_unicast+0x7f5/0x990 [ 891.122595][T15754] netlink_sendmsg+0x813/0xb40 [ 891.122621][T15754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.122639][T15754] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 891.122662][T15754] ? __kernel_text_address+0xd/0x30 [ 891.122678][T15754] ? unwind_get_return_address+0x4d/0x90 [ 891.122700][T15754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.122717][T15754] sock_sendmsg_nosec+0x13a/0x180 [ 891.122743][T15754] ____sys_sendmsg+0x565/0x870 [ 891.122761][T15754] ? __might_fault+0xaf/0x130 [ 891.122786][T15754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.122810][T15754] ? import_iovec+0x73/0xa0 [ 891.122830][T15754] ___sys_sendmsg+0x2a5/0x360 [ 891.122846][T15754] ? __lock_acquire+0x683/0x2ce0 [ 891.122866][T15754] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.122910][T15754] ? __fget_files+0x2a/0x420 [ 891.122925][T15754] ? __fget_files+0x3a8/0x420 [ 891.122949][T15754] __x64_sys_sendmsg+0x1b7/0x290 [ 891.122969][T15754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 891.123001][T15754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.123020][T15754] do_syscall_64+0x174/0x580 [ 891.123043][T15754] ? trace_irq_disable+0x3b/0x140 [ 891.123060][T15754] ? clear_bhb_loop+0x40/0x90 [ 891.123083][T15754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.123100][T15754] RIP: 0033:0x7fd43b32de59 [ 891.123117][T15754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.123131][T15754] RSP: 002b:00007fd439586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.123150][T15754] RAX: ffffffffffffffda RBX: 00007fd43b5b5fa0 RCX: 00007fd43b32de59 [ 891.123164][T15754] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 891.123175][T15754] RBP: 00007fd439586090 R08: 0000000000000000 R09: 0000000000000000 [ 891.123186][T15754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.123196][T15754] R13: 00007fd43b5b6038 R14: 00007fd43b5b5fa0 R15: 00007ffc29223c88 [ 891.123222][T15754] [ 891.342786][T12255] Bluetooth: hci3: command tx timeout [ 892.478418][T15769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2930'. [ 893.467804][T12255] Bluetooth: hci3: command tx timeout [ 895.400697][T15821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.503075][T12255] Bluetooth: hci3: command tx timeout [ 895.597237][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'. [ 895.846847][T15840] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2943'. [ 896.700206][T15730] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.700479][T15730] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.700681][T15730] bridge_slave_0: entered allmulticast mode [ 896.744124][T15730] bridge_slave_0: entered promiscuous mode [ 896.751445][T15730] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.751610][T15730] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.751798][T15730] bridge_slave_1: entered allmulticast mode [ 896.781259][T15730] bridge_slave_1: entered promiscuous mode [ 896.988463][T15730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.015527][T15730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.596789][T12255] Bluetooth: hci3: command tx timeout [ 897.891236][T15859] overlay: Unknown parameter '*-^*}.w' [ 897.941471][T15845] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 897.941682][T15845] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 897.941765][T15845] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 897.988147][T15730] team0: Port device team_slave_0 added [ 897.996833][T15730] team0: Port device team_slave_1 added [ 898.093884][T15845] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 898.121702][T15730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.121716][T15730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.121741][T15730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.125167][T15730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.125181][T15730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.125213][T15730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.258060][T15730] hsr_slave_0: entered promiscuous mode [ 898.261193][T15730] hsr_slave_1: entered promiscuous mode [ 898.261761][T15730] debugfs: 'hsr0' already exists in 'hsr' [ 898.261776][T15730] Cannot create hsr debugfs directory [ 898.412405][T15845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 898.418445][T15845] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 898.541842][T15845] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 899.160095][T15890] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2956'. [ 899.977982][T15730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.989783][T14909] Bluetooth: hci5: command 0x0c1a tx timeout [ 899.989802][T12255] Bluetooth: hci4: command 0x0406 tx timeout [ 900.124501][T15894] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20002 [ 900.203215][ T37] audit: type=1326 audit(2000000284.207:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15893 comm="syz.4.2960" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f2928b2de59 code=0x0 [ 900.463339][T14909] Bluetooth: hci3: command 0x0c1a tx timeout [ 901.823520][T15730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.885215][T15926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.885360][T15926] batadv_slave_0: entered promiscuous mode [ 901.899534][T15926] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 901.926835][T12385] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 902.067234][T14909] Bluetooth: hci5: command 0x0c1a tx timeout [ 902.086368][T12385] usb 7-1: unable to get BOS descriptor or descriptor too short [ 902.087592][T12385] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.087657][T12385] usb 7-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.087679][T12385] usb 7-1: config 1 interface 0 has no altsetting 0 [ 902.089799][T12385] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 902.089823][T12385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.089841][T12385] usb 7-1: Product: syz [ 902.089852][T12385] usb 7-1: Manufacturer: syz [ 902.089859][T12385] usb 7-1: SerialNumber: syz [ 902.412474][ T5588] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 902.483433][T15730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.552841][T14909] Bluetooth: hci3: command 0x0c1a tx timeout [ 902.572855][ T5588] usb 1-1: Using ep0 maxpacket: 8 [ 902.576932][ T5588] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 902.576955][ T5588] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 902.576965][ T5588] usb 1-1: Product: syz [ 902.576972][ T5588] usb 1-1: Manufacturer: syz [ 902.576980][ T5588] usb 1-1: SerialNumber: syz [ 902.604180][ T5588] usb 1-1: config 0 descriptor?? [ 902.644445][ T6869] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 902.661297][ T5588] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 902.845377][T15730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.038348][ T5588] gspca_zc3xx: reg_r err -71 [ 903.038443][ T5588] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 903.081004][T12385] cdc_ether 7-1:1.0: skipping garbage [ 903.081016][T12385] cdc_ether 7-1:1.0: missing cdc header ether descriptor [ 903.108317][ T5588] usb 1-1: USB disconnect, device number 54 [ 903.961918][T12385] usb 7-1: USB disconnect, device number 50 [ 904.037168][T15938] netlink: 'syz.6.2971': attribute type 5 has an invalid length. [ 904.037189][T15938] netlink: 'syz.6.2971': attribute type 6 has an invalid length. [ 904.037201][T15938] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2971'. [ 904.134757][T15939] FAULT_INJECTION: forcing a failure. [ 904.134757][T15939] name failslab, interval 1, probability 0, space 0, times 0 [ 904.134791][T15939] CPU: 1 UID: 0 PID: 15939 Comm: syz.6.2971 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 904.134816][T15939] Tainted: [L]=SOFTLOCKUP [ 904.134822][T15939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.134833][T15939] Call Trace: [ 904.134840][T15939] [ 904.134848][T15939] dump_stack_lvl+0xe8/0x150 [ 904.134881][T15939] should_fail_ex+0x467/0x600 [ 904.134912][T15939] should_failslab+0xa8/0x100 [ 904.134936][T15939] kmem_cache_alloc_noprof+0xa4/0x650 [ 904.134964][T15939] ? mas_alloc_nodes+0x291/0x350 [ 904.134986][T15939] ? mas_alloc_nodes+0x291/0x350 [ 904.135012][T15939] mas_alloc_nodes+0x291/0x350 [ 904.135039][T15939] mas_preallocate+0x2cf/0x630 [ 904.135068][T15939] ? __pfx_mas_preallocate+0x10/0x10 [ 904.135100][T15939] ? anon_vma_name+0x61/0x210 [ 904.135122][T15939] ? __mas_set_range+0x11a/0x3a0 [ 904.135148][T15939] __split_vma+0x33d/0xa40 [ 904.135182][T15939] ? __pfx___split_vma+0x10/0x10 [ 904.135224][T15939] vma_modify+0x9a7/0x1ec0 [ 904.135262][T15939] vma_modify_policy+0x230/0x2b0 [ 904.135295][T15939] ? __pfx_vma_modify_policy+0x10/0x10 [ 904.135344][T15939] mbind_range+0x2c1/0x800 [ 904.135366][T15939] ? mas_find+0xab1/0xcf0 [ 904.135396][T15939] __se_sys_mbind+0xacd/0x10e0 [ 904.135422][T15939] ? __pfx___se_sys_mbind+0x10/0x10 [ 904.135454][T15939] ? fput+0xa0/0xd0 [ 904.135480][T15939] ? ksys_write+0x248/0x270 [ 904.135503][T15939] ? __pfx_ksys_write+0x10/0x10 [ 904.135529][T15939] ? __x64_sys_mbind+0x21/0xf0 [ 904.135546][T15939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.135566][T15939] do_syscall_64+0x174/0x580 [ 904.135588][T15939] ? trace_irq_disable+0x3b/0x140 [ 904.135605][T15939] ? clear_bhb_loop+0x40/0x90 [ 904.135627][T15939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.135644][T15939] RIP: 0033:0x7f9d590bde59 [ 904.135662][T15939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.135677][T15939] RSP: 002b:00007f9d572f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 904.135696][T15939] RAX: ffffffffffffffda RBX: 00007f9d59346090 RCX: 00007f9d590bde59 [ 904.135709][T15939] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 904.135722][T15939] RBP: 00007f9d572f5090 R08: 0000000000000000 R09: 0000000000000002 [ 904.135733][T15939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.135745][T15939] R13: 00007f9d59346128 R14: 00007f9d59346090 R15: 00007ffcf787ead8 [ 904.135774][T15939] [ 904.142810][T14909] Bluetooth: hci5: command 0x0c1a tx timeout [ 904.814262][T14909] Bluetooth: hci3: command 0x0c1a tx timeout [ 908.653027][T15987] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 909.452343][T15987] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 909.972178][T16008] FAULT_INJECTION: forcing a failure. [ 909.972178][T16008] name failslab, interval 1, probability 0, space 0, times 0 [ 909.972212][T16008] CPU: 1 UID: 0 PID: 16008 Comm: syz.6.2990 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 909.972237][T16008] Tainted: [L]=SOFTLOCKUP [ 909.972243][T16008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 909.972254][T16008] Call Trace: [ 909.972262][T16008] [ 909.972270][T16008] dump_stack_lvl+0xe8/0x150 [ 909.972302][T16008] should_fail_ex+0x467/0x600 [ 909.972331][T16008] should_failslab+0xa8/0x100 [ 909.972353][T16008] __kmalloc_noprof+0xfe/0x780 [ 909.972371][T16008] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 909.972390][T16008] ? tomoyo_encode+0x2ad/0x570 [ 909.972409][T16008] ? tomoyo_encode+0x2ad/0x570 [ 909.972434][T16008] tomoyo_encode+0x2ad/0x570 [ 909.972459][T16008] tomoyo_mount_permission+0x3a4/0x9e0 [ 909.972477][T16008] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 909.972501][T16008] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 909.972519][T16008] ? kasan_save_track+0x4f/0x80 [ 909.972579][T16008] ? kasan_quarantine_put+0xbb/0x1f0 [ 909.972605][T16008] security_sb_mount+0xe4/0x320 [ 909.972629][T16008] path_mount+0xbc/0x1040 [ 909.972657][T16008] ? user_path_at+0xd4/0x160 [ 909.972677][T16008] __se_sys_mount+0x31d/0x420 [ 909.972699][T16008] ? __pfx___se_sys_mount+0x10/0x10 [ 909.972720][T16008] ? __x64_sys_mount+0x20/0xc0 [ 909.972736][T16008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.972756][T16008] do_syscall_64+0x174/0x580 [ 909.972778][T16008] ? trace_irq_disable+0x3b/0x140 [ 909.972793][T16008] ? clear_bhb_loop+0x40/0x90 [ 909.972815][T16008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.972840][T16008] RIP: 0033:0x7f9d590bde59 [ 909.972862][T16008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.972877][T16008] RSP: 002b:00007f9d57316028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 909.972896][T16008] RAX: ffffffffffffffda RBX: 00007f9d59345fa0 RCX: 00007f9d590bde59 [ 909.972909][T16008] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000140 [ 909.972921][T16008] RBP: 00007f9d57316090 R08: 0000000000000000 R09: 0000000000000000 [ 909.972932][T16008] R10: 0000000000200001 R11: 0000000000000246 R12: 0000000000000001 [ 909.972944][T16008] R13: 00007f9d59346038 R14: 00007f9d59345fa0 R15: 00007ffcf787ead8 [ 909.972974][T16008] [ 910.118608][T16006] netlink: 1760 bytes leftover after parsing attributes in process `syz.7.2989'. [ 911.221729][T15730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 911.295864][T15730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 911.533038][T15730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 912.437011][T15730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 912.457158][T15730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 912.767084][T15730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 912.768997][T15730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.079003][T16040] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2999'. [ 913.642159][T15730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.625253][T15730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.716578][T15730] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.776027][T15671] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.776150][T15671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.008581][T15671] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.008745][T15671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.130151][T16087] FAULT_INJECTION: forcing a failure. [ 915.130151][T16087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.130206][T16087] CPU: 1 UID: 0 PID: 16087 Comm: syz.6.3005 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 915.130232][T16087] Tainted: [L]=SOFTLOCKUP [ 915.130239][T16087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.130250][T16087] Call Trace: [ 915.130258][T16087] [ 915.130266][T16087] dump_stack_lvl+0xe8/0x150 [ 915.130299][T16087] should_fail_ex+0x467/0x600 [ 915.130329][T16087] _copy_from_user+0x2d/0xb0 [ 915.130349][T16087] dvb_usercopy+0x15c/0x2e0 [ 915.130372][T16087] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 915.130398][T16087] ? __pfx_dvb_usercopy+0x10/0x10 [ 915.130414][T16087] ? irqentry_exit+0x218/0x8f0 [ 915.130450][T16087] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 915.130468][T16087] ? dvb_frontend_ioctl+0x48/0x80 [ 915.130483][T16087] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 915.130505][T16087] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 915.130523][T16087] dvb_frontend_ioctl+0x5c/0x80 [ 915.130542][T16087] __se_sys_ioctl+0xff/0x170 [ 915.130565][T16087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.130585][T16087] do_syscall_64+0x174/0x580 [ 915.130610][T16087] ? clear_bhb_loop+0x40/0x90 [ 915.130633][T16087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.130651][T16087] RIP: 0033:0x7f9d590bde59 [ 915.130668][T16087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.130683][T16087] RSP: 002b:00007f9d572d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.130703][T16087] RAX: ffffffffffffffda RBX: 00007f9d59346180 RCX: 00007f9d590bde59 [ 915.130716][T16087] RDX: 0000200000000000 RSI: 0000000080106f53 RDI: 0000000000000003 [ 915.130729][T16087] RBP: 00007f9d572d4090 R08: 0000000000000000 R09: 0000000000000000 [ 915.130740][T16087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.130752][T16087] R13: 00007f9d59346218 R14: 00007f9d59346180 R15: 00007ffcf787ead8 [ 915.130782][T16087] [ 917.315642][T16097] Can't find ip_set type ha [ 918.352335][T15730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.481293][T15730] veth0_vlan: entered promiscuous mode [ 918.510112][T15730] veth1_vlan: entered promiscuous mode [ 918.615479][T15730] veth0_macvtap: entered promiscuous mode [ 918.630262][T15730] veth1_macvtap: entered promiscuous mode [ 918.660756][T15730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.673867][T15730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.902883][T16133] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3016'. [ 919.528228][ T6375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.772454][ T6376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.782260][ T6376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.783285][ T6376] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.870440][ T6373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.870460][ T6373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.143398][ T6376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.143418][ T6376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.148344][T16180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 923.544112][T16177] netlink: 'syz.4.3022': attribute type 33 has an invalid length. [ 923.544135][T16177] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3022'. [ 925.935712][T12255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 926.029039][T12255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 926.057206][T12255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 926.059567][T12255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 926.066964][T12255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 927.755574][T16234] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 927.814663][T16234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 928.142801][T12255] Bluetooth: hci0: command tx timeout [ 929.113485][ T6476] bond0: (slave syz_tun): Releasing backup interface [ 930.226726][T12255] Bluetooth: hci0: command tx timeout [ 931.132699][ T197] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 931.294200][ T197] usb 5-1: Using ep0 maxpacket: 8 [ 931.296857][ T197] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 931.296881][ T197] usb 5-1: config 179 has no interface number 0 [ 931.296924][ T197] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 931.296949][ T197] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 931.296973][ T197] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 931.296996][ T197] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 931.297020][ T197] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 931.297044][ T197] usb 5-1: config 179 interface 65 has no altsetting 0 [ 931.297075][ T197] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 931.297096][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.461908][T16211] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.462115][T16211] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.462314][T16211] bridge_slave_0: entered allmulticast mode [ 931.487995][T16211] bridge_slave_0: entered promiscuous mode [ 931.505273][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.552851][T16211] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.552995][T16211] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.553207][T16211] bridge_slave_1: entered allmulticast mode [ 931.584675][T16211] bridge_slave_1: entered promiscuous mode [ 931.634492][T16211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.638167][T16211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.699260][T16211] team0: Port device team_slave_0 added [ 931.708722][T16211] team0: Port device team_slave_1 added [ 931.730842][ T197] kernel read not supported for file /1966/net/rt6_stats (pid: 197 comm: kworker/0:2) [ 931.762011][T16211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.762026][T16211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.762049][T16211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.822206][T12385] usb 5-1: USB disconnect, device number 63 [ 931.832128][T16211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.832144][T16211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.832168][T16211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.980206][T16211] hsr_slave_0: entered promiscuous mode [ 931.981538][T16211] hsr_slave_1: entered promiscuous mode [ 931.982446][T16211] debugfs: 'hsr0' already exists in 'hsr' [ 931.982468][T16211] Cannot create hsr debugfs directory [ 932.302890][T14909] Bluetooth: hci0: command tx timeout [ 932.586458][T16297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 933.932800][T13211] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 934.105423][T16211] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.469989][T14909] Bluetooth: hci0: command tx timeout [ 934.479704][ T6863] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 934.485675][T13211] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 934.485702][T13211] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 934.489794][T13211] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 934.489822][T13211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.489841][T13211] usb 5-1: Product: syz [ 934.489855][T13211] usb 5-1: Manufacturer: syz [ 934.489867][T13211] usb 5-1: SerialNumber: syz [ 934.517098][T13211] usb 5-1: config 0 descriptor?? [ 934.585102][T13211] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 935.281139][T16211] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.933963][T13211] gspca_sunplus: reg_r err -32 [ 935.934044][T13211] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 936.229669][T16211] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.377573][T16336] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 936.819742][T16211] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.820850][T16346] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 938.306019][ T5722] usb 5-1: USB disconnect, device number 64 [ 938.721077][T16371] veth6: entered allmulticast mode [ 938.908168][T16375] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 939.038657][T16378] FAULT_INJECTION: forcing a failure. [ 939.038657][T16378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.038691][T16378] CPU: 1 UID: 0 PID: 16378 Comm: syz.4.3073 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 939.038718][T16378] Tainted: [L]=SOFTLOCKUP [ 939.038724][T16378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.038736][T16378] Call Trace: [ 939.038744][T16378] [ 939.038752][T16378] dump_stack_lvl+0xe8/0x150 [ 939.038785][T16378] should_fail_ex+0x467/0x600 [ 939.038816][T16378] _copy_to_user+0x31/0xb0 [ 939.038838][T16378] snd_rawmidi_control_ioctl+0x362/0x430 [ 939.038989][T16378] ? __pfx_snd_rawmidi_control_ioctl+0x10/0x10 [ 939.039039][T16378] ? down_read+0x156/0x200 [ 939.039066][T16378] ? __pfx_down_read+0x10/0x10 [ 939.039092][T16378] ? snd_pcm_control_ioctl+0x127/0x660 [ 939.039143][T16378] ? snd_hwdep_control_ioctl+0xd6/0x3a0 [ 939.039166][T16378] snd_ctl_ioctl+0xc43/0x1ac0 [ 939.039217][T16378] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 939.039236][T16378] ? __lock_acquire+0x683/0x2ce0 [ 939.039259][T16378] ? kasan_save_track+0x4f/0x80 [ 939.039276][T16378] ? kasan_save_track+0x3e/0x80 [ 939.039291][T16378] ? kasan_save_free_info+0x40/0x50 [ 939.039312][T16378] ? __kasan_slab_free+0x5c/0x80 [ 939.039329][T16378] ? kfree+0x1c5/0x6c0 [ 939.039351][T16378] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 939.039377][T16378] ? security_file_ioctl+0xc3/0x2a0 [ 939.039394][T16378] ? __se_sys_ioctl+0x47/0x170 [ 939.039415][T16378] ? do_syscall_64+0x174/0x580 [ 939.039438][T16378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.039499][T16378] ? kasan_quarantine_put+0xbb/0x1f0 [ 939.039541][T16378] ? tomoyo_path_number_perm+0x219/0x5f0 [ 939.039568][T16378] ? tomoyo_path_number_perm+0x219/0x5f0 [ 939.039597][T16378] ? do_vfs_ioctl+0x1184/0x1550 [ 939.039622][T16378] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 939.039644][T16378] ? __pfx_smack_log+0x10/0x10 [ 939.039679][T16378] ? smk_tskacc+0x2fb/0x370 [ 939.039706][T16378] ? smack_file_ioctl+0x2c2/0x360 [ 939.039734][T16378] ? __pfx_smack_file_ioctl+0x10/0x10 [ 939.039769][T16378] ? __fget_files+0x2a/0x420 [ 939.039786][T16378] ? __fget_files+0x3a8/0x420 [ 939.039803][T16378] ? __fget_files+0x2a/0x420 [ 939.039824][T16378] ? bpf_lsm_file_ioctl+0x9/0x20 [ 939.039850][T16378] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 939.039869][T16378] __se_sys_ioctl+0xff/0x170 [ 939.039889][T16378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.039909][T16378] do_syscall_64+0x174/0x580 [ 939.039931][T16378] ? trace_irq_disable+0x3b/0x140 [ 939.039963][T16378] ? clear_bhb_loop+0x40/0x90 [ 939.039986][T16378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.040004][T16378] RIP: 0033:0x7f2928b2de59 [ 939.040021][T16378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.040036][T16378] RSP: 002b:00007f2926d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.040056][T16378] RAX: ffffffffffffffda RBX: 00007f2928db5fa0 RCX: 00007f2928b2de59 [ 939.040070][T16378] RDX: 0000200000000040 RSI: 00000000c10c5541 RDI: 0000000000000003 [ 939.040083][T16378] RBP: 00007f2926d86090 R08: 0000000000000000 R09: 0000000000000000 [ 939.040093][T16378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.040105][T16378] R13: 00007f2928db6038 R14: 00007f2928db5fa0 R15: 00007fff79520308 [ 939.040134][T16378] [ 939.519962][ T37] audit: type=1326 audit(2000002627.555:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.520091][ T37] audit: type=1326 audit(2000002627.555:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.520385][ T37] audit: type=1326 audit(2000002627.555:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.604690][ T37] audit: type=1326 audit(2000002627.555:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.604743][ T37] audit: type=1326 audit(2000002627.555:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.604782][ T37] audit: type=1326 audit(2000002627.565:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.604823][ T37] audit: type=1326 audit(2000002627.565:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.604860][ T37] audit: type=1326 audit(2000002627.595:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.604898][ T37] audit: type=1326 audit(2000002627.595:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.604936][ T37] audit: type=1326 audit(2000002627.605:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16380 comm="syz.1.3074" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f544dc6de59 code=0x7ffc0000 [ 939.902979][ T5588] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 940.057191][ T5588] usb 5-1: Using ep0 maxpacket: 16 [ 940.061072][ T5588] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.063604][ T5588] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 940.063628][ T5588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.063647][ T5588] usb 5-1: Product: syz [ 940.063659][ T5588] usb 5-1: Manufacturer: syz [ 940.063671][ T5588] usb 5-1: SerialNumber: syz [ 940.078558][ T5588] usb 5-1: config 0 descriptor?? [ 940.131746][ T5588] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 940.558410][T16400] FAULT_INJECTION: forcing a failure. [ 940.558410][T16400] name failslab, interval 1, probability 0, space 0, times 0 [ 940.558444][T16400] CPU: 1 UID: 0 PID: 16400 Comm: syz.7.3080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 940.558471][T16400] Tainted: [L]=SOFTLOCKUP [ 940.558477][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 940.558488][T16400] Call Trace: [ 940.558495][T16400] [ 940.558503][T16400] dump_stack_lvl+0xe8/0x150 [ 940.558536][T16400] should_fail_ex+0x467/0x600 [ 940.558568][T16400] should_failslab+0xa8/0x100 [ 940.558590][T16400] __kvmalloc_node_noprof+0x17a/0x8a0 [ 940.558613][T16400] ? __rhashtable_init_noprof+0x54d/0xaf0 [ 940.558637][T16400] ? __rhashtable_init_noprof+0x54d/0xaf0 [ 940.558666][T16400] __rhashtable_init_noprof+0x54d/0xaf0 [ 940.558693][T16400] __rhltable_init_noprof+0x26/0x70 [ 940.558718][T16400] nf_tables_newtable+0x6a7/0x1950 [ 940.558877][T16400] nfnetlink_rcv+0x1291/0x28d0 [ 940.558902][T16400] ? __local_bh_enable+0x1e1/0x2f0 [ 940.558955][T16400] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 940.558995][T16400] ? ref_tracker_free+0x668/0x820 [ 940.559046][T16400] ? skb_clone+0x246/0x3a0 [ 940.559068][T16400] ? __netlink_deliver_tap+0x811/0x860 [ 940.559094][T16400] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.559112][T16400] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.559135][T16400] netlink_unicast+0x7f5/0x990 [ 940.559171][T16400] netlink_sendmsg+0x813/0xb40 [ 940.559199][T16400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.559219][T16400] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 940.559244][T16400] ? __kernel_text_address+0xd/0x30 [ 940.559262][T16400] ? unwind_get_return_address+0x4d/0x90 [ 940.559284][T16400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.559301][T16400] sock_sendmsg_nosec+0x13a/0x180 [ 940.559326][T16400] ____sys_sendmsg+0x565/0x870 [ 940.559343][T16400] ? __might_fault+0xaf/0x130 [ 940.559369][T16400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.559396][T16400] ? import_iovec+0x73/0xa0 [ 940.559419][T16400] ___sys_sendmsg+0x2a5/0x360 [ 940.559436][T16400] ? __lock_acquire+0x683/0x2ce0 [ 940.559458][T16400] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.559512][T16400] ? __fget_files+0x2a/0x420 [ 940.559529][T16400] ? __fget_files+0x3a8/0x420 [ 940.559557][T16400] __x64_sys_sendmsg+0x1b7/0x290 [ 940.559579][T16400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.559616][T16400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.559636][T16400] do_syscall_64+0x174/0x580 [ 940.559660][T16400] ? trace_irq_disable+0x3b/0x140 [ 940.559678][T16400] ? clear_bhb_loop+0x40/0x90 [ 940.559700][T16400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.559718][T16400] RIP: 0033:0x7f9a8b0ede59 [ 940.559735][T16400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.559749][T16400] RSP: 002b:00007f9a89346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.559769][T16400] RAX: ffffffffffffffda RBX: 00007f9a8b375fa0 RCX: 00007f9a8b0ede59 [ 940.559782][T16400] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 940.559794][T16400] RBP: 00007f9a89346090 R08: 0000000000000000 R09: 0000000000000000 [ 940.559805][T16400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.559816][T16400] R13: 00007f9a8b376038 R14: 00007f9a8b375fa0 R15: 00007ffda47a3508 [ 940.559866][T16400] [ 941.093703][T16211] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 941.121578][T16211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 941.124214][T16405] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3082'. [ 941.126053][T16211] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 941.269594][ T6375] usb 5-1: Failed to submit usb control message: -110 [ 941.269628][ T6375] usb 5-1: unable to send the bmi data to the device: -110 [ 941.269645][ T6375] usb 5-1: unable to get target info from device [ 941.269659][ T6375] usb 5-1: could not get target info (-110) [ 941.269752][ T6375] usb 5-1: could not probe fw (-110) [ 941.285598][T16211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 941.289403][T16211] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 941.338089][T16211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 941.339405][T16211] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 941.390689][T16211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.775812][T16422] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3085'. [ 942.614821][T13211] usb 5-1: USB disconnect, device number 65 [ 942.631807][T16425] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 942.862506][T16211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.951750][T16211] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.270195][T16435] fuse: Unknown parameter '0x0000000000000003' [ 943.942340][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.942470][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.095947][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.096059][ T6371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.462493][T16448] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 944.463073][T16448] CIFS mount error: No usable UNC path provided in device string! [ 944.463073][T16448] [ 944.463382][T16448] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 945.100381][T16462] overlayfs: overlapping lowerdir path [ 945.332346][ T37] kauditd_printk_skb: 57 callbacks suppressed [ 945.332366][ T37] audit: type=1326 audit(2000002633.355:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16469 comm="syz.7.3099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a8b0ede59 code=0x0 [ 946.006187][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3099'. [ 946.372008][T16485] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 947.746809][T16502] netlink: 'syz.7.3104': attribute type 1 has an invalid length. [ 947.746830][T16502] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3104'. [ 947.749517][T16211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.212370][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3104'. [ 948.572752][T16519] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 948.574121][T16519] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 948.577609][T16515] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.612781][T13211] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 948.659184][T16515] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.676206][T16515] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3105'. [ 948.722393][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 948.762801][T13211] usb 1-1: Using ep0 maxpacket: 8 [ 948.764481][T13211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 948.764495][T13211] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 948.766481][T13211] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 948.766495][T13211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.766513][T13211] usb 1-1: Product: syz [ 948.766520][T13211] usb 1-1: Manufacturer: syz [ 948.766527][T13211] usb 1-1: SerialNumber: syz [ 948.770935][T13211] usb 1-1: config 0 descriptor?? [ 949.007678][T16211] veth0_vlan: entered promiscuous mode [ 949.040910][T16211] veth1_vlan: entered promiscuous mode [ 949.076702][T16211] veth0_macvtap: entered promiscuous mode [ 949.084788][T16211] veth1_macvtap: entered promiscuous mode [ 949.101890][T16211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.145314][T16211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.168145][ T6375] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.170007][ T6375] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.170134][ T6375] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.170161][ T6375] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.317491][T16532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.318087][T16532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.558643][T16535] bond1: option ad_select: invalid value (254) [ 949.575057][T16535] bond1 (unregistering): Released all slaves [ 949.659987][T16544] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 950.948585][T15671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.948604][T15671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.324560][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.324580][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.421623][ T5834] usb 1-1: USB disconnect, device number 55 [ 951.451307][T16571] FAULT_INJECTION: forcing a failure. [ 951.451307][T16571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.451341][T16571] CPU: 1 UID: 0 PID: 16571 Comm: syz.1.3121 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 951.451366][T16571] Tainted: [L]=SOFTLOCKUP [ 951.451373][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 951.451383][T16571] Call Trace: [ 951.451391][T16571] [ 951.451399][T16571] dump_stack_lvl+0xe8/0x150 [ 951.451430][T16571] should_fail_ex+0x467/0x600 [ 951.451461][T16571] _copy_from_iter+0x1d3/0x1660 [ 951.451490][T16571] ? rcu_is_watching+0x15/0xb0 [ 951.451512][T16571] ? trace_kmem_cache_alloc+0x29/0xe0 [ 951.451542][T16571] ? __pfx__copy_from_iter+0x10/0x10 [ 951.451566][T16571] ? __alloc_skb+0x276/0x7a0 [ 951.451588][T16571] ? __alloc_skb+0x276/0x7a0 [ 951.451615][T16571] ? netlink_sendmsg+0x650/0xb40 [ 951.451633][T16571] ? skb_put+0x112/0x210 [ 951.451659][T16571] netlink_sendmsg+0x6c0/0xb40 [ 951.451686][T16571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.451706][T16571] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 951.451731][T16571] ? __kernel_text_address+0xd/0x30 [ 951.451748][T16571] ? unwind_get_return_address+0x4d/0x90 [ 951.451770][T16571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.451787][T16571] sock_sendmsg_nosec+0x13a/0x180 [ 951.451812][T16571] ____sys_sendmsg+0x565/0x870 [ 951.451828][T16571] ? __might_fault+0xaf/0x130 [ 951.451851][T16571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.451879][T16571] ? import_iovec+0x73/0xa0 [ 951.451901][T16571] ___sys_sendmsg+0x2a5/0x360 [ 951.451917][T16571] ? __lock_acquire+0x683/0x2ce0 [ 951.451939][T16571] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.451990][T16571] ? __fget_files+0x2a/0x420 [ 951.452009][T16571] ? __fget_files+0x3a8/0x420 [ 951.452036][T16571] __x64_sys_sendmsg+0x1b7/0x290 [ 951.452057][T16571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.452098][T16571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.452117][T16571] do_syscall_64+0x174/0x580 [ 951.452140][T16571] ? trace_irq_disable+0x3b/0x140 [ 951.452157][T16571] ? clear_bhb_loop+0x40/0x90 [ 951.452179][T16571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.452197][T16571] RIP: 0033:0x7f544dc6de59 [ 951.452214][T16571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.452227][T16571] RSP: 002b:00007f544bec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.452247][T16571] RAX: ffffffffffffffda RBX: 00007f544def5fa0 RCX: 00007f544dc6de59 [ 951.452260][T16571] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 951.452272][T16571] RBP: 00007f544bec6090 R08: 0000000000000000 R09: 0000000000000000 [ 951.452283][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.452294][T16571] R13: 00007f544def6038 R14: 00007f544def5fa0 R15: 00007ffeb3c2a9d8 [ 951.452321][T16571] [ 951.921692][T16583] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 951.953075][ T5834] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 952.115548][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.115572][ T5834] usb 2-1: config 0 has no interfaces? [ 952.115600][ T5834] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 952.115622][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.175789][ T5834] usb 2-1: config 0 descriptor?? [ 952.372838][T16591] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3026'. [ 953.625932][T12255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 953.757328][T12255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 953.771058][T12255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 953.782024][T12255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 953.789739][T12255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 954.246515][T16635] netdevsim netdevsim6 30: renamed from netdevsim0 (while UP) [ 954.477991][ T6376] netdevsim netdevsim6 30: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.478038][ T6376] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.478072][ T6376] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.478104][ T6376] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.666696][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3131'. [ 955.908842][T16658] tmpfs: Unsupported parameter 'huge' [ 955.982952][T14909] Bluetooth: hci1: command tx timeout [ 956.415622][ T6378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.710550][T16656] FAULT_INJECTION: forcing a failure. [ 956.710550][T16656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.710583][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.6.3136 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 956.710606][T16656] Tainted: [L]=SOFTLOCKUP [ 956.710612][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.710623][T16656] Call Trace: [ 956.710631][T16656] [ 956.710639][T16656] dump_stack_lvl+0xe8/0x150 [ 956.710674][T16656] should_fail_ex+0x467/0x600 [ 956.710707][T16656] _copy_from_user+0x2d/0xb0 [ 956.710727][T16656] do_pagemap_cmd+0x13d/0xc50 [ 956.710844][T16656] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 956.710890][T16656] ? __fget_files+0x2a/0x420 [ 956.710908][T16656] ? __fget_files+0x3a8/0x420 [ 956.710925][T16656] ? __fget_files+0x2a/0x420 [ 956.710945][T16656] ? bpf_lsm_file_ioctl+0x9/0x20 [ 956.710971][T16656] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 956.710995][T16656] __se_sys_ioctl+0xff/0x170 [ 956.711017][T16656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.711037][T16656] do_syscall_64+0x174/0x580 [ 956.711063][T16656] ? trace_irq_disable+0x3b/0x140 [ 956.711087][T16656] ? clear_bhb_loop+0x40/0x90 [ 956.711109][T16656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.711127][T16656] RIP: 0033:0x7f4ac901de59 [ 956.711144][T16656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.711159][T16656] RSP: 002b:00007f4ac7276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.711179][T16656] RAX: ffffffffffffffda RBX: 00007f4ac92a5fa0 RCX: 00007f4ac901de59 [ 956.711193][T16656] RDX: 0000200000000280 RSI: 00000000c0606610 RDI: 0000000000000003 [ 956.711205][T16656] RBP: 00007f4ac7276090 R08: 0000000000000000 R09: 0000000000000000 [ 956.711216][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.711227][T16656] R13: 00007f4ac92a6038 R14: 00007f4ac92a5fa0 R15: 00007ffcb7dfd528 [ 956.711257][T16656] [ 957.696823][T16673] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3138'. [ 958.368690][T14909] Bluetooth: hci1: command tx timeout [ 958.636161][ T5587] usb 2-1: USB disconnect, device number 70 [ 958.922694][T16495] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 959.118019][T16495] usb 1-1: Using ep0 maxpacket: 16 [ 959.123091][T16495] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.123114][T16495] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 959.145090][T16495] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 959.145116][T16495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.145134][T16495] usb 1-1: Product: syz [ 959.145147][T16495] usb 1-1: Manufacturer: syz [ 959.145159][T16495] usb 1-1: SerialNumber: syz [ 959.217489][T16495] usb 1-1: 0:2 : does not exist [ 959.381511][ T6378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.436836][T16495] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 959.644692][T16495] usb 1-1: USB disconnect, device number 56 [ 959.946327][T16463] udevd[16463]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.383153][T14909] Bluetooth: hci1: command tx timeout [ 960.456035][ T6378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.654002][T16731] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3150'. [ 962.298079][ T6378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.463197][T14909] Bluetooth: hci1: command tx timeout [ 964.165161][T16626] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.165265][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.165500][T16626] bridge_slave_0: entered allmulticast mode [ 964.172149][T16626] bridge_slave_0: entered promiscuous mode [ 964.241194][T16626] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.241397][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.241601][T16626] bridge_slave_1: entered allmulticast mode [ 964.272778][T16626] bridge_slave_1: entered promiscuous mode [ 964.804683][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.082631][ T5837] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 965.113969][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3158'. [ 965.141602][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.235272][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 965.237503][ T5837] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 965.237527][ T5837] usb 1-1: config 0 has no interface number 0 [ 965.237567][ T5837] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 965.237589][ T5837] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 965.240805][ T5837] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 965.240830][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.240848][ T5837] usb 1-1: Product: syz [ 965.240861][ T5837] usb 1-1: Manufacturer: syz [ 965.240874][ T5837] usb 1-1: SerialNumber: syz [ 965.338605][ T5837] usb 1-1: config 0 descriptor?? [ 965.340315][T16788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.357279][T16788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.461266][T16626] team0: Port device team_slave_0 added [ 965.466911][T16626] team0: Port device team_slave_1 added [ 965.715516][ T6853] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 965.734891][T16788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.735015][T16788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 965.901856][T16806] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3160'. [ 966.634815][ T5837] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 967.234478][T16788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.255946][T16788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.839161][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.839181][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.839205][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.890517][ T5834] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 968.001823][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.001840][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.001864][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.042643][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 968.056557][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.059461][ T5834] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 968.059484][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.059500][ T5834] usb 7-1: Product: syz [ 968.059713][ T5834] usb 7-1: Manufacturer: syz [ 968.059727][ T5834] usb 7-1: SerialNumber: syz [ 968.134539][ T5834] usb 7-1: config 0 descriptor?? [ 968.216837][ T5834] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 969.231660][ T5837] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 969.231688][ T5837] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 969.231923][ T5837] asix 1-1:0.34: probe with driver asix failed with error -71 [ 969.306419][ T5837] usb 1-1: USB disconnect, device number 57 [ 969.395516][ T6378] bridge_slave_1: left allmulticast mode [ 969.395552][ T6378] bridge_slave_1: left promiscuous mode [ 969.395791][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.832965][ T6378] bridge_slave_0: left allmulticast mode [ 969.833067][ T6378] bridge_slave_0: left promiscuous mode [ 969.833330][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.061839][ T5722] usb 7-1: USB disconnect, device number 51 [ 971.149553][ T6869] usb 7-1: Failed to submit usb control message: -71 [ 971.149589][ T6869] usb 7-1: unable to send the bmi data to the device: -71 [ 971.149605][ T6869] usb 7-1: unable to get target info from device [ 971.149630][ T6869] usb 7-1: could not get target info (-71) [ 971.149840][ T6869] usb 7-1: could not probe fw (-71) [ 972.104869][ T5722] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 972.242802][ T6378] gretap0 (unregistering): left promiscuous mode [ 972.332751][ T5722] usb 7-1: Using ep0 maxpacket: 16 [ 972.334874][ T5722] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 50663, setting to 1024 [ 972.334900][ T5722] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 1024 [ 972.334912][ T5722] usb 7-1: config 0 interface 0 has no altsetting 0 [ 972.334930][ T5722] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 972.334941][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.338550][ T5722] usb 7-1: config 0 descriptor?? [ 972.339538][T16869] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 972.393588][ T5722] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 972.794259][ T6378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.823095][ T6378] bond_slave_0: left promiscuous mode [ 972.823234][ T6378] bond_slave_0: left allmulticast mode [ 972.853831][ T6378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.873140][ T6378] bond_slave_1: left promiscuous mode [ 972.873268][ T6378] bond_slave_1: left allmulticast mode [ 972.874681][ T6378] bond0 (unregistering): Released all slaves [ 972.880996][ T6378] bond1 (unregistering): Released all slaves [ 972.895722][ T6378] bond2 (unregistering): Released all slaves [ 973.190797][T16626] hsr_slave_0: entered promiscuous mode [ 973.200664][T16626] hsr_slave_1: entered promiscuous mode [ 973.210106][T16626] debugfs: 'hsr0' already exists in 'hsr' [ 973.210131][T16626] Cannot create hsr debugfs directory [ 973.644871][T16886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3171'. [ 974.812236][ T5837] usb 7-1: USB disconnect, device number 52 [ 976.032439][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3180'. [ 976.073885][T16937] IPVS: Scheduler module ip_vs_ not found [ 976.082694][ T5587] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 976.242637][ T5587] usb 2-1: Using ep0 maxpacket: 16 [ 976.244631][ T5587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.246980][ T5587] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 976.247007][ T5587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.247024][ T5587] usb 2-1: Product: syz [ 976.247037][ T5587] usb 2-1: Manufacturer: syz [ 976.247049][ T5587] usb 2-1: SerialNumber: syz [ 976.308025][ T5587] usb 2-1: config 0 descriptor?? [ 976.363461][ T5587] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 976.555973][T16849] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 976.630388][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 976.758934][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 976.776417][T16849] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 976.776444][T16849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.776512][T16849] usb 7-1: Product: syz [ 976.776527][T16849] usb 7-1: Manufacturer: syz [ 976.776540][T16849] usb 7-1: SerialNumber: syz [ 976.791439][T16849] usb 7-1: config 0 descriptor?? [ 977.027364][T16849] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 977.235931][ T197] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 977.382926][ T197] usb 1-1: Using ep0 maxpacket: 8 [ 977.385505][ T197] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 977.391905][ T197] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 977.391930][ T197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.392006][ T197] usb 1-1: Product: syz [ 977.392021][ T197] usb 1-1: Manufacturer: syz [ 977.392034][ T197] usb 1-1: SerialNumber: syz [ 977.427844][ T197] usb 1-1: config 0 descriptor?? [ 977.450413][ T197] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 977.450583][ T197] usb 1-1: setting power ON [ 977.467433][ T197] dvb-usb: bulk message failed: -22 (2/0) [ 977.503146][ T6848] usb 2-1: Failed to submit usb control message: -110 [ 977.503185][ T6848] usb 2-1: unable to send the bmi data to the device: -110 [ 977.503200][ T6848] usb 2-1: unable to get target info from device [ 977.503213][ T6848] usb 2-1: could not get target info (-110) [ 977.503339][ T6848] usb 2-1: could not probe fw (-110) [ 977.753472][ T197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 977.766992][ T197] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 977.767095][ T197] usb 1-1: media controller created [ 977.950731][ T197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 978.200540][ T197] usb 1-1: selecting invalid altsetting 6 [ 978.200564][ T197] usb 1-1: digital interface selection failed (-22) [ 978.200630][ T197] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 978.204034][ T197] usb 1-1: setting power OFF [ 978.210966][ T197] dvb-usb: bulk message failed: -22 (2/0) [ 978.210987][ T197] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 978.210999][ T197] (NULL device *): no alternate interface [ 978.505681][ T31] usb 2-1: USB disconnect, device number 71 [ 978.540400][ T197] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 978.666501][T16849] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 978.836769][T16849] usb 7-1: USB disconnect, device number 53 [ 979.211811][T16954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3182'. [ 979.280822][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3186'. [ 979.280841][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3186'. [ 979.301141][T16849] usb 1-1: USB disconnect, device number 58 [ 980.462953][ T5587] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 980.680459][ T5587] usb 1-1: unable to get BOS descriptor or descriptor too short [ 980.681302][ T5587] usb 1-1: not running at top speed; connect to a high speed hub [ 980.682972][ T5587] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 980.682993][ T5587] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 980.683009][ T5587] usb 1-1: config 5 has no interface number 0 [ 980.683045][ T5587] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 980.683069][ T5587] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 980.683092][ T5587] usb 1-1: config 5 interface 246 has no altsetting 0 [ 980.685581][ T5587] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 980.685604][ T5587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.685622][ T5587] usb 1-1: Product: syz [ 980.685635][ T5587] usb 1-1: Manufacturer: syz [ 980.685647][ T5587] usb 1-1: SerialNumber: syz [ 980.880979][ T6378] veth1_to_team: left promiscuous mode [ 980.996149][ T6378] veth0_to_hsr: left promiscuous mode [ 981.589900][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.590772][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.622745][ T197] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 981.686393][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.695016][ T6378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.879912][ T197] usb 7-1: Using ep0 maxpacket: 8 [ 982.231168][ T197] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 982.231194][ T197] usb 7-1: config 0 has no interface number 0 [ 982.231232][ T197] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 982.231255][ T197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.295643][ T197] usb 7-1: config 0 descriptor?? [ 982.413522][ T197] viperboard 7-1:0.143: version 0.00 found at bus 007 address 054 [ 982.475940][ T197] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 982.475968][ T197] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 982.715701][ T5587] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 982.743998][ T197] usb 7-1: USB disconnect, device number 54 [ 982.784390][ T5587] usb 1-1: USB disconnect, device number 59 [ 982.904642][T15671] usb 1-1: Failed to submit usb control message: -71 [ 982.904676][T15671] usb 1-1: unable to send the bmi data to the device: -71 [ 982.904692][T15671] usb 1-1: unable to get target info from device [ 982.904705][T15671] usb 1-1: could not get target info (-71) [ 982.904781][T15671] usb 1-1: could not probe fw (-71) [ 982.952234][ T6378] veth1_macvtap: left promiscuous mode [ 982.952333][ T6378] veth0_macvtap: left promiscuous mode [ 982.955578][ T6378] veth1_vlan: left promiscuous mode [ 982.958410][ T6378] veth0_vlan: left promiscuous mode [ 985.188185][T17062] FAULT_INJECTION: forcing a failure. [ 985.188185][T17062] name failslab, interval 1, probability 0, space 0, times 0 [ 985.188219][T17062] CPU: 0 UID: 0 PID: 17062 Comm: syz.6.3203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 985.188243][T17062] Tainted: [L]=SOFTLOCKUP [ 985.188250][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 985.188261][T17062] Call Trace: [ 985.188269][T17062] [ 985.188277][T17062] dump_stack_lvl+0xe8/0x150 [ 985.188310][T17062] should_fail_ex+0x467/0x600 [ 985.188341][T17062] should_failslab+0xa8/0x100 [ 985.188365][T17062] kmem_cache_alloc_noprof+0xa4/0x650 [ 985.188420][T17062] ? vm_area_dup+0x28/0x670 [ 985.188439][T17062] ? vm_area_dup+0x28/0x670 [ 985.188465][T17062] vm_area_dup+0x28/0x670 [ 985.188482][T17062] ? __split_vma+0x1ce/0xa40 [ 985.188508][T17062] __split_vma+0x1e4/0xa40 [ 985.188536][T17062] ? mas_next_slot+0xc94/0xd70 [ 985.188565][T17062] ? __pfx___split_vma+0x10/0x10 [ 985.188598][T17062] ? mas_find+0xab1/0xcf0 [ 985.188620][T17062] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 985.188726][T17062] vms_gather_munmap_vmas+0x4e3/0x1370 [ 985.188763][T17062] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 985.188795][T17062] ? mas_find+0xa23/0xcf0 [ 985.188825][T17062] mmap_region+0x914/0x2310 [ 985.188860][T17062] ? __lock_acquire+0x683/0x2ce0 [ 985.188883][T17062] ? __pfx_mmap_region+0x10/0x10 [ 985.188906][T17062] ? __lock_acquire+0x683/0x2ce0 [ 985.188933][T17062] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.188961][T17062] ? unwind_next_frame+0x8f/0x2550 [ 985.188989][T17062] ? is_bpf_text_address+0x26/0x2b0 [ 985.189085][T17062] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 985.189176][T17062] ? cap_mmap_addr+0xaf/0x100 [ 985.189196][T17062] ? bpf_lsm_mmap_addr+0x9/0x50 [ 985.189219][T17062] ? security_mmap_addr+0x71/0x240 [ 985.189247][T17062] do_mmap+0xc1e/0x10b0 [ 985.189312][T17062] ? __pfx_do_mmap+0x10/0x10 [ 985.189336][T17062] ? rwbase_write_lock+0x550/0x720 [ 985.189373][T17062] vm_mmap_pgoff+0x275/0x4e0 [ 985.189414][T17062] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 985.189435][T17062] ? ksys_write+0x248/0x270 [ 985.189459][T17062] ? __pfx_ksys_write+0x10/0x10 [ 985.189484][T17062] ? __x64_sys_mmap+0x7f/0x140 [ 985.189512][T17062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.189531][T17062] do_syscall_64+0x174/0x580 [ 985.189554][T17062] ? trace_irq_disable+0x3b/0x140 [ 985.189571][T17062] ? clear_bhb_loop+0x40/0x90 [ 985.189593][T17062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.189615][T17062] RIP: 0033:0x7f4ac901de59 [ 985.189633][T17062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.189648][T17062] RSP: 002b:00007f4ac7276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 985.189669][T17062] RAX: ffffffffffffffda RBX: 00007f4ac92a5fa0 RCX: 00007f4ac901de59 [ 985.189682][T17062] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 985.189695][T17062] RBP: 00007f4ac7276090 R08: ffffffffffffffff R09: 0000000000000000 [ 985.189708][T17062] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 985.189719][T17062] R13: 00007f4ac92a6038 R14: 00007f4ac92a5fa0 R15: 00007ffcb7dfd528 [ 985.189749][T17062] [ 988.259098][T17105] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3211'. [ 988.900809][T17110] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3212'. [ 989.973989][T17165] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3214'. [ 990.657793][T16626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 991.033394][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 991.038681][T16626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 992.278370][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.279269][T16626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 992.595179][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.625283][T16626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 992.769903][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 992.960693][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.008132][T17228] FAULT_INJECTION: forcing a failure. [ 993.008132][T17228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.008165][T17228] CPU: 1 UID: 0 PID: 17228 Comm: syz.6.3221 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 993.008191][T17228] Tainted: [L]=SOFTLOCKUP [ 993.008198][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 993.008208][T17228] Call Trace: [ 993.008215][T17228] [ 993.008223][T17228] dump_stack_lvl+0xe8/0x150 [ 993.008254][T17228] should_fail_ex+0x467/0x600 [ 993.008284][T17228] _copy_to_user+0x31/0xb0 [ 993.008304][T17228] simple_read_from_buffer+0xe1/0x170 [ 993.008327][T17228] proc_fail_nth_read+0x1be/0x230 [ 993.008347][T17228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.008367][T17228] ? rw_verify_area+0x250/0x4d0 [ 993.008389][T17228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.008407][T17228] vfs_read+0x219/0xa90 [ 993.008436][T17228] ? __pfx_vfs_read+0x10/0x10 [ 993.008460][T17228] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.008485][T17228] ? lockdep_hardirqs_on+0x7a/0x110 [ 993.008508][T17228] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.008532][T17228] ? mutex_lock_nested+0x152/0x1d0 [ 993.008550][T17228] ? fdget_pos+0x252/0x320 [ 993.008577][T17228] ksys_read+0x156/0x270 [ 993.008600][T17228] ? __pfx_ksys_read+0x10/0x10 [ 993.008628][T17228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.008649][T17228] do_syscall_64+0x174/0x580 [ 993.008671][T17228] ? trace_irq_disable+0x3b/0x140 [ 993.008689][T17228] ? clear_bhb_loop+0x40/0x90 [ 993.008712][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.008730][T17228] RIP: 0033:0x7f4ac8fde68e [ 993.008748][T17228] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 993.008763][T17228] RSP: 002b:00007f4ac7275fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 993.008782][T17228] RAX: ffffffffffffffda RBX: 00007f4ac72766c0 RCX: 00007f4ac8fde68e [ 993.008795][T17228] RDX: 000000000000000f RSI: 00007f4ac72760a0 RDI: 0000000000000003 [ 993.008807][T17228] RBP: 00007f4ac7276090 R08: 0000000000000000 R09: 0000000000000000 [ 993.008819][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.008830][T17228] R13: 00007f4ac92a6038 R14: 00007f4ac92a5fa0 R15: 00007ffcb7dfd528 [ 993.008867][T17228] [ 993.208449][ T5588] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 993.412738][ T5588] usb 2-1: Using ep0 maxpacket: 16 [ 993.415080][ T5588] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.415103][ T5588] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.417566][ T5588] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 993.417590][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.417607][ T5588] usb 2-1: Product: syz [ 993.417620][ T5588] usb 2-1: Manufacturer: syz [ 993.417633][ T5588] usb 2-1: SerialNumber: syz [ 993.507095][ T5588] usb 2-1: 0:2 : does not exist [ 993.507185][ T5588] usb 2-1: unit 9 not found! [ 993.793988][T17239] netlink: 'syz.7.3224': attribute type 2 has an invalid length. [ 993.838842][T17233] netlink: 'syz.0.3223': attribute type 9 has an invalid length. [ 994.718772][ T5588] usb 2-1: USB disconnect, device number 72 [ 995.053988][T16463] udevd[16463]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.129940][T17245] input: syz0 as /devices/virtual/input/input17 [ 995.498676][T16626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.557330][T16626] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.577157][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.577363][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.499222][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.499329][ T6357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.642639][ T31] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 996.855530][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 997.359239][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 997.359267][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 997.359288][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 997.359328][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 997.359347][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.386978][ T31] usb 2-1: config 0 descriptor?? [ 997.394686][T17255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 997.398699][ T31] hub 2-1:0.0: USB hub found [ 997.676683][ T31] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 997.699088][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 997.699198][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 997.809674][ T31] usb 2-1: USB disconnect, device number 73 [ 997.876600][ T6864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 997.913832][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'. [ 997.913855][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3234'. [ 998.309693][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3237'. [ 998.344811][ T6378] IPVS: stop unused estimator thread 0... [ 999.462667][ T5588] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 999.533892][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.632777][ T5588] usb 7-1: Using ep0 maxpacket: 8 [ 999.634918][ T5588] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 999.637182][ T5588] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 999.637206][ T5588] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.637224][ T5588] usb 7-1: Product: syz [ 999.637237][ T5588] usb 7-1: Manufacturer: syz [ 999.637259][ T5588] usb 7-1: SerialNumber: syz [ 999.688518][ T5588] usb 7-1: config 0 descriptor?? [ 999.716765][ T5588] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 999.716814][ T5588] usb 7-1: setting power ON [ 999.716832][ T5588] dvb-usb: bulk message failed: -22 (2/0) [ 999.732638][ T5587] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 999.751230][ T5588] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 999.765180][ T5588] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 999.765243][ T5588] usb 7-1: media controller created [ 999.820657][ T5588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 999.858047][ T5588] usb 7-1: selecting invalid altsetting 6 [ 999.858067][ T5588] usb 7-1: digital interface selection failed (-22) [ 999.858081][ T5588] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 999.858863][ T5588] usb 7-1: setting power OFF [ 999.858881][ T5588] dvb-usb: bulk message failed: -22 (2/0) [ 999.858897][ T5588] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 999.858910][ T5588] (NULL device *): no alternate interface [ 999.882781][ T5587] usb 1-1: Using ep0 maxpacket: 8 [ 999.886007][ T5587] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 999.886103][ T5587] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.886123][ T5587] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 999.886144][ T5587] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 999.886166][ T5587] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.886203][ T5587] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 999.886222][ T5587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.953513][T17277] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3237'. [ 1000.062474][T17307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1000.188458][ T5587] usb 1-1: usb_control_msg returned -32 [ 1000.188505][ T5587] usbtmc 1-1:16.0: can't read capabilities [ 1000.295907][ T5588] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1000.386933][ T5588] usb 7-1: USB disconnect, device number 55 [ 1000.656497][T16626] veth0_vlan: entered promiscuous mode [ 1000.666256][T16626] veth1_vlan: entered promiscuous mode [ 1000.900721][T16626] veth0_macvtap: entered promiscuous mode [ 1000.966813][T16626] veth1_macvtap: entered promiscuous mode [ 1001.045368][T16626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.069279][T17316] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1001.295696][T16626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.330003][T17183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.332999][ T5588] usb 1-1: USB disconnect, device number 60 [ 1001.399584][T17183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.400716][T17183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.400756][T17183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.462704][ T5588] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1003.726091][ T5588] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1003.731101][ T5588] usb 7-1: string descriptor 0 read error: -22 [ 1003.731234][ T5588] usb 7-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 1003.731256][ T5588] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.346770][ T5588] hid (null): invalid report_size 39971 [ 1004.346924][ T5588] hid (null): report_id 15267 is invalid [ 1004.346951][ T5588] hid (null): unknown global tag 0x93 [ 1004.478986][T17349] syz.1.3256 (17349): drop_caches: 0 [ 1004.554903][T17350] netlink: 760 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1004.554929][T17350] netlink: 760 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1004.999652][ T5588] topre 0003:0853:0148.0010: invalid report_size 39971 [ 1004.999685][ T5588] topre 0003:0853:0148.0010: item 0 2 1 7 parsing failed [ 1005.000269][ T5588] topre 0003:0853:0148.0010: probe with driver topre failed with error -22 [ 1005.061211][ T5588] usb 7-1: USB disconnect, device number 56 [ 1005.610193][T17179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.610213][T17179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.093506][ T6853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.093525][ T6853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.164010][T17481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3293'. [ 1015.312689][ T197] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1015.693105][T17486] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3294'. [ 1016.353888][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 1016.359358][ T197] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1016.359388][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1016.359411][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1016.359449][ T197] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1016.359469][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.367458][ T197] usb 5-1: config 0 descriptor?? [ 1016.378961][T17479] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1016.384086][ T197] hub 5-1:0.0: USB hub found [ 1016.966733][ T197] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1016.999306][ T197] usbhid 5-1:0.0: can't add hid device: -71 [ 1016.999415][ T197] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1017.082262][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1017.172628][ T197] usb 5-1: USB disconnect, device number 66 [ 1017.282570][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1017.284892][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.284942][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1017.284961][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1017.284982][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1017.285003][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1017.285024][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1017.285041][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1017.296062][ T9] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1017.296088][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.296106][ T9] usb 2-1: Product: syz [ 1017.296119][ T9] usb 2-1: Manufacturer: syz [ 1017.296131][ T9] usb 2-1: SerialNumber: syz [ 1017.335009][ T9] usb 2-1: config 0 descriptor?? [ 1017.336111][T17511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1017.357290][ T9] usb 2-1: NFC: Reader power on cmd error -90 [ 1017.357311][ T9] pn533_usb 2-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 1017.357436][ T9] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 1017.498273][T17521] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3300'. [ 1017.550660][T17511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.551243][T17511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.562843][T17523] netlink: 'syz.7.3300': attribute type 1 has an invalid length. [ 1017.576373][T17511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3296'. [ 1017.576883][T17511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3296'. [ 1017.659671][T17511] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3296'. [ 1017.661503][T17511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.662295][T17511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.727392][ T197] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1017.903337][ T197] usb 7-1: Using ep0 maxpacket: 16 [ 1017.905482][ T197] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.905505][ T197] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.907859][ T197] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1017.907885][ T197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.907903][ T197] usb 7-1: Product: syz [ 1017.907916][ T197] usb 7-1: Manufacturer: syz [ 1017.907930][ T197] usb 7-1: SerialNumber: syz [ 1017.926901][ T197] usb 7-1: 0:2 : does not exist [ 1017.926978][ T197] usb 7-1: unit 9 not found! [ 1018.113478][T16463] udevd[16463]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.143892][ T197] usb 7-1: USB disconnect, device number 57 [ 1018.212376][ T5588] usb 2-1: USB disconnect, device number 74 [ 1018.305696][T17532] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 1018.305716][T17532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3303'. [ 1020.739148][T17543] FAULT_INJECTION: forcing a failure. [ 1020.739148][T17543] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.739183][T17543] CPU: 1 UID: 0 PID: 17543 Comm: syz.4.3306 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1020.739205][T17543] Tainted: [L]=SOFTLOCKUP [ 1020.739211][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1020.739221][T17543] Call Trace: [ 1020.739227][T17543] [ 1020.739235][T17543] dump_stack_lvl+0xe8/0x150 [ 1020.739267][T17543] should_fail_ex+0x467/0x600 [ 1020.739297][T17543] should_failslab+0xa8/0x100 [ 1020.739319][T17543] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1020.739337][T17543] ? nf_tables_newtable+0x43e/0x1950 [ 1020.739359][T17543] ? nf_tables_newtable+0x43e/0x1950 [ 1020.739390][T17543] nf_tables_newtable+0x43e/0x1950 [ 1020.739431][T17543] nfnetlink_rcv+0x1291/0x28d0 [ 1020.739454][T17543] ? __local_bh_enable+0x1e1/0x2f0 [ 1020.739510][T17543] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1020.739551][T17543] ? ref_tracker_free+0x668/0x820 [ 1020.739598][T17543] ? skb_clone+0x246/0x3a0 [ 1020.739620][T17543] ? __netlink_deliver_tap+0x811/0x860 [ 1020.739645][T17543] ? netlink_deliver_tap+0x2e/0x1b0 [ 1020.739663][T17543] ? netlink_deliver_tap+0x2e/0x1b0 [ 1020.739686][T17543] netlink_unicast+0x7f5/0x990 [ 1020.739721][T17543] netlink_sendmsg+0x813/0xb40 [ 1020.739749][T17543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.739768][T17543] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1020.739792][T17543] ? __kernel_text_address+0xd/0x30 [ 1020.739810][T17543] ? unwind_get_return_address+0x4d/0x90 [ 1020.739831][T17543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.739846][T17543] sock_sendmsg_nosec+0x13a/0x180 [ 1020.739872][T17543] ____sys_sendmsg+0x565/0x870 [ 1020.739887][T17543] ? __might_fault+0xaf/0x130 [ 1020.739910][T17543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1020.739933][T17543] ? import_iovec+0x73/0xa0 [ 1020.739955][T17543] ___sys_sendmsg+0x2a5/0x360 [ 1020.739971][T17543] ? __lock_acquire+0x683/0x2ce0 [ 1020.739994][T17543] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.740049][T17543] ? __fget_files+0x2a/0x420 [ 1020.740065][T17543] ? __fget_files+0x3a8/0x420 [ 1020.740090][T17543] __x64_sys_sendmsg+0x1b7/0x290 [ 1020.740109][T17543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1020.740152][T17543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.740173][T17543] do_syscall_64+0x174/0x580 [ 1020.740196][T17543] ? trace_irq_disable+0x3b/0x140 [ 1020.740213][T17543] ? clear_bhb_loop+0x40/0x90 [ 1020.740235][T17543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.740254][T17543] RIP: 0033:0x7f9a12a3de59 [ 1020.740272][T17543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.740286][T17543] RSP: 002b:00007f9a10c96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.740306][T17543] RAX: ffffffffffffffda RBX: 00007f9a12cc5fa0 RCX: 00007f9a12a3de59 [ 1020.740319][T17543] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1020.740332][T17543] RBP: 00007f9a10c96090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.740343][T17543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.740355][T17543] R13: 00007f9a12cc6038 R14: 00007f9a12cc5fa0 R15: 00007fff980c82c8 [ 1020.740384][T17543] [ 1021.207711][T17554] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1021.314150][ T197] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1022.494236][ T197] usb 7-1: Using ep0 maxpacket: 16 [ 1022.495970][ T197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.504437][ T197] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1022.504471][ T197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.504489][ T197] usb 7-1: Product: syz [ 1022.504502][ T197] usb 7-1: Manufacturer: syz [ 1022.504514][ T197] usb 7-1: SerialNumber: syz [ 1022.524503][ T197] usb 7-1: config 0 descriptor?? [ 1022.580004][ T197] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1023.924425][ T197] usb 7-1: USB disconnect, device number 58 [ 1023.924832][ T6848] usb 7-1: Failed to submit usb control message: -71 [ 1023.924862][ T6848] usb 7-1: unable to send the bmi data to the device: -71 [ 1023.924878][ T6848] usb 7-1: unable to get target info from device [ 1023.924892][ T6848] usb 7-1: could not get target info (-71) [ 1023.925176][ T6848] usb 7-1: could not probe fw (-71) [ 1025.335685][T17585] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1027.798997][T17629] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3323'. [ 1029.832811][T17179] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1030.141899][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3325'. [ 1030.991056][T12385] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 1031.395696][T12385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1031.395868][T12385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.396208][T12385] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1031.396295][T12385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.613342][T12385] usb 1-1: config 0 descriptor?? [ 1032.011797][T17677] fuse: Unknown parameter '0x0000000000000003' [ 1032.255423][T12385] aquacomputer_d5next 0003:0C70:F0B6.0011: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 1032.683532][ T197] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1032.689832][T12385] usb 1-1: USB disconnect, device number 61 [ 1032.852660][ T197] usb 2-1: Using ep0 maxpacket: 16 [ 1032.856793][ T197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.861343][ T197] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1032.861368][ T197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.861386][ T197] usb 2-1: Product: syz [ 1032.861399][ T197] usb 2-1: Manufacturer: syz [ 1032.861412][ T197] usb 2-1: SerialNumber: syz [ 1032.929347][ T197] usb 2-1: config 0 descriptor?? [ 1032.962965][ T197] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1034.504628][ T197] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1034.678614][T17161] usb 2-1: Failed to submit usb control message: -110 [ 1034.678647][T17161] usb 2-1: unable to send the bmi data to the device: -110 [ 1034.678748][T17161] usb 2-1: unable to get target info from device [ 1034.678770][T17161] usb 2-1: could not get target info (-110) [ 1034.697446][T17161] usb 2-1: could not probe fw (-110) [ 1034.715670][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 1034.718096][ T197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.718144][ T197] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1034.718163][ T197] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1034.718186][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1034.718211][ T197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1034.718232][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1034.718252][ T197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1034.722579][ T197] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1034.722602][ T197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.722619][ T197] usb 1-1: Product: syz [ 1034.722632][ T197] usb 1-1: Manufacturer: syz [ 1034.722645][ T197] usb 1-1: SerialNumber: syz [ 1034.839931][ T197] usb 1-1: config 0 descriptor?? [ 1034.840871][T17703] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1034.855890][ T197] usb 1-1: NFC: Reader power on cmd error -90 [ 1034.855909][ T197] pn533_usb 1-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 1034.856021][ T197] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 1035.074702][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 1035.204442][T17697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.205067][T17697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.251296][ T5834] usb 2-1: USB disconnect, device number 75 [ 1035.365678][T17703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.653805][T17703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.676810][ T1010] usb 1-1: USB disconnect, device number 62 [ 1035.703992][T17727] fuse: Unknown parameter '0x0000000000000003' [ 1035.707993][T17717] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1035.708030][T17717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1035.922675][T17725] vhci_hcd: connection closed [ 1035.946482][T17717] vhci_hcd vhci_hcd.0: Device attached [ 1036.114552][ T6373] vhci_hcd vhci_hcd.6: stop threads [ 1036.117127][ T6373] vhci_hcd vhci_hcd.6: release socket [ 1036.117405][ T6373] vhci_hcd vhci_hcd.6: disconnect device [ 1040.309842][T17764] fuse: Unknown parameter '0x0000000000000003' [ 1040.820138][T17773] FAULT_INJECTION: forcing a failure. [ 1040.820138][T17773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.820162][T17773] CPU: 1 UID: 0 PID: 17773 Comm: syz.1.3358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.820176][T17773] Tainted: [L]=SOFTLOCKUP [ 1040.820180][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1040.820186][T17773] Call Trace: [ 1040.820191][T17773] [ 1040.820196][T17773] dump_stack_lvl+0xe8/0x150 [ 1040.820216][T17773] should_fail_ex+0x467/0x600 [ 1040.820234][T17773] _copy_from_user+0x2d/0xb0 [ 1040.820245][T17773] bpf_test_init+0xd8/0x150 [ 1040.820263][T17773] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1040.820281][T17773] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1040.820293][T17773] ? __fget_files+0x2a/0x420 [ 1040.820306][T17773] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1040.820317][T17773] bpf_prog_test_run+0x2cb/0x340 [ 1040.820330][T17773] __sys_bpf+0xa22/0xd90 [ 1040.820344][T17773] ? __pfx___sys_bpf+0x10/0x10 [ 1040.820355][T17773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1040.820372][T17773] ? rt_mutex_slowunlock+0x219/0x460 [ 1040.820392][T17773] ? ksys_write+0x248/0x270 [ 1040.820406][T17773] ? __pfx_ksys_write+0x10/0x10 [ 1040.820419][T17773] __x64_sys_bpf+0xba/0xd0 [ 1040.820434][T17773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.820445][T17773] do_syscall_64+0x174/0x580 [ 1040.820458][T17773] ? trace_irq_disable+0x3b/0x140 [ 1040.820467][T17773] ? clear_bhb_loop+0x40/0x90 [ 1040.820479][T17773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.820498][T17773] RIP: 0033:0x7f544dc6de59 [ 1040.820509][T17773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.820517][T17773] RSP: 002b:00007f544bec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1040.820529][T17773] RAX: ffffffffffffffda RBX: 00007f544def5fa0 RCX: 00007f544dc6de59 [ 1040.820536][T17773] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1040.820543][T17773] RBP: 00007f544bec6090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.820550][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.820561][T17773] R13: 00007f544def6038 R14: 00007f544def5fa0 R15: 00007ffeb3c2a9d8 [ 1040.820588][T17773] [ 1041.899775][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3361'. [ 1043.058934][T17777] bridge1: entered promiscuous mode [ 1043.059018][T17777] bridge1: entered allmulticast mode [ 1043.812794][ T197] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1043.963192][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 1043.964995][ T197] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.965023][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1043.965051][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1043.965102][ T197] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1043.965124][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.971574][ T197] usb 5-1: config 0 descriptor?? [ 1043.972331][T17807] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1043.978161][ T197] hub 5-1:0.0: USB hub found [ 1044.024871][ T5588] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1044.177275][ T5588] usb 2-1: Using ep0 maxpacket: 16 [ 1044.188878][ T5588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1044.193374][T12385] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1044.213287][ T197] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1044.216020][ T5588] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1044.216046][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.216064][ T5588] usb 2-1: Product: syz [ 1044.216076][ T5588] usb 2-1: Manufacturer: syz [ 1044.216084][ T5588] usb 2-1: SerialNumber: syz [ 1044.229137][ T5588] usb 2-1: config 0 descriptor?? [ 1044.295828][ T5588] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1044.322726][ T5587] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1044.323707][T12385] usb 1-1: device descriptor read/64, error -71 [ 1044.474619][ T5587] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1044.474645][ T5587] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1044.477350][ T5587] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1044.477376][ T5587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.477394][ T5587] usb 7-1: Product: syz [ 1044.477407][ T5587] usb 7-1: Manufacturer: syz [ 1044.477420][ T5587] usb 7-1: SerialNumber: syz [ 1044.510814][ T5587] usb 7-1: config 0 descriptor?? [ 1044.546134][ T5587] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1044.582982][T12385] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1044.616223][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1044.616870][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1044.617815][ T197] usbhid 5-1:0.0: can't add hid device: -71 [ 1044.618136][ T197] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1044.674371][ T197] usb 5-1: USB disconnect, device number 67 [ 1044.712722][T12385] usb 1-1: device descriptor read/64, error -71 [ 1044.834684][T12385] usb usb1-port1: attempt power cycle [ 1045.172716][T12385] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1045.203979][T12385] usb 1-1: device descriptor read/8, error -71 [ 1045.334840][T17825] fuse: Unknown parameter '0x0000000000000003' [ 1045.436612][ T6866] usb 2-1: Failed to submit usb control message: -110 [ 1045.436647][ T6866] usb 2-1: unable to send the bmi data to the device: -110 [ 1045.436664][ T6866] usb 2-1: unable to get target info from device [ 1045.436678][ T6866] usb 2-1: could not get target info (-110) [ 1045.436803][ T6866] usb 2-1: could not probe fw (-110) [ 1045.438977][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3375'. [ 1045.452669][T12385] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1045.484061][T12385] usb 1-1: device descriptor read/8, error -71 [ 1045.593076][T12385] usb usb1-port1: unable to enumerate USB device [ 1045.702725][ T31] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1045.852626][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1045.855361][ T31] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1045.857944][ T31] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1045.857968][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.857985][ T31] usb 5-1: Product: syz [ 1045.858050][ T31] usb 5-1: Manufacturer: syz [ 1045.858070][ T31] usb 5-1: SerialNumber: syz [ 1045.866430][ T31] usb 5-1: config 0 descriptor?? [ 1045.895509][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1045.895645][ T31] usb 5-1: setting power ON [ 1045.895668][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1045.925963][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1045.927390][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1045.927485][ T31] usb 5-1: media controller created [ 1045.986620][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1046.058781][ T31] usb 5-1: selecting invalid altsetting 6 [ 1046.058855][ T31] usb 5-1: digital interface selection failed (-22) [ 1046.058870][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1046.059847][ T31] usb 5-1: setting power OFF [ 1046.059865][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1046.059931][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1046.059943][ T31] (NULL device *): no alternate interface [ 1046.258843][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1046.280681][ T31] usb 5-1: USB disconnect, device number 68 [ 1046.632091][T12385] usb 2-1: USB disconnect, device number 76 [ 1046.725220][ T5588] usb 7-1: USB disconnect, device number 59 [ 1048.655884][T17862] fuse: Unknown parameter '0x0000000000000003' [ 1049.382767][ T1010] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1049.532617][ T1010] usb 2-1: Using ep0 maxpacket: 16 [ 1050.687069][ T1010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1050.708088][ T1010] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1050.708115][ T1010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.708133][ T1010] usb 2-1: Product: syz [ 1050.708145][ T1010] usb 2-1: Manufacturer: syz [ 1050.708158][ T1010] usb 2-1: SerialNumber: syz [ 1050.727397][ T1010] usb 2-1: config 0 descriptor?? [ 1051.346459][T14909] Bluetooth: hci0: command 0x0406 tx timeout [ 1051.778565][ T1010] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1052.472138][T17901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.486190][T17901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.762239][ T6378] usb 2-1: Failed to submit usb control message: -71 [ 1052.762279][ T6378] usb 2-1: unable to send the bmi data to the device: -71 [ 1052.762296][ T6378] usb 2-1: unable to get target info from device [ 1052.762310][ T6378] usb 2-1: could not get target info (-71) [ 1052.799535][ T197] usb 2-1: USB disconnect, device number 77 [ 1052.825539][ T6378] usb 2-1: could not probe fw (-71) [ 1052.905627][T13211] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1053.020029][T17909] fuse: Unknown parameter '0x0000000000000003' [ 1053.079539][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1053.290392][T13211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.290423][T13211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.290457][T13211] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.08 [ 1053.290478][T13211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.340676][T13211] usb 1-1: config 0 descriptor?? [ 1053.348123][T13211] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 1053.348143][T13211] usbhid 1-1:0.0: can't add hid device: -22 [ 1053.348233][T13211] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1053.714595][T17903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.715163][T17903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.722678][T13211] usb 1-1: USB disconnect, device number 67 [ 1053.762607][ T197] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1054.153651][ T197] usb 2-1: Using ep0 maxpacket: 8 [ 1054.155980][ T197] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1054.159292][ T197] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1054.159316][ T197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.159335][ T197] usb 2-1: Product: syz [ 1054.159348][ T197] usb 2-1: Manufacturer: syz [ 1054.159361][ T197] usb 2-1: SerialNumber: syz [ 1054.331889][T17927] tmpfs: Unknown parameter 'usrquota•' [ 1054.587835][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.018953][ T197] usb 2-1: config 0 descriptor?? [ 1055.051830][ T197] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1055.051888][ T197] usb 2-1: setting power ON [ 1055.051905][ T197] dvb-usb: bulk message failed: -22 (2/0) [ 1055.124091][ T197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1055.129530][ T197] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1055.129584][ T197] usb 2-1: media controller created [ 1055.225592][T17912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1055.249831][ T197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.453256][ T197] usb 2-1: selecting invalid altsetting 6 [ 1055.453277][ T197] usb 2-1: digital interface selection failed (-22) [ 1055.453292][ T197] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1055.455271][ T197] usb 2-1: setting power OFF [ 1055.455291][ T197] dvb-usb: bulk message failed: -22 (2/0) [ 1055.455307][ T197] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1055.455318][ T197] (NULL device *): no alternate interface [ 1055.553635][ T197] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1055.729461][T17940] FAULT_INJECTION: forcing a failure. [ 1055.729461][T17940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.729496][T17940] CPU: 0 UID: 0 PID: 17940 Comm: syz.7.3411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1055.729523][T17940] Tainted: [L]=SOFTLOCKUP [ 1055.729531][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1055.729542][T17940] Call Trace: [ 1055.729550][T17940] [ 1055.729558][T17940] dump_stack_lvl+0xe8/0x150 [ 1055.729589][T17940] should_fail_ex+0x467/0x600 [ 1055.729620][T17940] _copy_to_user+0x31/0xb0 [ 1055.729641][T17940] simple_read_from_buffer+0xe1/0x170 [ 1055.729666][T17940] proc_fail_nth_read+0x1be/0x230 [ 1055.729689][T17940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.729710][T17940] ? rw_verify_area+0x250/0x4d0 [ 1055.729732][T17940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1055.729750][T17940] vfs_read+0x219/0xa90 [ 1055.729779][T17940] ? __pfx_vfs_read+0x10/0x10 [ 1055.729808][T17940] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1055.729833][T17940] ? lockdep_hardirqs_on+0x7a/0x110 [ 1055.729857][T17940] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1055.729880][T17940] ? mutex_lock_nested+0x152/0x1d0 [ 1055.729898][T17940] ? fdget_pos+0x252/0x320 [ 1055.729924][T17940] ksys_read+0x156/0x270 [ 1055.729948][T17940] ? __pfx_ksys_read+0x10/0x10 [ 1055.729972][T17940] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 1055.729994][T17940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.730013][T17940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.730033][T17940] do_syscall_64+0x174/0x580 [ 1055.730055][T17940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.730074][T17940] ? clear_bhb_loop+0x40/0x90 [ 1055.730096][T17940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.730114][T17940] RIP: 0033:0x7f9a8b0ae68e [ 1055.730132][T17940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1055.730146][T17940] RSP: 002b:00007f9a89345fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1055.730166][T17940] RAX: ffffffffffffffda RBX: 00007f9a893466c0 RCX: 00007f9a8b0ae68e [ 1055.730179][T17940] RDX: 000000000000000f RSI: 00007f9a893460a0 RDI: 0000000000000008 [ 1055.730191][T17940] RBP: 00007f9a89346090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.730202][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.730213][T17940] R13: 00007f9a8b376038 R14: 00007f9a8b375fa0 R15: 00007ffda47a3508 [ 1055.730245][T17940] [ 1056.189999][T17953] fuse: Unknown parameter '0x0000000000000003' [ 1056.276085][ T5587] usb 2-1: USB disconnect, device number 78 [ 1056.322726][T13211] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1056.472605][T13211] usb 1-1: Using ep0 maxpacket: 16 [ 1056.474847][T13211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1056.477481][T13211] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1056.477506][T13211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.477523][T13211] usb 1-1: Product: syz [ 1056.477535][T13211] usb 1-1: Manufacturer: syz [ 1056.477548][T13211] usb 1-1: SerialNumber: syz [ 1056.491748][T13211] usb 1-1: config 0 descriptor?? [ 1056.530588][T13211] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1058.098715][T17161] usb 1-1: Failed to submit usb control message: -110 [ 1058.098749][T17161] usb 1-1: unable to send the bmi data to the device: -110 [ 1058.098766][T17161] usb 1-1: unable to get target info from device [ 1058.098781][T17161] usb 1-1: could not get target info (-110) [ 1058.125807][T17161] usb 1-1: could not probe fw (-110) [ 1059.135982][ T5588] usb 1-1: USB disconnect, device number 68 [ 1059.749184][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1060.003159][ T5722] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1060.172701][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 1060.174885][ T5722] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1060.177386][ T5722] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1060.177409][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.177426][ T5722] usb 2-1: Product: syz [ 1060.177449][ T5722] usb 2-1: Manufacturer: syz [ 1060.177462][ T5722] usb 2-1: SerialNumber: syz [ 1061.025367][ T5722] usb 2-1: config 0 descriptor?? [ 1061.061464][ T5722] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1061.061513][ T5722] usb 2-1: setting power ON [ 1061.061532][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 1061.114157][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1061.114888][ T5722] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1061.114936][ T5722] usb 2-1: media controller created [ 1061.263209][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1061.311315][T18015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1061.325070][ T5722] usb 2-1: selecting invalid altsetting 6 [ 1061.325090][ T5722] usb 2-1: digital interface selection failed (-22) [ 1061.325103][ T5722] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1061.327304][ T5722] usb 2-1: setting power OFF [ 1061.327324][ T5722] dvb-usb: bulk message failed: -22 (2/0) [ 1061.327339][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1061.327350][ T5722] (NULL device *): no alternate interface [ 1061.802344][ T6378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1062.268501][ T5722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1062.904916][T13211] usb 2-1: USB disconnect, device number 79 [ 1063.220323][ T1010] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1064.004119][ T1010] usb 7-1: Using ep0 maxpacket: 16 [ 1064.006470][ T1010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.009177][ T1010] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1064.009201][ T1010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.009219][ T1010] usb 7-1: Product: syz [ 1064.009232][ T1010] usb 7-1: Manufacturer: syz [ 1064.009246][ T1010] usb 7-1: SerialNumber: syz [ 1064.881616][ T1010] usb 7-1: config 0 descriptor?? [ 1065.253151][ T1010] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1066.459074][ T6861] usb 7-1: Failed to submit usb control message: -71 [ 1066.459108][ T6861] usb 7-1: unable to send the bmi data to the device: -71 [ 1066.459123][ T6861] usb 7-1: unable to get target info from device [ 1066.459137][ T6861] usb 7-1: could not get target info (-71) [ 1066.459386][ T6861] usb 7-1: could not probe fw (-71) [ 1066.499413][ T5722] usb 7-1: USB disconnect, device number 60 [ 1067.638950][T18067] FAULT_INJECTION: forcing a failure. [ 1067.638950][T18067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.638985][T18067] CPU: 1 UID: 0 PID: 18067 Comm: syz.0.3447 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1067.639009][T18067] Tainted: [L]=SOFTLOCKUP [ 1067.639016][T18067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1067.639027][T18067] Call Trace: [ 1067.639034][T18067] [ 1067.639043][T18067] dump_stack_lvl+0xe8/0x150 [ 1067.639085][T18067] should_fail_ex+0x467/0x600 [ 1067.639115][T18067] _copy_to_user+0x31/0xb0 [ 1067.639138][T18067] simple_read_from_buffer+0xe1/0x170 [ 1067.639161][T18067] proc_fail_nth_read+0x1be/0x230 [ 1067.639184][T18067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.639206][T18067] ? rw_verify_area+0x250/0x4d0 [ 1067.639229][T18067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.639246][T18067] vfs_read+0x219/0xa90 [ 1067.639275][T18067] ? __pfx_vfs_read+0x10/0x10 [ 1067.639298][T18067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1067.639323][T18067] ? lockdep_hardirqs_on+0x7a/0x110 [ 1067.639346][T18067] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1067.639369][T18067] ? mutex_lock_nested+0x152/0x1d0 [ 1067.639387][T18067] ? fdget_pos+0x252/0x320 [ 1067.639414][T18067] ksys_read+0x156/0x270 [ 1067.639437][T18067] ? __pfx_ksys_read+0x10/0x10 [ 1067.639466][T18067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.639487][T18067] do_syscall_64+0x174/0x580 [ 1067.639510][T18067] ? trace_irq_disable+0x3b/0x140 [ 1067.639528][T18067] ? clear_bhb_loop+0x40/0x90 [ 1067.639550][T18067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.639567][T18067] RIP: 0033:0x7fd43b2ee68e [ 1067.639584][T18067] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1067.639599][T18067] RSP: 002b:00007fd439585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.639619][T18067] RAX: ffffffffffffffda RBX: 00007fd4395866c0 RCX: 00007fd43b2ee68e [ 1067.639633][T18067] RDX: 000000000000000f RSI: 00007fd4395860a0 RDI: 0000000000000003 [ 1067.639645][T18067] RBP: 00007fd439586090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.639657][T18067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.639668][T18067] R13: 00007fd43b5b6038 R14: 00007fd43b5b5fa0 R15: 00007ffc29223c88 [ 1067.639699][T18067] [ 1068.278550][T18064] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1068.445507][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1068.752667][T12385] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1069.562562][T12385] usb 5-1: Using ep0 maxpacket: 8 [ 1069.564732][T12385] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1069.567254][T12385] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1069.567430][T12385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.567449][T12385] usb 5-1: Product: syz [ 1069.567462][T12385] usb 5-1: Manufacturer: syz [ 1069.567476][T12385] usb 5-1: SerialNumber: syz [ 1069.577918][T12385] usb 5-1: config 0 descriptor?? [ 1069.593970][T12385] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1069.594019][T12385] usb 5-1: setting power ON [ 1069.594038][T12385] dvb-usb: bulk message failed: -22 (2/0) [ 1069.686517][T12385] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1069.702985][T12385] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1069.703038][T12385] usb 5-1: media controller created [ 1069.749799][T12385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1069.784934][T18075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1069.807133][T12385] usb 5-1: selecting invalid altsetting 6 [ 1069.807153][T12385] usb 5-1: digital interface selection failed (-22) [ 1069.807167][T12385] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1069.807932][T12385] usb 5-1: setting power OFF [ 1069.807952][T12385] dvb-usb: bulk message failed: -22 (2/0) [ 1069.807968][T12385] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1069.807980][T12385] (NULL device *): no alternate interface [ 1069.915368][T18090] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1069.919574][T12385] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1070.292645][T13211] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1071.139500][T13211] usb 7-1: Using ep0 maxpacket: 16 [ 1071.143031][T13211] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.143053][T13211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1071.146200][T13211] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1071.146225][T13211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.146243][T13211] usb 7-1: Product: syz [ 1071.146256][T13211] usb 7-1: Manufacturer: syz [ 1071.146269][T13211] usb 7-1: SerialNumber: syz [ 1071.166558][T13211] usb 7-1: 0:2 : does not exist [ 1071.166639][T13211] usb 7-1: unit 9 not found! [ 1071.377670][T16463] udevd[16463]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.394462][T12385] usb 7-1: USB disconnect, device number 61 [ 1071.468876][ T9] usb 5-1: USB disconnect, device number 70 [ 1072.428850][T13211] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1072.616782][T13211] usb 2-1: Using ep0 maxpacket: 16 [ 1072.619826][T13211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1072.639347][T13211] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1072.639374][T13211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.639391][T13211] usb 2-1: Product: syz [ 1072.639403][T13211] usb 2-1: Manufacturer: syz [ 1072.639415][T13211] usb 2-1: SerialNumber: syz [ 1072.690969][T13211] usb 2-1: config 0 descriptor?? [ 1072.717341][T13211] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1073.482603][ T1010] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1073.634555][ T1010] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1073.634583][ T1010] usb 5-1: config 0 has no interface number 0 [ 1073.634611][ T1010] usb 5-1: too many endpoints for config 0 interface 55 altsetting 40: 201, using maximum allowed: 30 [ 1073.634648][ T1010] usb 5-1: config 0 interface 55 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1073.634674][ T1010] usb 5-1: config 0 interface 55 has no altsetting 0 [ 1073.637488][ T1010] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1073.637514][ T1010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.637533][ T1010] usb 5-1: Product: syz [ 1073.637547][ T1010] usb 5-1: Manufacturer: syz [ 1073.637560][ T1010] usb 5-1: SerialNumber: syz [ 1073.686600][ T1010] usb 5-1: config 0 descriptor?? [ 1073.914635][ T3830] usb 2-1: Failed to submit usb control message: -110 [ 1073.914671][ T3830] usb 2-1: unable to send the bmi data to the device: -110 [ 1073.914688][ T3830] usb 2-1: unable to get target info from device [ 1073.914701][ T3830] usb 2-1: could not get target info (-110) [ 1073.917571][ T3830] usb 2-1: could not probe fw (-110) [ 1074.244932][ T5722] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1074.357019][ T5834] usb 2-1: USB disconnect, device number 80 [ 1074.592695][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.592726][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.592763][ T5722] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1074.592784][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.599147][ T5722] usb 1-1: config 0 descriptor?? [ 1074.953493][ T5834] ================================================================== [ 1074.953509][ T5834] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1074.953678][ T5834] Read of size 8 at addr ffffc900066f9008 by task kworker/1:7/5834 [ 1074.953695][ T5834] [ 1074.953709][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1074.953730][ T5834] Tainted: [L]=SOFTLOCKUP [ 1074.953734][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.953743][ T5834] Workqueue: usb_hub_wq hub_event [ 1074.953801][ T5834] Call Trace: [ 1074.953808][ T5834] [ 1074.953816][ T5834] dump_stack_lvl+0xe8/0x150 [ 1074.953844][ T5834] print_address_description+0x55/0x1e0 [ 1074.953866][ T5834] ? __list_add_valid_or_report+0x4e/0x130 [ 1074.953889][ T5834] print_report+0x58/0x70 [ 1074.953907][ T5834] kasan_report+0x117/0x150 [ 1074.953924][ T5834] ? __list_add_valid_or_report+0x4e/0x130 [ 1074.953943][ T5834] __list_add_valid_or_report+0x4e/0x130 [ 1074.953961][ T5834] kcov_remote_stop+0x457/0x680 [ 1074.954021][ T5834] hub_event+0x4789/0x4cf0 [ 1074.954041][ T5834] ? __lock_acquire+0x683/0x2ce0 [ 1074.954057][ T5834] ? register_lock_class+0x31/0x2e0 [ 1074.954079][ T5834] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1074.954098][ T5834] ? __pfx_hub_event+0x10/0x10 [ 1074.954115][ T5834] ? process_scheduled_works+0xa20/0x14e0 [ 1074.954134][ T5834] ? rcu_is_watching+0x15/0xb0 [ 1074.954150][ T5834] ? process_scheduled_works+0xa20/0x14e0 [ 1074.954164][ T5834] process_scheduled_works+0xa8e/0x14e0 [ 1074.954189][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 1074.954206][ T5834] ? assign_work+0x3cf/0x5d0 [ 1074.954223][ T5834] worker_thread+0xa47/0xfb0 [ 1074.954250][ T5834] kthread+0x388/0x470 [ 1074.954272][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 1074.954299][ T5834] ? __pfx_kthread+0x10/0x10 [ 1074.954319][ T5834] ret_from_fork+0x514/0xb70 [ 1074.954341][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 1074.954358][ T5834] ? __switch_to+0xc89/0x1420 [ 1074.954375][ T5834] ? __pfx_kthread+0x10/0x10 [ 1074.954391][ T5834] ret_from_fork_asm+0x1a/0x30 [ 1074.954409][ T5834] [ 1074.954415][ T5834] [ 1074.954419][ T5834] The buggy address belongs to a vmalloc virtual mapping [ 1074.954473][ T5834] Memory state around the buggy address: [ 1074.954482][ T5834] ffffc900066f8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1074.954491][ T5834] ffffc900066f8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1074.954500][ T5834] >ffffc900066f9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1074.954507][ T5834] ^ [ 1074.954514][ T5834] ffffc900066f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1074.954523][ T5834] ffffc900066f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1074.954530][ T5834] ================================================================== [ 1074.954602][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1074.954615][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1074.954634][ T5834] Tainted: [L]=SOFTLOCKUP [ 1074.954639][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.954648][ T5834] Workqueue: usb_hub_wq hub_event [ 1074.954668][ T5834] Call Trace: [ 1074.954674][ T5834] [ 1074.954680][ T5834] vpanic+0x56c/0xa60 [ 1074.954697][ T5834] ? __pfx_vpanic+0x10/0x10 [ 1074.954709][ T5834] ? __pfx___schedule+0x10/0x10 [ 1074.954731][ T5834] panic+0xc5/0xd0 [ 1074.954744][ T5834] ? __pfx_panic+0x10/0x10 [ 1074.954757][ T5834] ? preempt_schedule_thunk+0x16/0x40 [ 1074.954778][ T5834] ? __list_add_valid_or_report+0x4e/0x130 [ 1074.954799][ T5834] check_panic_on_warn+0x89/0xb0 [ 1074.954854][ T5834] ? __list_add_valid_or_report+0x4e/0x130 [ 1074.954871][ T5834] end_report+0x73/0x170 [ 1074.954885][ T5834] ? __list_add_valid_or_report+0x4e/0x130 [ 1074.954902][ T5834] kasan_report+0x128/0x150 [ 1074.954916][ T5834] ? __list_add_valid_or_report+0x4e/0x130 [ 1074.954936][ T5834] __list_add_valid_or_report+0x4e/0x130 [ 1074.954954][ T5834] kcov_remote_stop+0x457/0x680 [ 1074.954973][ T5834] hub_event+0x4789/0x4cf0 [ 1074.954996][ T5834] ? __lock_acquire+0x683/0x2ce0 [ 1074.955013][ T5834] ? register_lock_class+0x31/0x2e0 [ 1074.955039][ T5834] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1074.955062][ T5834] ? __pfx_hub_event+0x10/0x10 [ 1074.955083][ T5834] ? process_scheduled_works+0xa20/0x14e0 [ 1074.955106][ T5834] ? rcu_is_watching+0x15/0xb0 [ 1074.955124][ T5834] ? process_scheduled_works+0xa20/0x14e0 [ 1074.955137][ T5834] process_scheduled_works+0xa8e/0x14e0 [ 1074.955160][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 1074.955176][ T5834] ? assign_work+0x3cf/0x5d0 [ 1074.955191][ T5834] worker_thread+0xa47/0xfb0 [ 1074.955214][ T5834] kthread+0x388/0x470 [ 1074.955231][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 1074.955244][ T5834] ? __pfx_kthread+0x10/0x10 [ 1074.955260][ T5834] ret_from_fork+0x514/0xb70 [ 1074.955279][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 1074.955305][ T5834] ? __switch_to+0xc89/0x1420 [ 1074.955322][ T5834] ? __pfx_kthread+0x10/0x10 [ 1074.955339][ T5834] ret_from_fork_asm+0x1a/0x30 [ 1074.955358][ T5834] [ 1074.958696][ T5834] Kernel Offset: disabled