last executing test programs: 18m6.636577992s ago: executing program 4 (id=1806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x51b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000244be8c1003040ce8bafb010203030902"], 0xfffffffffffffffe) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 18m5.222878652s ago: executing program 4 (id=1816): syz_open_pts(0xffffffffffffffff, 0x82080) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x9, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 18m5.168720121s ago: executing program 4 (id=1817): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0xfffffffd, 0x4, 0x8}, 0xc) 18m5.056137692s ago: executing program 4 (id=1818): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x200c1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xfffffff, 0x8001, 0x7, r1, 0x0, &(0x7f00000000c0)={0x990a61, 0x1, '\x00', @p_u8=&(0x7f0000000080)=0x7}}) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0xb, @win={{0x1, 0x0, 0x80000001, 0x7}, 0x6, 0x100, &(0x7f0000000200)={{0x2, 0x9, 0x9, 0x1ba}, &(0x7f00000001c0)={{0x1, 0x6a90, 0x3aff, 0x800}, &(0x7f0000000180)={{0x79, 0x8, 0x8, 0x31aa}}}}, 0x7, &(0x7f0000000240)="e1fc394f1e7e7d699a702dad847f2742398d06fb6a3ad5f3530848f47739d6d5716b0ffc40dd73046d6905952e482180f4ba4fba0e8ae85917f7d3922ee8d6a22d", 0x78}}) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xc8c25) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000500)={0x800, 0x2, 0x42, 0x7fffffff, 0x87, 0x1, 0x5}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000580)={0x0, 0x10001, 0x33, 0x1}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000980)={0x0, 0x7, 0x9e8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000d80)={0x8, 0x2, {0xffffffff, @struct={0xfffffffe, 0x6}, r4, 0x0, 0x3, 0x1, 0x9, 0x9, 0x1, @struct={0x3ff, 0x4}, 0x3e, 0x8eb4, [0x0, 0x200, 0x2, 0xc0, 0x7fff]}, {0xdfa6, @usage=0x4, r5, 0x4, 0x5, 0x81, 0x1, 0x7ff, 0x288, @struct={0xff, 0x8}, 0x7f, 0x6db8, [0x1000, 0x4, 0x4, 0x3, 0x800, 0x6]}, {0xb, @usage=0x7, 0x0, 0x7, 0x9, 0x0, 0x2, 0xfffffffffffffffd, 0xa4, @usage=0x1, 0xffff, 0x4, [0xfffffffffffffffd, 0x7, 0x7, 0xcf, 0x15, 0x7f]}, {0x8, 0x1ff, 0x7}}) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000001180)={0x3, {0x6, 0x8, 0x8, 0x8}}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x2]}, 0x8, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r7, 0xc008551a, &(0x7f0000001200)={0x3, 0x1c, [0x3, 0xffffff80, 0x7, 0xfffffffd, 0x4, 0xfffff000, 0x401]}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r8, 0xc84f480b2bc6f5fc, 0x13, r1, 0x0) pselect6(0x40, &(0x7f0000001240)={0x1, 0x9, 0x54, 0x0, 0x7, 0x1, 0x5, 0x4}, &(0x7f0000001280)={0x1, 0x7fff, 0x90, 0x9, 0x5, 0x800, 0xfffffffffffffff7, 0x3}, &(0x7f00000012c0)={0x4, 0x0, 0x100000000, 0x8, 0xec62, 0x9, 0x6, 0x7}, &(0x7f0000001300)={0x77359400}, &(0x7f0000001380)={&(0x7f0000001340)={[0x2]}, 0x8}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000013c0), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000001400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r9, 0x3b86, &(0x7f0000001440)={0x18, r10, 0xffffffff, 0x7}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000001480)={0x1}) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f00000014c0)) syz_io_uring_setup(0x7472, &(0x7f0000001500)={0x0, 0xfaaa, 0x1000, 0x0, 0x4}, &(0x7f0000001580), &(0x7f00000015c0)) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/power/wakeup_count', 0x226801, 0x8) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000001640)=@vmx={0x4, 0x0, 0x2080, {0xe000, 0xeeee0000, {}, 0x1, 0x2}, {"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", "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"}}) socket(0x1f, 0xa, 0x3) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000036c0)={r6, "1bcc2268acf61d82ae43959a025f95b9"}) r12 = memfd_secret(0x80000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004980)={r12, 0x0, 0xc5, 0xdc, &(0x7f00000046c0)="4c752a80d13186476e39a62aaa5ef2ecffaffc43c33957a5f37275d0d9587cf71f22e0b1fec99a973c8894399f023ea7bf8d515c1ee41f6d7e28728377d93a14e3a1652393d4ae6ae9b12a71d9be3fa8821ff91fc46f5f198a7af76f8c04563a222fa924e95982bc7319c5b3edbb540470df5332ad4709ef466054792fd71b2583283124279dc331ad5488924c2c86394ab0244b3642cdd1a252d9a8e4b2e5f407e1dca69d9b24efc0553d2764da2f86f608586a36795e888dda0081aa0facb6b081b706fb", &(0x7f00000047c0)=""/220, 0x4, 0x0, 0x6c, 0x19, &(0x7f00000048c0)="d141a51dec5a6ba8b807e266299f884f3cc5c7892f783535c5a32192a09cde2439e713e8d08e7f9610e2644d46690bb4755b73f50ef539cf597a665da5703b2339f461419247318ae74947fb572ca174172e655b9061b7f9cb47bcbedc1d4adc42fc5f796c13f51d835be250", &(0x7f0000004940)="f39b2cc144d88f0c21bf5ccecdf015a22f28de671b56fbb482", 0x4, 0x0, 0x2}, 0x50) 18m3.64535965s ago: executing program 4 (id=1825): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 18m3.331260849s ago: executing program 4 (id=1829): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x400, 0x452e, 0xfff, 0x4, 0x5, 0x3, 0x9}, &(0x7f0000000100)={0x0, 0xc91, 0xffffffffffffff5b, 0x2, 0x9, 0x7, 0xa, 0x80000000}, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x18, 0xff, 0x33dd, 0x2, 0x7ff, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) (async) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) recvmmsg$unix(r0, &(0x7f0000000480)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/78, 0x4e}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x1, 0x100, &(0x7f00000004c0)={0x77359400}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207bf7f7ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) (async) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r1, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x14}) 17m46.535121544s ago: executing program 32 (id=1829): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x400, 0x452e, 0xfff, 0x4, 0x5, 0x3, 0x9}, &(0x7f0000000100)={0x0, 0xc91, 0xffffffffffffff5b, 0x2, 0x9, 0x7, 0xa, 0x80000000}, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x18, 0xff, 0x33dd, 0x2, 0x7ff, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) (async) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) recvmmsg$unix(r0, &(0x7f0000000480)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/78, 0x4e}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x1, 0x100, &(0x7f00000004c0)={0x77359400}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207bf7f7ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) (async) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r1, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x14}) 17m3.145240458s ago: executing program 2 (id=2035): r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x4, 0x1) 17m2.954489121s ago: executing program 2 (id=2038): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) read(r0, 0x0, 0x0) 17m2.740140021s ago: executing program 2 (id=2041): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') renameat2(r0, &(0x7f0000000380)='./cgroup\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x2) openat(r0, &(0x7f0000000040)='./mnt\x00', 0xb779c857fb9009e9, 0x0) 17m2.630835175s ago: executing program 2 (id=2044): mkdir(&(0x7f00000000c0)='./file0\x00', 0x48) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x189046, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') 17m2.45426767s ago: executing program 2 (id=2046): fsopen(&(0x7f0000000380)='gfs2meta\x00', 0x1) 17m0.974767386s ago: executing program 2 (id=2073): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 17m0.57787601s ago: executing program 33 (id=2073): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 15m58.882814226s ago: executing program 1 (id=2578): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002040)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10050}, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010", 0x49}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001980)={0x2, 0x0, [{0x2ed5a3931868c0ea, 0x1000, &(0x7f0000000880)=""/4096}, {0x1, 0x66, &(0x7f0000000480)=""/102}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 15m58.67819753s ago: executing program 1 (id=2582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000140)={0xe1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "160440", 0x20, 0x6, 0x1, @remote, @local, {[], {{0xb00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x80000000, 0xfffffffa}]}}}}}}}}, 0x0) 15m58.066743546s ago: executing program 1 (id=2585): lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x20420) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xb, 0xe0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x80, 0x4}, 0x8, 0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x0}) accept$packet(r3, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x13) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) 15m57.599856138s ago: executing program 1 (id=2587): mkdir(&(0x7f00000000c0)='./file0\x00', 0x48) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x189046, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') 15m57.305103222s ago: executing program 1 (id=2590): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x100000003, 0x9, 0x1) setrlimit(0x2, &(0x7f0000000080)={0x7, 0xffffffffffffffff}) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000008000/0x1000)=nil, 0x3) mbind(&(0x7f0000a8d000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0xe90, 0x9, 0xe) 15m55.074054781s ago: executing program 1 (id=2600): mkdir(&(0x7f00000000c0)='./file0\x00', 0x48) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x189046, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') 15m54.665866246s ago: executing program 34 (id=2600): mkdir(&(0x7f00000000c0)='./file0\x00', 0x48) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x189046, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') 7m3.565838802s ago: executing program 5 (id=4394): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 7m3.410623182s ago: executing program 5 (id=4396): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8042, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 7m3.135693181s ago: executing program 5 (id=4398): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) r5 = syz_io_uring_setup(0x83b, &(0x7f0000000140)={0x0, 0x11e, 0x0, 0x1, 0x315}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000940)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000680)='E', 0x1, 0x4000000, 0x1}) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) write$binfmt_elf32(r9, &(0x7f0000000c40)=ANY=[@ANYBLOB="7f454c4605cfba63440000000000000002003e00070000008603000038000000b4000000696bad0d0e0020000200cc48002000080000000007000000ea000000090000000600000005000000f6070000f407000005000000010000000800000002000000fdffffff0100010004000000ff0100000800000017f01fbce5fe67f57966ea9c279dee6db4cb763fb07233d98751a4d7abfe65e2223d448dd6daf7c88365220d054bd68de43a8d87e5dca38654d74e5aa437d26c2ef3fd5f0bda13e8b95df5cd77755dcc6edcd6291fdd44ca2d965084273f3e358e512024cee7ed651e73c940b9e440c2b62a99302100000000000000000000000000000000000000000000000000000000000000000000000000000000f5b69e5e00"/2285], 0x8ed) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acbf5"], 0x0) 6m59.940257603s ago: executing program 5 (id=4416): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) unshare(0x22020600) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000180)=""/263, 0x107, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xffffffffffffff91, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x1) 6m59.551616247s ago: executing program 5 (id=4420): socket$netlink(0x10, 0x3, 0xa) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ac11b6c58254c7beddde0f006372bc20", 0x10) 6m57.907028221s ago: executing program 5 (id=4430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000140)={0x30001, 0x0, {[0x8b, 0x0, 0x18, 0x4, 0x1000000000, 0x40000000000000]}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x18, 0x4048800}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000640)="83045727550c009ac83e07a096e9fac8b1cebf04bca6730aeb6884d331640ca4082b553e9a924f760b8c4a4e3c8f276cac8095a06b376c86e4b88922f9d1b1c59d10473b44d2771f06b76a368eeed4efd54ff3e8932988", 0x57}, {&(0x7f00000006c0)="bfdb32d9407d135de65b94ff7b5e114a15fb7c557a50f5e0c4b9896063ebcc6b7ab85db4c6db01f771b1694c8fa3d2a0ca470602a48ea4a4e7267cc2919628f89bc4548516a4d5fa08dd2fd40f43b5f29d0b8d61d14945585f29311ddf5cdbf1c1f4e569d07baa33c4f44b7e394b7243549109382f7d5ee592b65d6ee51b644a6f51803ff36cb44d493be0eb8b005a638bf8234ce59d39d1cf19622b051ac875c3df2a378555e86002ee19f832d98abbc7ea5c6df586fec6629ad9b67f53d99669607fa63637ccf2d8db", 0xca}, {&(0x7f0000001f00)="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", 0x6e0}], 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m57.490319495s ago: executing program 35 (id=4430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000140)={0x30001, 0x0, {[0x8b, 0x0, 0x18, 0x4, 0x1000000000, 0x40000000000000]}}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x18, 0x4048800}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000640)="83045727550c009ac83e07a096e9fac8b1cebf04bca6730aeb6884d331640ca4082b553e9a924f760b8c4a4e3c8f276cac8095a06b376c86e4b88922f9d1b1c59d10473b44d2771f06b76a368eeed4efd54ff3e8932988", 0x57}, {&(0x7f00000006c0)="bfdb32d9407d135de65b94ff7b5e114a15fb7c557a50f5e0c4b9896063ebcc6b7ab85db4c6db01f771b1694c8fa3d2a0ca470602a48ea4a4e7267cc2919628f89bc4548516a4d5fa08dd2fd40f43b5f29d0b8d61d14945585f29311ddf5cdbf1c1f4e569d07baa33c4f44b7e394b7243549109382f7d5ee592b65d6ee51b644a6f51803ff36cb44d493be0eb8b005a638bf8234ce59d39d1cf19622b051ac875c3df2a378555e86002ee19f832d98abbc7ea5c6df586fec6629ad9b67f53d99669607fa63637ccf2d8db", 0xca}, {&(0x7f0000001f00)="82f2766aa806e374b81b5f3611fd72b96b9ed1b40f7b9323286f7c9d8cd631e3a7cc747cb6dbf1ecdf9356d7d20077d7d35437fd783630288fd9386cf2ccb4e6350d6d437677fe824c488a3e30683faed637a9c5ed26b532c87c841ed51cf63b72923b716e3fec61cf7c207b46a8e74b304b3c9f1270fd74a4b4cb3e0535a8e87dd9dd9d58d98fdf588dc721b7c40466c0ef566636c495957231e3ac3f7b71b2a8d51d4e41435213745919afb9611834ed6a54a3a741506a1eb6000676fa9df55b6b805c1e28adfa4ae7095a7648b54918144ccc7ac16c268e7b2cabd7cc6103e6547ee04a1a99d57dbf6204cf13ea83372c3949b4a4d65f2b518af3516c92913167750f95433b60270cda57379072a650a0f0ad36f187c58d35468f5fe4c2b2f7abf5c0c7ea8e3e2bb4bdfbee949b3a4a0e4135a4b0cb4870e4ea7e2cdf01119f125bd7946231f9da5d983c28983fbfd29e914074db84a28b789ec9d9c3b7b6b96282f7027d4d21de481124890c897c1f2a1b5e6b40f0b1ffe0c45bbf18200751e8b6722e0045ed4af3a7b3d12ebd8f7a4798b9cf31190cf2b57323b6b63f62780a0551e38b3fe58b53f59c369fdf5c7e1350d6acf5092e156ccbcb1806f1bb068e359baaa9e6df0ec29e2682398b341d540745b0a33e51d045f0e6894b58f9ff0bb2575adb93b56ce7da55dcf4acbddfd71672c6b4eb1480b08457504d4c35f67a80cb53ecd353bd10e34150bf51adf67bd6c690d537a81475551537221b7300b42be8d182d624ff5e0460f18aeadd7b6c6ed4eaff70e4268bb7ac14e7c774c505d52b9112a5524736478457e35f55ea367cbb573a9968c5cc357312a621c1b248083a47574f3cbeeaaeafc74b7c22548b17927395a076915be69efbbaef304994a7d2395d2cd04556b7965c36f0f45b89e62fa95e29d4c6835f9a808615f39ce88b0f31ceb466557df4a48bf565159a22d0f37899be07620f71cbb92cdb52efb985be159856d9ab35e7117400512107432d470ca81e8a94da00a35b2b21080dfbf15f1e408296de9767a8ab8eb218e85672e81bef7106e7509419d14ea65492fd2557b619c85f6e9a5f3eb968823a9f4b1e280da456f10abd175a3ceeb4ad1877d7f4ef3dd081901dcfcc5ded6c33884c81a6aa3da9659f2b09dc2d538ed032f94db9ee84d4eda3899086bfff6afea0ff4f8acf6771d1a3d22998f1e97490bc604512ff939ac175a0236c04854d7161a2f63f2bce1ddc71057a0d9489fe73ce494cde7c02d4cc2b4e56d53396f53a3f8ac94c8305a69cb52fd4e4765d488f06b7617a91da5703315fbf8832bf46e8912e29ffeab5713fdef447cd6742ac1f781c1ad270c5ba9c507434fbd842a9fa7d0b17f1fe064956ba6f91a7299407a209bdb65c485195697e3c8dd1d218ba9c50a5b4c191384d754c52bb1d5feaf02a22eea755745ad5fc59dceccab9b0aa2568e2d3d14cbf47ddcc39657844aa2489c8d5e6c8d2f38365b3a8e39a93c722d20120bc88982e8fa0c680045917b5e66b3e3aa4db813ef3164c7a81e6d1d9106da8486b136eda98559d28e1e0d40c34617921caa276a2bb2fe18714795742976b0c9326d5e7363bae36cab55b8e1ff84d258d8bc8c101f21d3b76656b987e6779df3d1d36ddece6fb57e2fa6bbcfa0bba4015b55a5e2857eed2fcb42cc8d5b333c68373b8b42a421dd066d3d22e5381f8319a6870573af22f2a8ca30e18e46500aa8fae8d67113c4bf837132fb5c872f28f24de504e2ad78fac7106edde1989632cf0ec5fba71255becded60e58e70b5785dbb5e690459ea3f240f64713c4ff8b4df2e11fee3262380ccba7a5f794029adeeea0e96aa399f313b34ad97895cb2bccf61cf270f07d183fb34c3fc5b5d02fcdf27fdbc91ac46e382d29afe7c9cecfc1b023bfcbf244da66e0935234782ea36ace9f212c363907effd669b495646d4ac9749d746cd93c5edf8e150670cf0b0e2e4881513b7b8cccc06961348fb53809aa63336066a679249445393bf264f99722cf60cbab2da8a85e869ba6a27f9acba8f9f85c2d0f9fbc0fc94a5163d6670930b95724b4eecb7bdf4d3d7587bc5e39b27d9943e75176434a49a379716573449f66e2b8f3cdd67994f0c46c6ab02b27d58706156f5c68cbe81567c4b26a98f1a8d6a7e39127557bbac6608cd9ecf9d85aedb9f9c01857c97390d5e89bfe377a867c452e5a9cfb2ac40c680e8a08f7fa6f5df9ff0b4fa5362a45b746e7f38d5e882526544065afc54cd851e587f5120d582b41113168f11c1f34b8899d8f4f0bd6906971aa1ef9eb752aa4d03df9d96863ea0ece1741405405476aa456ddf0fa993601bcbca33476ed192751889def1d09f6d2043a2587e4dd060aec92f6791bb3e82b574fa81b30cca2b246cd094f7e1de4065e6530878b266c83dc79f8972cd843216277d00db83d575ece8ada87203bae17ca987fd2282735062f650c9eb", 0x6e0}], 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m32.787117345s ago: executing program 6 (id=6023): socket$alg(0x26, 0x5, 0x0) io_setup(0x20000000001005, 0x0) io_submit(0x0, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='=', 0x1}]) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1m32.471013498s ago: executing program 6 (id=6025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x140, 0xffffffffffffffff, 0x3}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86a7d62fdce0b68c2a7502b5b00c9f", "a0ef725a066e767106000000391039d1"}, 0xe, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000180)={0x8, 0x1, 0x3, 0x4}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000820000000000000060b4000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.925794315s ago: executing program 6 (id=6028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x48}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r0, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1m31.328710542s ago: executing program 6 (id=6030): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x40010, 0xffffffffffffffff, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="349fd4c92ffcef459038dcaf465706d79bb23a7fcf225e3389bafbfce0258ae4efee5589a2e65e76e4d02bca06f3eb2c802a91b467baf1de2661418b4183", 0x3e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0xffffffffffffff84, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20090000}, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfd, 0xff, 0x6af, 0x5, 0xf}}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000180)={0x0, 0x1a, 0x1, @thr={&(0x7f0000000080)="bc5df311c58e2abbf0e714d6619fa8c54c74334e8ed09d06b5020f797ef3c20e36dfd255ecc34468bb6c99cca68b42b864005535842d6199cf13ef6431f6eb5d85f09346298999060cc8c09a746df3e37b887cdf57d78cfffb33a05e746a4c798ddffb192959dd4d8a8d0f44b3d7546a8ca20fcc4e5decd732b919c02f86eb064824ad3f60449b6d03a26c362ce68ef29f9ff1aa1736142c9ef2095527a5b41cdd49c347d61f", &(0x7f0000000140)="cbee605af47ce23478b34f28c45b320cde98c39d6eb04d19"}}, &(0x7f00000001c0)) 1m30.917726054s ago: executing program 6 (id=6033): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x1) sched_setparam(0x0, 0x0) fsmount(r1, 0x0, 0x82) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r4, 0x0, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.107030687s ago: executing program 6 (id=6039): creat(&(0x7f0000000300)='./file0\x00', 0x2) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r0, 0xfffffffb}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x0, 0x4}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000021000304000200800000000002000004000000000000000008000a0038"], 0x38}}, 0x20004080) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x4514, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x2) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') socket(0x2, 0xa, 0x300) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcafd0e077bf945c40399aeb88c1efcab6c7795d64a69c0160363258e550a72ed13b6de13637349f05f524bbde1d772edc6e"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000080850000000f000000182b0000", @ANYRES32=r9, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d0000008500000006000000852000000400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 1m13.646808121s ago: executing program 36 (id=6039): creat(&(0x7f0000000300)='./file0\x00', 0x2) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r0, 0xfffffffb}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x0, 0x4}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000021000304000200800000000002000004000000000000000008000a0038"], 0x38}}, 0x20004080) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x4514, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x2) r6 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') socket(0x2, 0xa, 0x300) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcafd0e077bf945c40399aeb88c1efcab6c7795d64a69c0160363258e550a72ed13b6de13637349f05f524bbde1d772edc6e"], 0x8a) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000080850000000f000000182b0000", @ANYRES32=r9, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d0000008500000006000000852000000400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 13.327522275s ago: executing program 3 (id=6305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 13.13428458s ago: executing program 3 (id=6307): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x5}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xa, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000380)="b7d6b7080a7a6dcd32002418a8e4", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001d00e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000b00"/112], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x1000007) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@deltaction={0x94, 0x31, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x94, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x94}}, 0x24000844) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x200, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041000}, 0x0) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000180)={r8, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r8, 0x9}, &(0x7f0000000240)=0x8) 11.20277298s ago: executing program 7 (id=6311): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 9.723633801s ago: executing program 3 (id=6314): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x1, 0x10003, "d52522a66761bebdb5bec16361a900", {0xb, 0xb}, 0x6}) 9.026949071s ago: executing program 3 (id=6315): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r3, 0x2}, &(0x7f0000000300)=0x8) r4 = mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x38, 0x0, &(0x7f0000000340)=[@increfs, @acquire={0x40046305, 0x1}, @increfs, @dead_binder_done, @free_buffer={0x40086303, r4}, @acquire], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x3000008, 0x80010, r5, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0x8010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 8.966734996s ago: executing program 0 (id=6316): mkdir(&(0x7f0000000080)='./file1\x00', 0x4e) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000004c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a95b, 0x3, 0x4, 0x6a1c000, 0x0, 0x800000000000001, 0x100fff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) (fail_nth: 19) 8.474195097s ago: executing program 0 (id=6318): madvise(&(0x7f00002b6000/0x3000)=nil, 0x3000, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) read(0xffffffffffffffff, &(0x7f0000002500)=""/126, 0x7e) socket$inet_tcp(0x2, 0x1, 0x0) 6.87073949s ago: executing program 7 (id=6322): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x2, 0x801) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x3b36e000, 0xd000, 0xa, 0x0, 0xa, 0xfc, 0xfc, 0x0, 0x0, 0xfe, 0x0, 0x1}, {0x25000, 0x8000000, 0x3, 0x1, 0x40, 0x3, 0x4, 0xb, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0xeeef0000, 0x13, 0x8, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x2, 0x0, 0x1a}, {0x11001006, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0xd5, 0x9, 0x0, 0x0, 0x84}, {0x8080000, 0x80a0000, 0x4, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x9}, {0x1, 0x0, 0xf, 0xf9, 0x0, 0x2, 0x0, 0xc, 0x0, 0x3, 0xff, 0x40}, {0x6000, 0x4}, {0x25000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x6001, 0x900, [0x5, 0x0, 0x800000000000000, 0x3fffffffffff]}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r1, 0xb}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc9, 0x40045b, {0xabac, 0x0, 0x7, 0x6, 0xffff, 0x6, 0x8, 0x7ff, 0x9, 0x0, 0x8000, 0x5, 0x10, 0xfff7fffb, "3c07753f7bc48459a3fcded06e484223aa5db308e150b399d71c00"}}) socket$kcm(0x2, 0x3, 0x84) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (fail_nth: 22) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xc01, 0x8}, &(0x7f0000000180)=0x90) 6.541155381s ago: executing program 9 (id=6323): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x3, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8b2e2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0xfffffffffffffff7]}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0xe, r7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x6, 0x8, 0x8, 0x0, r7}) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r9 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x25a5, 0x4) write$binfmt_script(r11, &(0x7f0000000180)={'#! ', './file0'}, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x4000010, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r14 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r3, 0x0, 0x20000a, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x13, r14, 0x0) 5.613218606s ago: executing program 7 (id=6324): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x412, 0x3}, 0xffffffffffffffe8, 0x0) landlock_restrict_self(r1, 0x9) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x2fbd, 0x1}, 0x18, 0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x400}, 0x14}}, 0x0) landlock_restrict_self(r2, 0x0) tkill(r0, 0xf) 5.53361823s ago: executing program 3 (id=6325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x44}}, 0x400c8a4) 5.431102017s ago: executing program 3 (id=6326): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x21042, 0x136) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xd10e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f000001f100)=[{{&(0x7f0000000000)=@pppoe, 0x80, &(0x7f000001a6c0)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000019440)=""/231, 0xe7}, {&(0x7f0000019540)=""/74, 0x4a}, {&(0x7f00000195c0)=""/180, 0xb4}, {&(0x7f0000019680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f000001a680)=""/54, 0x36}], 0xa, &(0x7f000001a780)=""/59, 0x3b}, 0x8000}, {{&(0x7f000001a7c0)=@generic, 0x80, &(0x7f000001ab40)=[{&(0x7f000001a840)=""/187, 0xbb}, {&(0x7f000001a900)=""/108, 0x6c}, {&(0x7f000001a980)=""/221, 0xdd}, {&(0x7f000001aa80)=""/128, 0x80}, {&(0x7f000001ab00)=""/45, 0x2d}], 0x5, &(0x7f000001abc0)=""/232, 0xe8}, 0x9}, {{&(0x7f000001acc0)=@isdn, 0x80, &(0x7f000001bf00)=[{&(0x7f000001ad40)=""/31, 0x1f}, {&(0x7f000001ad80)=""/182, 0xb6}, {&(0x7f000001ae40)=""/4096, 0x1000}, {&(0x7f000001be40)=""/123, 0x7b}, {&(0x7f000001bec0)=""/16, 0x10}], 0x5, &(0x7f000001bf80)=""/143, 0x8f}, 0x1}, {{&(0x7f000001c040)=@generic, 0x80, &(0x7f000001c700)=[{&(0x7f000001c0c0)=""/89, 0x59}, {&(0x7f000001c140)=""/200, 0xc8}, {&(0x7f000001c240)=""/152, 0x98}, {&(0x7f000001c300)=""/193, 0xc1}, {&(0x7f000001c400)=""/40, 0x28}, {&(0x7f000001c440)=""/133, 0x85}, {&(0x7f000001c500)=""/251, 0xfb}, {&(0x7f000001c600)=""/145, 0x91}, {&(0x7f000001c6c0)}], 0x9, &(0x7f000001c7c0)=""/134, 0x86}, 0x6a22}, {{0x0, 0x0, &(0x7f000001d980)=[{&(0x7f000001c880)=""/229, 0xe5}, {&(0x7f000001c980)=""/4096, 0x1000}], 0x2, &(0x7f000001d9c0)=""/90, 0x5a}, 0x7f}, {{&(0x7f000001da40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f000001eac0)=[{&(0x7f000001dac0)=""/4096, 0x1000}], 0x1, &(0x7f000001eb00)=""/121, 0x79}, 0x8}, {{&(0x7f000001eb80)=@tipc=@id, 0x80, &(0x7f000001f040)=[{&(0x7f000001ec00)=""/102, 0x66}, {&(0x7f000001ec80)=""/227, 0xe3}, {&(0x7f000001ed80)=""/31, 0x1f}, {&(0x7f000001edc0)=""/38, 0x26}, {&(0x7f000001ee00)=""/92, 0x5c}, {&(0x7f000001ee80)=""/165, 0xa5}, {&(0x7f000001ef40)=""/191, 0xbf}, {&(0x7f000001f000)=""/22, 0x16}], 0x8, &(0x7f000001f0c0)=""/10, 0xa}, 0x6}], 0x7, 0x100, &(0x7f000001f2c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x200401, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) setrlimit(0xc, &(0x7f000001c6c0)={0x62c2, 0xfffffffffffffff6}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000001c0), 0x75, r4}, 0x38) 5.369927042s ago: executing program 0 (id=6327): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x34d1, 0xfffffffd, 0x4, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x2004c810) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f00000001c0)={0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x87, 0x1122070, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x3e, 0xb235333, 0x1, 0x4, 0x4000001, 0x0, 0x0, 0x0, 0xe, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.upper\x00') setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1, 0x0], 0x2}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000680)={r6, 0x0, {0x0, 0x0, 0x0, 0x800001, 0x4000020000000ffd, 0x0, 0x0, 0xa, 0xd, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8c09cc2e43b161f7ffff0008009b4100", [0x0, 0xa]}}) 5.369234244s ago: executing program 8 (id=6328): r0 = memfd_secret(0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000000)={0x2, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) socket$l2tp(0x2, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@mcast1, 0x0}, &(0x7f0000000540)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8000000, 0x5, 0xffff, 0x0, 0x1, 0x800, '\x00', r4, r0, 0x0, 0x2, 0x5, 0x2}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000580)={0x15, 0xe6, &(0x7f0000000600)="d1b9d24dd98e01999cf988f7c90a1fc2fb4b5dde3dbc40b724e83d7467e68f35389d34ce0d80759144468df0dfba135b9d33a3eb0a5c4cdc643c64eed9e2646ebcb327f8fe37a80c125dccf3bec29387349fde4c63332f83bd6a53f3b35f3f58b14201d6c30d005ff4c69e7bb40459734c7ee9e3d9450adab67b958fcbf46a264998b2dccfb7188f8359ce951f90b0e5af9a38aa7d1e7f4494cf6178de73149bd6e11dbaa2f6fc1e6f13b625a89d950f98fcdc85c679d04c968aedab99f60651f839998176c577938316ee9f8416af715c897b70b8eba987d5144a47fd7770604c1dbb08a56f"}) r8 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@bridge_dellink={0x1cc, 0x11, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp1\x00'}, {0x14, 0x35, 'veth1\x00'}, {0x14, 0x35, 'pimreg\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}]}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_AF_SPEC={0xe4, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x68, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2b}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0xffffffffffffff98, 0x7, @local}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xba}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x13}]}, 0x1cc}}, 0x0) sendto$packet(r8, &(0x7f00000003c0)="8bbb9e53503e92334faa048f71bd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x8100, r10, 0x1, 0x2, 0x6, @random="2d1729f3aa29"}, 0x14) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r5], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.198829565s ago: executing program 7 (id=6329): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x40280, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x17d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.178896817s ago: executing program 9 (id=6330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0xf23, 0x0, 0xc, 0x0, 0x0) 4.471781845s ago: executing program 8 (id=6331): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800ef01"], 0x1c}, 0x1, 0x11}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.423049163s ago: executing program 0 (id=6332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10be42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000004c0)={0x0, 0xf6ef, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000a00)={r7, 0x80000001, 0x0, [0x8001, 0x7, 0xf8e, 0x7, 0xb7d], [0xabd0, 0x0, 0x1e0000000, 0x65, 0x7fff, 0xfffffffffffffff8, 0x661, 0x5, 0x6, 0xa, 0x2, 0x7fff, 0x7, 0x0, 0x2c63, 0x6, 0x8, 0x6, 0x6, 0xf, 0x8, 0x56b, 0x2, 0x2, 0x3, 0x0, 0x10, 0x87a, 0x8, 0x0, 0xd7f, 0x10001, 0x6, 0x8, 0x78, 0xe6, 0x1, 0xcd, 0x0, 0x3ff, 0x9, 0x36c8, 0x2, 0x1, 0xffffffffffffb486, 0x3829795a, 0x4, 0x0, 0x9, 0x3ff, 0x6, 0xffffffff00000001, 0x8, 0x3, 0x939, 0x7, 0xbae, 0x6, 0x8, 0x8000000000000000, 0x8001, 0x0, 0x9, 0x80, 0x7, 0x1, 0x8, 0x550, 0x8, 0xfffffffffffffffc, 0x1, 0x2262, 0x8, 0x6, 0x8001, 0x3, 0x8, 0x7, 0x8f, 0x5, 0xffff, 0x3, 0x0, 0x7ff, 0x2, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x5, 0x8000, 0xcb70, 0x7f, 0x9, 0x9, 0x5, 0xffff, 0xa, 0x8, 0x6, 0x5, 0x33, 0x4, 0x400, 0x500000, 0x10001, 0x9c36, 0x76e, 0x1e, 0xee5, 0x9, 0x7f, 0x382, 0xdad6, 0x3, 0x1, 0x0, 0x4, 0xc26e, 0x20, 0x7]}) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x4280}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0xfffffff8, 0x0, 0x4, 0x0, 0x4, 0x4, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x7, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0xe1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xfffffffc], [0x2, 0x0, 0x3, 0x5, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80801) 4.422636661s ago: executing program 9 (id=6333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="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"], 0x114}}, 0x0) 4.144371116s ago: executing program 9 (id=6334): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.121168832s ago: executing program 7 (id=6335): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_clone3(&(0x7f0000000400)={0x90290000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180), {0x6}, &(0x7f0000000240)=""/30, 0x1e, &(0x7f0000000280)=""/38, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) prlimit64(r2, 0x8, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prlimit64(r2, 0xd, &(0x7f0000000480)={0x100000001, 0x6}, &(0x7f00000004c0)) getpid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x84}, 0xe) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x20403) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) listen(r3, 0xfc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) rmdir(&(0x7f0000000500)='./cgroup/../file0\x00') getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x2a, &(0x7f0000000600)=@string={0x2a, 0x3, "b6676cbcd91413eb26acfa7265d07ddb45c749cb1ce5d20cab2e179a8f3874a7afb10655e512ac58"}}, {0x9f, &(0x7f0000000740)=@string={0x9f, 0x3, "7db79806400da5f91b19877ba2918cadae6041d718e743253614f40bdf9a5a80f88b0da58d58c8333283079067d670afe8d86c78650bdedd593dcee0c882897f13acd68850a0230411585bbafd51d926c83e04a23fc87d258a23617406b2d6105a66d94a369e5d61fa7dc7c5033e778f84c48223c4ffc60697bbc52dde0a140d15e1c9dac38268a0d3bb34b226362e2e153c9a1136f9a22bf99cb7f844"}}, {0x43, &(0x7f0000000a00)=@string={0x43, 0x3, "91dc495a650e6014155193991b99df7ee3cccc0457e294941caa53186b7374e0a8194b90b733a14485806d5eaab2c550d2691ea61e6fe432ec1c1e44c388d2777b"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1801}}, {0xf3, &(0x7f0000000880)=@string={0xf3, 0x3, "5681b72de09321ed6e6f09b4f73766e074c51b8dd12585eb3de5a84044268bc3b61bf388422112acb78225a720b0b63abb7f796e2c36bc22159744093e8db7a6873509fed11d3891df7638d2ccf2451bf68bb7f73748efa602cb3e9718c057527c49c2299fc98c786e61f6da0723ffba694c2eb6d6453edac862ca98f8cecceec918883fca4ebeb90870088436fab44195e927342182788b08f142a0c176e6f0eef488525f3a57f358446e5478a1338ca8cdf88686473e8bf886e662a76aad6689e9c29c1233cc6d89d67a0e55d8f66678112ff6f6db39a0bf171c671f9aa61d1a28a4ce9a023d7af250b2828ccbf8c92b"}}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) 2.981207603s ago: executing program 8 (id=6337): madvise(&(0x7f00002b6000/0x3000)=nil, 0x3000, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) read(0xffffffffffffffff, &(0x7f0000002500)=""/126, 0x7e) socket$inet_tcp(0x2, 0x1, 0x0) 2.959482224s ago: executing program 9 (id=6338): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x25, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @jmp={0x5, 0x1, 0x4, 0x3, 0x5, 0x40, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000040)={0x2, 0xa, 0x80}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x55, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="0000001600210a00000000000000f72700000015000000"], 0x18}}, 0x8040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd4be0ffff00124000632f77fbac141416ac1414160e089f034d2f87e5830c0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.800790963s ago: executing program 0 (id=6339): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x300, &(0x7f0000001840)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000580)=""/198, 0xc6}, {0x0}, {0x0}], 0x4}, 0x7}], 0x2, 0xa020, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80, 0xa7) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 2.714447117s ago: executing program 8 (id=6340): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925a8e0013007b000b00984d000000100000008100ff0000f03a86100003ffffffffffffff000200"/88, 0x58}], 0x1) 2.298688697s ago: executing program 9 (id=6341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x188, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x178, 0x4e, 0x0, 0x1, [@generic="402358fe54fa24d856c20681d078b51e6edc39d366422515b566a6949e17469474ad784e0ce15798988807464789818ea7c102c76bf2b9d56596dcfcd9e6bd7a134a41e23bd6b91d17cf16332527f6f5bbc74a644dc2973ba3ad50ac08a3fe5af2e183a7dc3c789bac802ed513f2cb410c309486817314054512f18b19324ce87da4", @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@mcast1}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7", @typed={0x8, 0x11a, 0x0, 0x0, @uid=0xee00}]}]}, 0x188}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002500)="54b77b85a13c7b909fd308eeee49bcd7956f0baf799e17bbe4ba60a9a760c7d453a2685f506b185cd754d103d8bdacbd5a06b96d1ebf3d4374d4e7f1fff507674c38a942acd0678bb3b7b499a4232ed33e33fbea7acda4e7c2baca323f2850a3b66fd6026868b29c72314a9d1a9f423cf4aded3b9880b1526018a8180ae98ee45c095501f9d0879b9eca4c8f81de3bfabd544d5b06b02c8f9985bad127ce9d9561ff", 0xce4}, 0x9a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) syz_emit_vhci(0x0, 0x102) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r3, 0x29, 0x49, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x181, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001f055110240419cf96a40102030109020e0201000000000904"], 0x0) read$msr(r2, &(0x7f00000025c0)=""/102388, 0x18ff4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r6, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1.352559817s ago: executing program 0 (id=6342): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000070000"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffdfe}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00@\x00', @ANYRES16, @ANYRESDEC=r3, @ANYRESDEC=r1], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0xe22, 0x0, @remote, 0x7d79}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 1.289773571s ago: executing program 8 (id=6343): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x121502, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = syz_open_dev$midi(&(0x7f0000000080), 0x7, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x2, 0x4, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x20, 0x7800, 0x80000000, 0x905}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7710}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8001, 0x19, &(0x7f00000001c0)=""/25, 0x41100, 0x7, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[{0x0, 0x4, 0x2, 0xc}, {0x1, 0x4, 0x1, 0xb}, {0x5, 0x5, 0x10, 0xa}, {0x0, 0x4, 0xd}, {0x2, 0x1, 0x4, 0x6}, {0x0, 0x1, 0x8, 0x1}], 0x10, 0x5}, 0x94) sendmsg$inet(r0, &(0x7f0000001c80)={&(0x7f00000004c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000500)="eae94d22091e0dee124ce5550729941b133bec284014a325414830da58b97654e0aae70c528485f935ce423f49dfa2928ff4049414f808a1263ef4f2434b1a8d87169c330b810d081bc74ed0bf3efb82354bbe43b3fd685c4e35ff38523d8bf88a31a52cdc8dbd3523b75ecf73", 0x6d}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="da88631474fdf2a0aa7a52515109ee77d1d977628799587c8885d2f0208a43dce1a6221b0253dc4cb132b5bcd658f12cd2afa6253fa68f2fdb322e3ea0f7dfffe28fc5aed2e0cf23f9fe9f4ff25f511ac68a2eba1d26c4192ca440e2290785edb9aa7d7f010e83c12ff5985ec4e6f54ee13bb4162c", 0x75}, {&(0x7f0000001600)="871a8e05a4a438519272db21c8dd4dd807a3ad6f0675d290ac0dbe287556b63bc63ee4c87614eea625ace689ef19fa19bfa3bc2cdf303f0cbb5775761c2b4c3c12f1f24537e00be2e5bb68a35679b2a0cb80a12190dc91a9d9e40881224e52a3678874c45dcfd0306408d85f015838409e4e54ebc97b7a3dfc47fb23", 0x7c}, {&(0x7f0000001680)="4c2df64315fd6a6661e6d087adc2b144764321cc98bf4dee29485a59576506901b0e9465cc0b7ccb5e748ce3697cf9708cf6faccfb079cd18996d9b6954ad2ae6dc3bc2504dc3b7cb85c7f", 0x4b}, {&(0x7f0000001700)="06fa8e7040dbb488114bf1c1adb5eecb6dfbf8321440f8166d996a3787a92e822683f29e9032a28c044cf8026d52c95528b2ce8188c4c1b9faa051e20474e28659f10e60851f5c08de5651cce7d340dae2b4c0218f9dc9013898a81286615dbb5e76c0528aac33bc59bdfa14912a04cb2058af568f0001e9e11c127e447f57003cf2c26c6bb1fe9bc469176b9bafd23555c9c5512757d6e1d553df9499735d9adeb19fe1cc7384fdfcad2426c5cf6bdd45bf43f2c1765b43279c179d293835f206b8199b2b7aa689e760401f9242519f443a1ed6051a8ca3bb0c2329824f756af78e1777c52868a7753f", 0xea}, {&(0x7f0000001800)="d2fd7006e4f126307ffa732f4b9fb3f474a2a0317167ca3857dd28b104052c50423010b6d729ee4186e4eb6487257a24c22aebbe0ea5728465920104e46a44aeea30c8daa30c787180522ccfe12e9e2488541d3274630137459a1aaa2672008829b3891589cc408fc4bf53e8dd39e09195a620a906aebfc0df902853525e3240417e838077a265926dd53b4247", 0x8d}, {&(0x7f00000018c0)="112b134ee187a5efeec4e7de2ffe4e335aacf1a0b87addfb7155a3d315fb8947bd77af822dd069fe965e4bb366ffed53c2e9b3511977ddc695e998eca3d3d10d4ebf85d75f7ee7afee558b8234586e129f55603e42ca0b8e70b18794c946fc873598ca52e5069f7726aa693465e508320471c3bc9af5a0ec89853778a5a39e8fedd356a946823f7b1b4875ee6c47e7ae1759", 0x92}, {&(0x7f0000001980)="9e5e0e4e55478f12ead6b3fe05e1542c1b4bbbda4631d98ecf80d47c28307cda1d3ad750710ecd6358f72818662a38679907456c88effe59770855bad327cba0381f263b22d6976283f2428814ba83a3f90c1b444cd09eda9fe7957f61141ca138c200b8f6fdc2be8ae6db6fc3a5077216329734f9d9883a49e3f75c6654", 0x7e}, {&(0x7f0000001a00)="1069b1a7bf882f1203c215e006e2ae19fffc577a34f924e1e25d87975a64434e6007c79896e45c78864eb07d4729116b028af9514356e7b765fb1119dfdd86b60ee7b0d836a895b29dee69a0925201af36bc8c0b75f0ab35e1ab596aed9418362df74e", 0x63}], 0xa, &(0x7f0000001b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff127}}, @ip_retopts={{0x74, 0x0, 0x7, {[@rr={0x7, 0x7, 0x27, [@multicast1]}, @cipso={0x86, 0x4b, 0x0, [{0x1, 0xa, "0519cad8b5d73ca7"}, {0x2, 0x10, "1c73022065477d013efdb852cf49"}, {0x5, 0x7, "40f8e64e62"}, {0x1, 0x5, "298ec9"}, {0x0, 0xa, "6b7cf75a0598336b"}, {0x1, 0x5, "8fd435"}, {0x6, 0xc, "920030b158c455c4a9bf"}, {0x2, 0x4, "92ba"}]}, @rr={0x7, 0xf, 0x6a, [@loopback, @multicast2, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe0}}, @ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x16, 0xffffffffffffffff, [{0x0, 0xd, "e5fa2f9a2c769ef690aeef"}, {0x5, 0x3, "05"}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "e9428e"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5ae}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x128}, 0x4800) open_by_handle_at(r0, &(0x7f0000001cc0)=@ceph_nfs_confh={0x10, 0x2, {0xacec, 0x3}}, 0x402) r4 = open(&(0x7f0000001d00)='./file0\x00', 0x2302, 0x82) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e00)={0xfc, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x47}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x6}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xb4, 0x84, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="62b469ed7223"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x10001}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random='W\b'}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xcc2e}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004}, 0x4004800) fcntl$setpipe(r3, 0x407, 0xbd) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001fc0)={0x0, 0x1, 0x3, 0x2, 0xfffffffc, 0x8}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x54, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7b}}}}, [@beacon, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "9923f6501a1613d7"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) r7 = syz_open_dev$MSR(&(0x7f0000002140), 0x8000, 0x0) set_mempolicy(0x0, &(0x7f0000002180)=0x7fffffff, 0xb5a) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x5, 0xc, &(0x7f00000021c0)=@raw=[@alu={0x4, 0x0, 0xa, 0x0, 0x2, 0xffffffffffffffc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x0, 0x2, 0x9, 0x5, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000002240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x7a, '\x00', r2, @fallback=0x4, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f0000002280)=[r0, r4, r4, r4, r4], 0x0, 0x10, 0x2}, 0x94) readlink(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)=""/222, 0xde) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002500)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000002600)=0xe8) write$FUSE_ENTRY(r8, &(0x7f0000002640)={0x90, 0x0, 0x0, {0x1, 0x0, 0xfb9, 0x6, 0x7, 0x5, {0x3, 0x2, 0x7fffffff, 0x68b, 0x80, 0xb4, 0x3, 0x5, 0x2, 0x2000, 0xffffff1e, r9, 0x0, 0x80, 0x7}}}, 0x90) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000002700)={0x3, 0x5, 0x0, 0x7, 0xfffffffd, 0x0, 0xe312}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000002780)=""/81) read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r7, &(0x7f0000004840)=""/201, 0xc9) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000004940)={{{@in=@multicast2, @in6}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000004a40)=0xe8) 1.078657019s ago: executing program 8 (id=6344): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103", @ANYRES8], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x1800840, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x20, 0xa, 0xf6, {0xf6, 0xe, "37e1f290fce95afa5c7fe0258f1c5e66951c23b7dfda9df32234bcc672d8fcbb51f1661efe4ec9a03a691878c96c8206c599634825e37d6b469daf7630b960dd26ff22bc08693ac7607b3e30164f0359e7e2ee3474edaaca191f055bf04af873a43d6db795b9495467916ae25f3fff3d3c0628aee102b9f86ea602920e02c8c97572247ca61d4fd1640556035114ab5f214589efd7995d7af14fbb71650f6d781125804295135943070409c988fde9a7440683249acbe85bcdac4f13f8413bbfcfad571b6b49fded7e266da51716717bb1385f9eaf311c37bacdac6f2b72c858e415d4a4467e80fd2b1d490f1de1a67a13a12999"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "86713fb9"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x2d3}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x0, 0x13, 0x5e, "6018c6eca46c554d56f1137fc82921f39cc7bf2088017896d6624353745a00cca0468764e0919378a00867fe1bb45b4db98002ba656ac360b29198b3f7b6b7723b15a4bafa2da28eeb849d29ea6180fd06f4ecb932b74e736a0e19c1f6ea"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x20, 0x3, 0x1, 0xb}}) 0s ago: executing program 7 (id=6345): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x40280, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x17d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): put/input52 [ 1539.878739][T19862] usb 9-1: USB disconnect, device number 29 [ 1540.232303][T23769] FAULT_INJECTION: forcing a failure. [ 1540.232303][T23769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.232345][T23769] CPU: 0 UID: 0 PID: 23769 Comm: syz.7.5874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1540.232377][T23769] Tainted: [L]=SOFTLOCKUP [ 1540.232386][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1540.232400][T23769] Call Trace: [ 1540.232410][T23769] [ 1540.232421][T23769] dump_stack_lvl+0xe8/0x150 [ 1540.232461][T23769] should_fail_ex+0x46b/0x600 [ 1540.232497][T23769] _copy_from_iter+0x3b0/0x1670 [ 1540.232542][T23769] ? __pfx__copy_from_iter+0x10/0x10 [ 1540.232570][T23769] ? do_user_addr_fault+0xbad/0x1340 [ 1540.232605][T23769] ? smack_socket_sendmsg+0x1a9/0x590 [ 1540.232633][T23769] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1540.232668][T23769] bcm_sendmsg+0x172/0x6c0 [ 1540.232699][T23769] ? irqentry_exit+0x59e/0x620 [ 1540.232741][T23769] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1540.232793][T23769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1540.232832][T23769] ____sys_sendmsg+0x94c/0x9c0 [ 1540.232864][T23769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1540.232899][T23769] ? import_iovec+0x73/0xa0 [ 1540.232937][T23769] ___sys_sendmsg+0x2a5/0x360 [ 1540.232967][T23769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1540.233029][T23769] ? __fget_files+0x2a/0x420 [ 1540.233061][T23769] ? __fget_files+0x3a6/0x420 [ 1540.233101][T23769] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1540.233129][T23769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1540.233164][T23769] ? __pfx_ksys_write+0x10/0x10 [ 1540.233210][T23769] do_syscall_64+0x14d/0xf80 [ 1540.233245][T23769] ? trace_irq_disable+0x3b/0x150 [ 1540.233273][T23769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.233297][T23769] ? clear_bhb_loop+0x40/0x90 [ 1540.233326][T23769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.233350][T23769] RIP: 0033:0x7f15c118c799 [ 1540.233372][T23769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.233392][T23769] RSP: 002b:00007f15bf3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.233416][T23769] RAX: ffffffffffffffda RBX: 00007f15c1405fa0 RCX: 00007f15c118c799 [ 1540.233433][T23769] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1540.233448][T23769] RBP: 00007f15bf3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.233462][T23769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.233476][T23769] R13: 00007f15c1406038 R14: 00007f15c1405fa0 R15: 00007ffd9a9ba518 [ 1540.233513][T23769] [ 1540.557010][T19862] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1540.643356][T23682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.643490][T23682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.643788][T23682] bridge_slave_0: entered allmulticast mode [ 1540.675780][T23682] bridge_slave_0: entered promiscuous mode [ 1540.721830][T23682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.722094][T23682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.722458][T23682] bridge_slave_1: entered allmulticast mode [ 1540.754561][T19862] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1540.754611][T19862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.754626][T23682] bridge_slave_1: entered promiscuous mode [ 1540.754639][T19862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.754664][T19862] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1540.755874][T19862] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1540.755904][T19862] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1540.755936][T19862] usb 9-1: Manufacturer: syz [ 1540.822694][T19862] usb 9-1: config 0 descriptor?? [ 1541.246803][T19860] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1541.295848][T19862] appleir 0003:05AC:8243.0021: item fetching failed at offset 0/1 [ 1541.296614][T19862] appleir 0003:05AC:8243.0021: parse failed [ 1541.304677][T19862] appleir 0003:05AC:8243.0021: probe with driver appleir failed with error -22 [ 1541.406839][T19860] usb 8-1: Using ep0 maxpacket: 8 [ 1541.409268][T19860] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 1541.409295][T19860] usb 8-1: config 0 has no interface number 0 [ 1541.409337][T19860] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1541.409361][T19860] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1541.409390][T19860] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1541.409416][T19860] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1541.409443][T19860] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1541.412138][T19860] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1541.412169][T19860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.412192][T19860] usb 8-1: Product: syz [ 1541.412207][T19860] usb 8-1: Manufacturer: syz [ 1541.412223][T19860] usb 8-1: SerialNumber: syz [ 1541.533272][T19860] usb 8-1: config 0 descriptor?? [ 1541.589502][T10643] usb 9-1: USB disconnect, device number 30 [ 1541.757316][ T5803] Bluetooth: hci0: command tx timeout [ 1541.795105][T23781] netlink: 'syz.0.5876': attribute type 10 has an invalid length. [ 1541.869036][T23780] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1541.869132][T23780] overlayfs: failed to set xattr on upper [ 1541.869143][T23780] overlayfs: ...falling back to redirect_dir=nofollow. [ 1541.869153][T23780] overlayfs: ...falling back to index=off. [ 1541.869163][T23780] overlayfs: ...falling back to uuid=null. [ 1541.869185][T23780] overlayfs: maximum fs stacking depth exceeded [ 1541.897292][T23782] netlink: 'syz.0.5876': attribute type 10 has an invalid length. [ 1542.122591][T23781] team0: Port device dummy0 added [ 1542.238657][T19860] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1542.268356][T19860] usb 8-1: USB disconnect, device number 65 [ 1543.060895][T23782] team0: Port device dummy0 removed [ 1543.065011][T23782] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1543.170617][T23682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.220625][T23682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.671871][ T3530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.801003][T23682] team0: Port device team_slave_0 added [ 1543.826104][T23682] team0: Port device team_slave_1 added [ 1544.286365][ T3530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.361925][T23682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.361945][T23682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.361976][T23682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.396034][T23682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.396054][T23682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.396086][T23682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.004719][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.016466][ T1323] lec:lec_start_xmit: lec0:No lecd attached [ 1546.197157][ T37] audit: type=1326 audit(1562.293:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23823 comm="syz.7.5888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c118c799 code=0x7ffc0000 [ 1546.197228][ T37] audit: type=1326 audit(1562.303:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23823 comm="syz.7.5888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c118c799 code=0x7ffc0000 [ 1546.201539][ T37] audit: type=1326 audit(1562.303:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23823 comm="syz.7.5888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f15c118c799 code=0x7ffc0000 [ 1546.201581][ T37] audit: type=1326 audit(1562.303:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23823 comm="syz.7.5888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c118c799 code=0x7ffc0000 [ 1546.201617][ T37] audit: type=1326 audit(1562.303:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23823 comm="syz.7.5888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c118c799 code=0x7ffc0000 [ 1546.331465][ T3530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.782022][ T3530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.180584][T23682] hsr_slave_0: entered promiscuous mode [ 1547.182089][T23682] hsr_slave_1: entered promiscuous mode [ 1547.183421][T23682] debugfs: 'hsr0' already exists in 'hsr' [ 1547.183449][T23682] Cannot create hsr debugfs directory [ 1549.665222][T23865] tmpfs: Bad value for 'mpol' [ 1550.379971][T23870] FAULT_INJECTION: forcing a failure. [ 1550.379971][T23870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1550.380013][T23870] CPU: 0 UID: 0 PID: 23870 Comm: syz.7.5898 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1550.380045][T23870] Tainted: [L]=SOFTLOCKUP [ 1550.380062][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1550.380078][T23870] Call Trace: [ 1550.380087][T23870] [ 1550.380098][T23870] dump_stack_lvl+0xe8/0x150 [ 1550.380139][T23870] should_fail_ex+0x46b/0x600 [ 1550.380176][T23870] prepare_alloc_pages+0x22a/0x6b0 [ 1550.380211][T23870] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1550.380242][T23870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1550.380274][T23870] ? __pfx_policy_nodemask+0x10/0x10 [ 1550.380302][T23870] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1550.380344][T23870] alloc_pages_bulk_noprof+0x5f1/0x7d0 [ 1550.380376][T23870] ? alloc_pages_noprof+0xe3/0x1e0 [ 1550.380405][T23870] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1550.380439][T23870] ? rt_spin_unlock+0x160/0x200 [ 1550.380472][T23870] alloc_vmap_area+0xd73/0x14b0 [ 1550.380522][T23870] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1550.380557][T23870] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1550.380596][T23870] ? __get_vm_area_node+0x171/0x350 [ 1550.380628][T23870] ? bpf_check+0x1ae/0x1ce10 [ 1550.380654][T23870] __get_vm_area_node+0x226/0x350 [ 1550.380696][T23870] __vmalloc_node_range_noprof+0x372/0x1730 [ 1550.380733][T23870] ? bpf_check+0x1ae/0x1ce10 [ 1550.380760][T23870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1550.380789][T23870] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 1550.380909][T23870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1550.380944][T23870] ? rcu_is_watching+0x15/0xb0 [ 1550.380970][T23870] ? trace_kmalloc+0x2a/0x110 [ 1550.381008][T23870] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 1550.381031][T23870] ? bpf_check+0x1ae/0x1ce10 [ 1550.381062][T23870] vzalloc_noprof+0xb2/0xe0 [ 1550.381096][T23870] ? bpf_check+0x1ae/0x1ce10 [ 1550.381121][T23870] bpf_check+0x1ae/0x1ce10 [ 1550.381152][T23870] ? try_to_take_rt_mutex+0x840/0xb00 [ 1550.381194][T23870] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1550.381230][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.381256][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.381297][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.381325][T23870] ? css_rstat_updated+0x23a/0x530 [ 1550.381360][T23870] ? __pfx_css_rstat_updated+0x10/0x10 [ 1550.381399][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.381433][T23870] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 1550.381460][T23870] ? __pfx_bpf_check+0x10/0x10 [ 1550.381480][T23870] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 1550.381519][T23870] ? ktime_get_with_offset+0x93/0x2a0 [ 1550.381551][T23870] ? ktime_get_with_offset+0x93/0x2a0 [ 1550.381587][T23870] ? __asan_memset+0x22/0x50 [ 1550.381616][T23870] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1550.381641][T23870] ? security_bpf_prog_load+0x125/0x3c0 [ 1550.381674][T23870] bpf_prog_load+0x1484/0x1ae0 [ 1550.381720][T23870] ? __pfx_bpf_prog_load+0x10/0x10 [ 1550.381774][T23870] ? bpf_lsm_bpf+0x9/0x20 [ 1550.381797][T23870] ? security_bpf+0x7e/0x2d0 [ 1550.381825][T23870] __sys_bpf+0x618/0x950 [ 1550.381857][T23870] ? __pfx___sys_bpf+0x10/0x10 [ 1550.381884][T23870] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1550.381931][T23870] ? ksys_write+0x248/0x270 [ 1550.381969][T23870] ? __pfx_ksys_write+0x10/0x10 [ 1550.382013][T23870] __x64_sys_bpf+0x7c/0x90 [ 1550.382040][T23870] do_syscall_64+0x14d/0xf80 [ 1550.382084][T23870] ? trace_irq_disable+0x3b/0x150 [ 1550.382112][T23870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.382137][T23870] ? clear_bhb_loop+0x40/0x90 [ 1550.382166][T23870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.382191][T23870] RIP: 0033:0x7f15c118c799 [ 1550.382214][T23870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.382234][T23870] RSP: 002b:00007f15bf3de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1550.382259][T23870] RAX: ffffffffffffffda RBX: 00007f15c1405fa0 RCX: 00007f15c118c799 [ 1550.382277][T23870] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1550.382292][T23870] RBP: 00007f15bf3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.382307][T23870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1550.382321][T23870] R13: 00007f15c1406038 R14: 00007f15c1405fa0 R15: 00007ffd9a9ba518 [ 1550.382356][T23870] [ 1550.382486][T23870] syz.7.5898: vmalloc error: size 384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1550.382561][T23870] CPU: 0 UID: 0 PID: 23870 Comm: syz.7.5898 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1550.382592][T23870] Tainted: [L]=SOFTLOCKUP [ 1550.382600][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1550.382614][T23870] Call Trace: [ 1550.382623][T23870] [ 1550.382632][T23870] dump_stack_lvl+0xe8/0x150 [ 1550.382667][T23870] warn_alloc+0x263/0x3e0 [ 1550.382692][T23870] ? kasan_quarantine_put+0xbb/0x1f0 [ 1550.382728][T23870] ? __pfx_warn_alloc+0x10/0x10 [ 1550.382751][T23870] ? __get_vm_area_node+0x23f/0x350 [ 1550.382782][T23870] ? __get_vm_area_node+0x171/0x350 [ 1550.382848][T23870] ? bpf_check+0x1ae/0x1ce10 [ 1550.382874][T23870] ? __get_vm_area_node+0x23f/0x350 [ 1550.382914][T23870] __vmalloc_node_range_noprof+0x397/0x1730 [ 1550.382956][T23870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1550.382985][T23870] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 1550.383034][T23870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1550.383075][T23870] ? rcu_is_watching+0x15/0xb0 [ 1550.383101][T23870] ? trace_kmalloc+0x2a/0x110 [ 1550.383138][T23870] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 1550.383163][T23870] ? bpf_check+0x1ae/0x1ce10 [ 1550.383187][T23870] vzalloc_noprof+0xb2/0xe0 [ 1550.383221][T23870] ? bpf_check+0x1ae/0x1ce10 [ 1550.383246][T23870] bpf_check+0x1ae/0x1ce10 [ 1550.383276][T23870] ? try_to_take_rt_mutex+0x840/0xb00 [ 1550.383318][T23870] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1550.383352][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.383379][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.383415][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.383444][T23870] ? css_rstat_updated+0x23a/0x530 [ 1550.383479][T23870] ? __pfx_css_rstat_updated+0x10/0x10 [ 1550.383518][T23870] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.383553][T23870] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 1550.383580][T23870] ? __pfx_bpf_check+0x10/0x10 [ 1550.383604][T23870] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 1550.383646][T23870] ? ktime_get_with_offset+0x93/0x2a0 [ 1550.383680][T23870] ? ktime_get_with_offset+0x93/0x2a0 [ 1550.383717][T23870] ? __asan_memset+0x22/0x50 [ 1550.383747][T23870] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1550.383771][T23870] ? security_bpf_prog_load+0x125/0x3c0 [ 1550.383802][T23870] bpf_prog_load+0x1484/0x1ae0 [ 1550.383847][T23870] ? __pfx_bpf_prog_load+0x10/0x10 [ 1550.383901][T23870] ? bpf_lsm_bpf+0x9/0x20 [ 1550.383924][T23870] ? security_bpf+0x7e/0x2d0 [ 1550.383951][T23870] __sys_bpf+0x618/0x950 [ 1550.383982][T23870] ? __pfx___sys_bpf+0x10/0x10 [ 1550.384008][T23870] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1550.384062][T23870] ? ksys_write+0x248/0x270 [ 1550.384100][T23870] ? __pfx_ksys_write+0x10/0x10 [ 1550.384143][T23870] __x64_sys_bpf+0x7c/0x90 [ 1550.384171][T23870] do_syscall_64+0x14d/0xf80 [ 1550.384206][T23870] ? trace_irq_disable+0x3b/0x150 [ 1550.384233][T23870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.384257][T23870] ? clear_bhb_loop+0x40/0x90 [ 1550.384287][T23870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.384311][T23870] RIP: 0033:0x7f15c118c799 [ 1550.384333][T23870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.384354][T23870] RSP: 002b:00007f15bf3de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1550.384379][T23870] RAX: ffffffffffffffda RBX: 00007f15c1405fa0 RCX: 00007f15c118c799 [ 1550.384396][T23870] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1550.384412][T23870] RBP: 00007f15bf3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.384426][T23870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1550.384439][T23870] R13: 00007f15c1406038 R14: 00007f15c1405fa0 R15: 00007ffd9a9ba518 [ 1550.384474][T23870] [ 1550.384484][T23870] Mem-Info: [ 1550.384494][T23870] active_anon:278 inactive_anon:8822 isolated_anon:0 [ 1550.384494][T23870] active_file:27520 inactive_file:38930 isolated_file:0 [ 1550.384494][T23870] unevictable:768 dirty:161 writeback:0 [ 1550.384494][T23870] slab_reclaimable:13155 slab_unreclaimable:111257 [ 1550.384494][T23870] mapped:37515 shmem:1373 pagetables:1749 [ 1550.384494][T23870] sec_pagetables:0 bounce:0 [ 1550.384494][T23870] kernel_misc_reclaimable:0 [ 1550.384494][T23870] free:1262031 free_pcp:2174 free_cma:0 [ 1550.384554][T23870] Node 0 active_anon:1112kB inactive_anon:35288kB active_file:109892kB inactive_file:155720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150060kB dirty:644kB writeback:0kB shmem:3956kB kernel_stack:14732kB pagetables:6848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1550.384606][T23870] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1550.384656][T23870] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1550.384722][T23870] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1550.384763][T23870] Node 0 DMA32 free:1092492kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1112kB inactive_anon:35288kB active_file:109892kB inactive_file:155720kB unevictable:1536kB writepending:644kB zspages:0kB present:3129332kB managed:2566508kB mlocked:0kB bounce:0kB free_pcp:8696kB local_pcp:2800kB free_cma:0kB [ 1550.384835][T23870] lowmem_reserve[]: 0 0 0 0 0 [ 1550.384866][T23870] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1550.384929][T23870] lowmem_reserve[]: 0 0 0 0 0 [ 1550.384965][T23870] Node 1 Normal free:3940272kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1550.385032][T23870] lowmem_reserve[]: 0 0 0 0 0 [ 1550.385078][T23870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1550.385205][T23870] Node 0 DMA32: 2203*4kB (UME) 4541*8kB (UME) 2939*16kB (UME) 943*32kB (UME) 768*64kB (UME) 551*128kB (UME) 250*256kB (UM) 150*512kB (UME) 55*1024kB (UM) 17*2048kB (UME) 151*4096kB (UM) = 1092452kB [ 1550.385375][T23870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1550.385484][T23870] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 11*16kB (UM) 11*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (M) 960*4096kB (UM) = 3940272kB [ 1550.385656][T23870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.385676][T23870] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1550.385695][T23870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1550.385716][T23870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1550.385735][T23870] 67819 total pagecache pages [ 1550.385744][T23870] 0 pages in swap cache [ 1550.385753][T23870] Free swap = 124996kB [ 1550.385763][T23870] Total swap = 124996kB [ 1550.385773][T23870] 2097051 pages RAM [ 1550.385781][T23870] 0 pages HighMem/MovableOnly [ 1550.385790][T23870] 423704 pages reserved [ 1550.385798][T23870] 0 pages cma reserved [ 1551.016986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1551.017341][ C0] lec:lec_tx_timeout: lec0 [ 1551.018067][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1551.858796][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1552.676071][T19860] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1552.800050][ T3530] bridge_slave_1: left allmulticast mode [ 1552.800082][ T3530] bridge_slave_1: left promiscuous mode [ 1552.800326][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.850326][T19860] usb 9-1: Using ep0 maxpacket: 8 [ 1552.856507][T19860] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1552.875989][T19860] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1552.901482][T19860] usb 9-1: string descriptor 0 read error: -22 [ 1552.901590][T19860] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1552.901618][T19860] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1552.971990][T19860] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1553.014804][T19860] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1553.015208][T19860] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1553.015264][T19860] usb 9-1: media controller created [ 1553.081866][T19860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1553.229457][ T3530] bridge_slave_0: left allmulticast mode [ 1553.231141][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.646979][ T5881] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1553.756105][T19860] zl10353_read_register: readreg error (reg=127, ret==0) [ 1553.852260][ T5881] usb 8-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 1553.852307][ T5881] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1553.895946][ T5881] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1553.895978][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.896002][ T5881] usb 8-1: Product: syz [ 1553.896017][ T5881] usb 8-1: Manufacturer: syz [ 1553.896033][ T5881] usb 8-1: SerialNumber: syz [ 1554.021298][T23890] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1554.067476][T19860] usb 9-1: USB disconnect, device number 31 [ 1554.352052][T23890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.354664][T23890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.364685][ T5881] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1556.077671][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1556.077709][ C0] lec:lec_tx_timeout: lec0 [ 1556.078456][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1556.228411][ T5881] usb 8-1: USB disconnect, device number 66 [ 1558.010943][ T3530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1558.102658][ T3530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1558.141452][ T3530] bond0 (unregistering): Released all slaves [ 1558.179801][ T3530] bond1 (unregistering): Released all slaves [ 1558.195506][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5909'. [ 1558.257605][ T3530] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 1558.324946][ T3530] bond2 (unregistering): Released all slaves [ 1558.417637][ T3530] bond3 (unregistering): (slave vcan2): Releasing backup interface [ 1558.417670][ T3530] vcan2: left promiscuous mode [ 1558.463321][ T3530] bond3 (unregistering): Released all slaves [ 1558.746890][T19860] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1558.989869][T19860] usb 9-1: device descriptor read/64, error -71 [ 1559.014989][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5917'. [ 1559.196390][T23928] veth2: entered allmulticast mode [ 1559.250350][T19860] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1559.367852][T23936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5919'. [ 1559.377594][T19860] usb 9-1: device descriptor read/64, error -71 [ 1559.457728][T23928] veth3: entered promiscuous mode [ 1559.457756][T23928] veth3: entered allmulticast mode [ 1559.487436][T19860] usb usb9-port1: attempt power cycle [ 1559.837358][T19860] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1559.857697][T19860] usb 9-1: device descriptor read/8, error -71 [ 1559.992558][ T37] audit: type=1326 audit(1576.093:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23942 comm="syz.7.5922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15c118c799 code=0x0 [ 1560.098647][T19860] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1560.117077][T19862] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1560.117892][T19860] usb 9-1: device descriptor read/8, error -71 [ 1560.227099][T19860] usb usb9-port1: unable to enumerate USB device [ 1560.277700][T19862] usb 4-1: Using ep0 maxpacket: 32 [ 1560.294116][T19862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.294181][T19862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1560.294208][T19862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1560.294233][T19862] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1560.294261][T19862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1560.294289][T19862] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1560.373496][T19862] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1560.373520][T19862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1560.373536][T19862] usb 4-1: Product: syz [ 1560.373547][T19862] usb 4-1: Manufacturer: syz [ 1560.373558][T19862] usb 4-1: SerialNumber: syz [ 1560.474263][T19862] usb 4-1: config 0 descriptor?? [ 1560.494244][T19862] usb 4-1: no audio or video endpoints found [ 1560.703837][T19862] usb 4-1: USB disconnect, device number 20 [ 1561.092444][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1561.092482][ C0] lec:lec_tx_timeout: lec0 [ 1561.092778][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1561.543321][T23976] Bluetooth: MGMT ver 1.23 [ 1561.566812][T23976] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1561.778774][T23981] program syz.3.5931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1562.107210][ T3530] hsr_slave_0: left promiscuous mode [ 1562.134644][ T3530] hsr_slave_1: left promiscuous mode [ 1562.281435][ T3530] veth1_macvtap: left promiscuous mode [ 1562.301089][ T3530] veth0_macvtap: left promiscuous mode [ 1562.301547][ T3530] veth1_vlan: left promiscuous mode [ 1563.190132][T19862] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1563.366987][T19862] usb 8-1: Using ep0 maxpacket: 8 [ 1563.373195][T19862] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 1563.373227][T19862] usb 8-1: config 0 has no interface number 0 [ 1563.373275][T19862] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1563.373301][T19862] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1563.373333][T19862] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1563.373362][T19862] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1563.373402][T19862] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1563.490096][T19862] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1563.490130][T19862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.490154][T19862] usb 8-1: Product: syz [ 1563.490171][T19862] usb 8-1: Manufacturer: syz [ 1563.490188][T19862] usb 8-1: SerialNumber: syz [ 1563.550178][T19862] usb 8-1: config 0 descriptor?? [ 1563.947388][T19862] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1563.972101][T19862] usb 8-1: USB disconnect, device number 67 [ 1564.193555][ T3530] pim6reg (unregistering): left allmulticast mode [ 1564.580577][T24024] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5942'. [ 1564.580621][T24024] netlink: 'syz.0.5942': attribute type 1 has an invalid length. [ 1564.580638][T24024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5942'. [ 1565.066583][T24026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5943'. [ 1565.066616][T24026] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5943'. [ 1565.476160][ T3530] team0 (unregistering): Port device team_slave_1 removed [ 1565.547627][ T3530] team0 (unregistering): Port device team_slave_0 removed [ 1566.623285][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 1566.623324][ C0] lec:lec_tx_timeout: lec0 [ 1566.625848][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1566.713602][T24040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5948'. [ 1567.042667][T24043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5950'. [ 1567.427846][T24041] delete_channel: no stack [ 1567.461387][T23682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1568.175321][T23682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1568.389047][T23682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1568.508023][T23682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1569.766868][T19861] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1569.906876][T19861] usb 4-1: device descriptor read/64, error -71 [ 1570.153765][T19861] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1570.276842][T19861] usb 4-1: device descriptor read/64, error -71 [ 1570.366320][T23682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.394611][T19861] usb usb4-port1: attempt power cycle [ 1570.542893][T23682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.669484][T22432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.669636][T22432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.745180][T22432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.745274][T22432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.752217][T19861] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1570.779243][T19861] usb 4-1: device descriptor read/8, error -71 [ 1571.018559][T19861] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1571.055604][T19861] usb 4-1: device descriptor read/8, error -71 [ 1571.157244][T19861] usb usb4-port1: unable to enumerate USB device [ 1571.537905][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5961'. [ 1571.737581][T24119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5963'. [ 1572.551349][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 1572.551439][ C0] lec:lec_tx_timeout: lec0 [ 1572.568374][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1572.833900][T24129] FAULT_INJECTION: forcing a failure. [ 1572.833900][T24129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.833941][T24129] CPU: 0 UID: 0 PID: 24129 Comm: syz.8.5967 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1572.833975][T24129] Tainted: [L]=SOFTLOCKUP [ 1572.833984][T24129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1572.833999][T24129] Call Trace: [ 1572.834008][T24129] [ 1572.834019][T24129] dump_stack_lvl+0xe8/0x150 [ 1572.834067][T24129] should_fail_ex+0x46b/0x600 [ 1572.834103][T24129] _copy_from_user+0x2d/0xb0 [ 1572.834138][T24129] ___sys_sendmsg+0x1c6/0x360 [ 1572.834170][T24129] ? __pfx____sys_sendmsg+0x10/0x10 [ 1572.834233][T24129] ? __fget_files+0x2a/0x420 [ 1572.834262][T24129] ? __fget_files+0x3a6/0x420 [ 1572.834303][T24129] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1572.834331][T24129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1572.834366][T24129] ? __pfx_ksys_write+0x10/0x10 [ 1572.834415][T24129] do_syscall_64+0x14d/0xf80 [ 1572.834450][T24129] ? trace_irq_disable+0x3b/0x150 [ 1572.834478][T24129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.834502][T24129] ? clear_bhb_loop+0x40/0x90 [ 1572.834532][T24129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.834555][T24129] RIP: 0033:0x7ff224b2c799 [ 1572.834577][T24129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.834598][T24129] RSP: 002b:00007ff222d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1572.834623][T24129] RAX: ffffffffffffffda RBX: 00007ff224da5fa0 RCX: 00007ff224b2c799 [ 1572.834640][T24129] RDX: 0000000020048004 RSI: 0000200000000000 RDI: 0000000000000004 [ 1572.834656][T24129] RBP: 00007ff222d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.834670][T24129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.834684][T24129] R13: 00007ff224da6038 R14: 00007ff224da5fa0 R15: 00007ffdf841e038 [ 1572.834720][T24129] [ 1573.181511][T23682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.334925][T24132] FAULT_INJECTION: forcing a failure. [ 1573.334925][T24132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.334964][T24132] CPU: 0 UID: 0 PID: 24132 Comm: syz.8.5969 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1573.334995][T24132] Tainted: [L]=SOFTLOCKUP [ 1573.335013][T24132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1573.335027][T24132] Call Trace: [ 1573.335037][T24132] [ 1573.335047][T24132] dump_stack_lvl+0xe8/0x150 [ 1573.335087][T24132] should_fail_ex+0x46b/0x600 [ 1573.335123][T24132] _copy_to_user+0x31/0xb0 [ 1573.335159][T24132] simple_read_from_buffer+0xe1/0x170 [ 1573.335194][T24132] proc_fail_nth_read+0x1be/0x230 [ 1573.335227][T24132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1573.335259][T24132] ? rw_verify_area+0x2ac/0x4e0 [ 1573.335293][T24132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1573.335324][T24132] vfs_read+0x212/0xa80 [ 1573.335366][T24132] ? __pfx_vfs_read+0x10/0x10 [ 1573.335403][T24132] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1573.335441][T24132] ? lockdep_hardirqs_on+0x7a/0x110 [ 1573.335477][T24132] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1573.335512][T24132] ? mutex_lock_nested+0x152/0x1d0 [ 1573.335541][T24132] ? fdget_pos+0x252/0x320 [ 1573.335579][T24132] ksys_read+0x156/0x270 [ 1573.335615][T24132] ? __pfx_ksys_read+0x10/0x10 [ 1573.335659][T24132] do_syscall_64+0x14d/0xf80 [ 1573.335693][T24132] ? trace_irq_disable+0x3b/0x150 [ 1573.335721][T24132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.335745][T24132] ? clear_bhb_loop+0x40/0x90 [ 1573.335774][T24132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.335798][T24132] RIP: 0033:0x7ff224aecfce [ 1573.335820][T24132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1573.335840][T24132] RSP: 002b:00007ff222d7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1573.335864][T24132] RAX: ffffffffffffffda RBX: 00007ff222d7e6c0 RCX: 00007ff224aecfce [ 1573.335882][T24132] RDX: 000000000000000f RSI: 00007ff222d7e0a0 RDI: 0000000000000004 [ 1573.335896][T24132] RBP: 00007ff222d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.335910][T24132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.335924][T24132] R13: 00007ff224da6038 R14: 00007ff224da5fa0 R15: 00007ffdf841e038 [ 1573.335960][T24132] [ 1574.266783][ T5881] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1574.414675][ T5881] usb 9-1: device descriptor read/64, error -71 [ 1574.646830][ T5881] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1574.776864][ T5881] usb 9-1: device descriptor read/64, error -71 [ 1574.898216][ T5881] usb usb9-port1: attempt power cycle [ 1574.928802][T23682] veth0_vlan: entered promiscuous mode [ 1574.957408][T23682] veth1_vlan: entered promiscuous mode [ 1575.102930][T23682] veth0_macvtap: entered promiscuous mode [ 1575.120357][T23682] veth1_macvtap: entered promiscuous mode [ 1575.231381][T23682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.266872][ T5881] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1575.288620][ T5881] usb 9-1: device descriptor read/8, error -71 [ 1575.290549][T23682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.416967][T23747] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.419576][T23747] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.419956][T23747] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.419986][T23747] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.527025][ T5881] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1575.548166][ T5881] usb 9-1: device descriptor read/8, error -71 [ 1575.657750][ T5881] usb usb9-port1: unable to enumerate USB device [ 1575.674662][T24164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5975'. [ 1577.157999][T24188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5981'. [ 1577.299909][T24188] veth4: entered allmulticast mode [ 1577.480471][T24188] veth5: entered promiscuous mode [ 1577.480492][T24188] veth5: entered allmulticast mode [ 1577.618998][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.619023][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.787157][T23747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.787182][T23747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.956303][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5984'. [ 1577.996785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1577.996820][ C0] lec:lec_tx_timeout: lec0 [ 1577.997078][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1578.866499][T24218] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5989'. [ 1578.866568][T24218] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5989'. [ 1579.302085][T24226] netlink: 'syz.7.5992': attribute type 3 has an invalid length. [ 1579.326856][ T1229] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1579.583707][T24236] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1579.583757][T24236] netlink: 'syz.3.5996': attribute type 1 has an invalid length. [ 1579.583794][T24236] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5996'. [ 1579.934854][ T1229] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1579.934889][ T1229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.934912][ T1229] usb 9-1: Product: syz [ 1579.934929][ T1229] usb 9-1: Manufacturer: syz [ 1579.934944][ T1229] usb 9-1: SerialNumber: syz [ 1579.991524][ T1229] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1580.144369][T19860] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1580.939448][ T36] usb 9-1: USB disconnect, device number 40 [ 1581.058424][T24249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6001'. [ 1581.058491][T24249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6001'. [ 1581.310758][T24253] loop5: detected capacity change from 0 to 7 [ 1581.342694][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1581.439521][T19860] usb 9-1: Service connection timeout for: 256 [ 1581.439548][T19860] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1581.440225][T19860] ath9k_htc: Failed to initialize the device [ 1581.462437][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1581.462556][ C1] buffer_io_error: 4 callbacks suppressed [ 1581.462589][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1581.463565][ T36] usb 9-1: ath9k_htc: USB layer deinitialized [ 1581.556908][ T1229] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1581.607580][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1581.607621][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1581.683588][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1581.683634][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1581.712641][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1581.712681][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1581.715087][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1581.715120][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1581.752515][ T1229] usb 8-1: Using ep0 maxpacket: 32 [ 1581.762837][ T1229] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1581.762869][ T1229] usb 8-1: config 0 has no interface number 0 [ 1581.783512][T24257] binder: 24256:24257 unknown command 0 [ 1581.783602][T24257] binder: 24256:24257 ioctl c0306201 200000000080 returned -22 [ 1581.789367][ T1229] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1581.789400][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.789424][ T1229] usb 8-1: Product: syz [ 1581.789440][ T1229] usb 8-1: Manufacturer: syz [ 1581.789455][ T1229] usb 8-1: SerialNumber: syz [ 1581.849031][ T1229] usb 8-1: config 0 descriptor?? [ 1581.859951][ T1229] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1582.186073][ T1229] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1582.268775][ T1229] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1582.311748][T24251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.327931][T24251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.697795][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1582.699263][ T36] usb 8-1: USB disconnect, device number 68 [ 1582.737835][ T36] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1583.262258][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1583.265900][ C0] lec:lec_tx_timeout: lec0 [ 1583.268189][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1583.727808][ T36] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1583.728880][ T36] quatech2 8-1:0.51: device disconnected [ 1584.647413][T24281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6013'. [ 1584.647480][T24281] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6013'. [ 1584.973108][T24292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 1584.973173][T24292] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6011'. [ 1586.178527][T24305] batman_adv: batadv0: Adding interface: macvtap1 [ 1586.178546][T24305] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.178577][T24305] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1586.243197][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6018'. [ 1588.188735][ T5881] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1588.416922][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 1588.419596][ T5881] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1588.419629][ T5881] usb 4-1: config 0 has no interface number 0 [ 1588.419720][ T5881] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1588.419748][ T5881] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1588.419782][ T5881] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1588.419818][ T5881] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1588.419848][ T5881] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1588.539367][ T5881] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1588.539425][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.539448][ T5881] usb 4-1: Product: syz [ 1588.539463][ T5881] usb 4-1: Manufacturer: syz [ 1588.539478][ T5881] usb 4-1: SerialNumber: syz [ 1588.539923][T24340] æÿîÿ: entered promiscuous mode [ 1588.589147][ T5881] usb 4-1: config 0 descriptor?? [ 1588.827218][ T5881] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1588.878277][ T5881] usb 4-1: USB disconnect, device number 25 [ 1588.942367][T24346] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6030'. [ 1589.550303][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6280 ms [ 1589.550340][ C0] lec:lec_tx_timeout: lec0 [ 1589.551675][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1589.632951][T24353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.727435][ T5803] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1590.318678][T24360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1590.497216][T24365] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6036'. [ 1590.497243][T24365] netlink: 'syz.7.6036': attribute type 1 has an invalid length. [ 1590.497271][T24365] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6036'. [ 1591.319690][T24375] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6039'. [ 1592.267026][T19861] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1592.439316][T19861] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.439369][T19861] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1592.486043][T19861] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1592.486100][T19861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1592.486146][T19861] usb 9-1: SerialNumber: syz [ 1592.672678][T22487] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1592.822872][T19861] usb 9-1: 0:2 : does not exist [ 1592.841545][ T1229] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1592.854442][T22487] usb 4-1: Using ep0 maxpacket: 8 [ 1592.869807][T22487] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 1592.869839][T22487] usb 4-1: config 0 has no interface number 0 [ 1592.872050][T22487] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1592.872079][T22487] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1592.872117][T22487] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1592.872146][T22487] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1592.872176][T22487] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1592.874888][T22487] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1592.874919][T22487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.874942][T22487] usb 4-1: Product: syz [ 1592.874959][T22487] usb 4-1: Manufacturer: syz [ 1592.874975][T22487] usb 4-1: SerialNumber: syz [ 1592.990450][ T1229] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1592.993060][ T1229] usb 8-1: string descriptor 0 read error: -22 [ 1592.993214][ T1229] usb 8-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1592.993241][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.042147][T22487] usb 4-1: config 0 descriptor?? [ 1593.055945][T19861] usb 9-1: USB disconnect, device number 41 [ 1593.122719][ T1229] usb 8-1: 1:1 : bogus bTerminalLink 8 [ 1593.175299][T17182] udevd[17182]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1593.281135][T22487] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1593.289481][ T1229] usb 8-1: 3:0: failed to get current value for ch 0 (-71) [ 1593.294726][ T1229] usb 8-1: unit 13 not found! [ 1593.349794][T22487] usb 4-1: USB disconnect, device number 26 [ 1593.580506][ T1229] usb 8-1: USB disconnect, device number 69 [ 1595.376598][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 1595.376684][ C0] lec:lec_tx_timeout: lec0 [ 1595.377782][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1595.725348][T24415] netlink: 'syz.3.6054': attribute type 1 has an invalid length. [ 1595.976801][ T1229] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1596.130854][ T1229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.130886][ T1229] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1596.130943][ T1229] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1596.130970][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.181238][ T1229] usb 4-1: config 0 descriptor?? [ 1596.207179][ T1229] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1596.207232][ T1229] dvb-usb: bulk message failed: -22 (3/0) [ 1596.231933][ T1229] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1596.248623][ T1229] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1596.248698][ T1229] usb 4-1: media controller created [ 1596.250688][ T1229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1596.290310][ T1229] dvb-usb: bulk message failed: -22 (6/0) [ 1596.290398][ T1229] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1596.319092][ T1229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 1596.338653][ T1229] dvb-usb: schedule remote query interval to 150 msecs. [ 1596.338702][ T1229] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1596.414741][ T36] usb 4-1: USB disconnect, device number 27 [ 1596.641039][ T36] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1596.823051][T24430] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6059'. [ 1596.852940][T24430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1596.930100][ T5881] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1597.080596][T24436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6060'. [ 1597.119252][ T5881] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1597.129107][ T5881] usb 9-1: string descriptor 0 read error: -22 [ 1597.129276][ T5881] usb 9-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.40 [ 1597.129304][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.089718][ T5881] usbhid 9-1:1.0: can't add hid device: -71 [ 1598.089860][ T5881] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1598.127443][ T5881] usb 9-1: USB disconnect, device number 42 [ 1600.082294][T24466] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1600.506820][ T5881] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1600.576831][T23894] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1600.718744][ T5881] usb 9-1: config 0 has an invalid interface number: 82 but max is 0 [ 1600.718776][ T5881] usb 9-1: config 0 has no interface number 0 [ 1600.718831][ T5881] usb 9-1: config 0 interface 82 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1600.718853][ T5881] usb 9-1: config 0 interface 82 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1600.768299][ T5881] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1600.768336][ T5881] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1600.768359][ T5881] usb 9-1: Manufacturer: syz [ 1600.778961][T23894] usb 8-1: Using ep0 maxpacket: 16 [ 1600.812778][ T5881] usb 9-1: config 0 descriptor?? [ 1600.839013][T23894] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.839034][T23894] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1600.880949][T23894] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1600.880974][T23894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.880989][T23894] usb 8-1: Product: syz [ 1600.881000][T23894] usb 8-1: Manufacturer: syz [ 1600.881011][T23894] usb 8-1: SerialNumber: syz [ 1601.036718][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1601.036753][ C0] lec:lec_tx_timeout: lec0 [ 1601.036858][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1601.306536][T23894] usb 8-1: 0:2 : does not exist [ 1601.382036][T23894] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1601.520284][ T5881] usbhid 9-1:0.82: can't add hid device: -71 [ 1601.520379][ T5881] usbhid 9-1:0.82: probe with driver usbhid failed with error -71 [ 1601.548450][ T5881] usb 9-1: USB disconnect, device number 43 [ 1601.737731][T23894] usb 8-1: USB disconnect, device number 70 [ 1601.851996][T17182] udevd[17182]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1602.303603][T24488] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1602.864292][T24495] veth1: entered promiscuous mode [ 1602.864324][T24495] veth1: entered allmulticast mode [ 1603.104281][T24495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1603.346832][ T36] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1603.529787][ T36] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1603.534069][ T36] usb 8-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 1603.534107][ T36] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1603.550079][ T36] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1603.550156][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.550179][ T36] usb 8-1: Product: syz [ 1603.550196][ T36] usb 8-1: Manufacturer: syz [ 1603.550213][ T36] usb 8-1: SerialNumber: syz [ 1603.641937][ T36] usb 8-1: selecting invalid altsetting 1 [ 1603.642778][ T36] usb 8-1: unit 6 not found! [ 1603.661020][T24511] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6083'. [ 1603.737585][ T36] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1603.865367][T24505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.865938][T24505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.913617][T24517] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6086'. [ 1604.000081][T17182] udevd[17182]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1604.341160][T24526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6089'. [ 1605.401074][T24534] netlink: 120 bytes leftover after parsing attributes in process `syz.8.6092'. [ 1605.401093][T24534] netlink: 'syz.8.6092': attribute type 1 has an invalid length. [ 1605.401104][T24534] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6092'. [ 1605.699897][ T5881] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1605.866975][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 1605.869248][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.869276][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.869313][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1605.869332][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.885705][ T5881] usb 4-1: config 0 descriptor?? [ 1605.935199][ T5881] hub 4-1:0.0: USB hub found [ 1606.046860][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1606.046900][ C0] lec:lec_tx_timeout: lec0 [ 1606.047009][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1606.098602][T23894] usb 8-1: USB disconnect, device number 71 [ 1606.116791][ T5881] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1606.339492][ T5881] hid-generic 0003:046D:C31C.0022: item fetching failed at offset 0/1 [ 1606.340336][ T5881] hid-generic 0003:046D:C31C.0022: probe with driver hid-generic failed with error -22 [ 1606.531170][T24537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6093'. [ 1606.737277][T23894] usb 4-1: USB disconnect, device number 28 [ 1606.994719][T23295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1607.014017][T23295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1607.030826][T23295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1607.044733][T23295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1607.045540][T23295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1607.252514][T24550] vivid-007: disconnect [ 1607.444314][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.704218][T24547] wg1 speed is unknown, defaulting to 1000 [ 1608.142716][ T5881] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1608.372350][T24541] vivid-007: reconnect [ 1608.416788][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 1608.418994][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1608.419028][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1608.421677][ T5881] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1608.421708][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.421732][ T5881] usb 4-1: Product: syz [ 1608.421749][ T5881] usb 4-1: Manufacturer: syz [ 1608.421766][ T5881] usb 4-1: SerialNumber: syz [ 1608.503265][ T5881] usb 4-1: config 0 descriptor?? [ 1608.566274][ T5881] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1608.566387][ T5881] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1609.133447][T24547] chnl_net:caif_netlink_parms(): no params data found [ 1609.148870][ T5881] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1609.149484][ T5881] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1609.596794][T23295] Bluetooth: hci4: command tx timeout [ 1609.897461][ T5881] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1609.897516][ T5881] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1610.026810][ T1229] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1610.034760][T24547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.064524][T24547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.065151][T24547] bridge_slave_0: entered allmulticast mode [ 1610.088622][T24547] bridge_slave_0: entered promiscuous mode [ 1610.092375][T24547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.096852][ T5881] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1610.096950][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1610.105171][T24547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.112025][T24547] bridge_slave_1: entered allmulticast mode [ 1610.151348][T24547] bridge_slave_1: entered promiscuous mode [ 1610.216833][ T1229] usb 8-1: Using ep0 maxpacket: 32 [ 1610.221948][ T1229] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1610.224765][ T1229] usb 8-1: config 0 has an invalid interface number: 150 but max is 0 [ 1610.224869][ T1229] usb 8-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1610.224892][ T1229] usb 8-1: config 0 has no interface number 0 [ 1610.225189][ T1229] usb 8-1: config 0 interface 150 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1610.225224][ T1229] usb 8-1: config 0 interface 150 has no altsetting 0 [ 1610.298044][ T1229] usb 8-1: New USB device found, idVendor=19d2, idProduct=1276, bcdDevice=f3.80 [ 1610.298080][ T1229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.298093][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1610.298103][ T1229] usb 8-1: Product: syz [ 1610.298119][ T1229] usb 8-1: Manufacturer: syz [ 1610.298137][ T1229] usb 8-1: SerialNumber: syz [ 1610.298520][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1610.298949][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1610.299379][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1610.372223][ T1229] usb 8-1: config 0 descriptor?? [ 1610.423043][ T5881] usb 4-1: USB disconnect, device number 29 [ 1610.519965][T24547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.524478][T24547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.620887][ T1229] usb 8-1: USB disconnect, device number 72 [ 1610.740109][T24547] team0: Port device team_slave_0 added [ 1610.742744][T24547] team0: Port device team_slave_1 added [ 1610.828599][T24547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.828613][T24547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.828635][T24547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.841829][T24547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.841876][T24547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.841956][T24547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.056731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1611.056765][ C0] lec:lec_tx_timeout: lec0 [ 1611.056842][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1611.059760][T24588] FAULT_INJECTION: forcing a failure. [ 1611.059760][T24588] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.059798][T24588] CPU: 0 UID: 0 PID: 24588 Comm: syz.3.6108 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1611.059830][T24588] Tainted: [L]=SOFTLOCKUP [ 1611.059839][T24588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1611.059856][T24588] Call Trace: [ 1611.059866][T24588] [ 1611.059876][T24588] dump_stack_lvl+0xe8/0x150 [ 1611.059917][T24588] should_fail_ex+0x46b/0x600 [ 1611.059953][T24588] should_failslab+0xa8/0x100 [ 1611.059979][T24588] __kmalloc_noprof+0xdf/0x7b0 [ 1611.060015][T24588] ? security_msg_msg_alloc+0x45/0x310 [ 1611.060051][T24588] security_msg_msg_alloc+0x45/0x310 [ 1611.060084][T24588] load_msg+0x2ae/0x3b0 [ 1611.060121][T24588] do_mq_timedsend+0x3c3/0xaf0 [ 1611.060231][T24588] ? __pfx_do_mq_timedsend+0x10/0x10 [ 1611.060260][T24588] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1611.060308][T24588] __x64_sys_mq_timedsend+0x17a/0x220 [ 1611.060347][T24588] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 1611.060396][T24588] do_syscall_64+0x14d/0xf80 [ 1611.060431][T24588] ? trace_irq_disable+0x3b/0x150 [ 1611.060468][T24588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.060493][T24588] ? clear_bhb_loop+0x40/0x90 [ 1611.060521][T24588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.060544][T24588] RIP: 0033:0x7f5f7ef8c799 [ 1611.060566][T24588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.060587][T24588] RSP: 002b:00007f5f7d1de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 1611.060612][T24588] RAX: ffffffffffffffda RBX: 00007f5f7f205fa0 RCX: 00007f5f7ef8c799 [ 1611.060630][T24588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1611.060643][T24588] RBP: 00007f5f7d1de090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.060658][T24588] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1611.060672][T24588] R13: 00007f5f7f206038 R14: 00007f5f7f205fa0 R15: 00007ffdd9be7a08 [ 1611.060709][T24588] [ 1611.564858][T24547] hsr_slave_0: entered promiscuous mode [ 1611.566021][T24547] hsr_slave_1: entered promiscuous mode [ 1611.578239][T24547] debugfs: 'hsr0' already exists in 'hsr' [ 1611.578268][T24547] Cannot create hsr debugfs directory [ 1611.676853][T23295] Bluetooth: hci4: command tx timeout [ 1612.357819][T22487] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1612.443684][T24547] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1612.501418][T24547] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1612.525730][T24547] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1612.527395][T22487] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1612.527472][T22487] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1612.527536][T22487] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.527594][T22487] usb 4-1: config 220 has no interface number 2 [ 1612.527833][T22487] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1612.527917][T22487] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1612.527956][T22487] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1612.528010][T22487] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1612.628547][T22487] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1612.628583][T22487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.628607][T22487] usb 4-1: Product: syz [ 1612.628623][T22487] usb 4-1: Manufacturer: syz [ 1612.628640][T22487] usb 4-1: SerialNumber: syz [ 1612.734968][T24547] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1612.957342][T22487] usb 4-1: selecting invalid altsetting 0 [ 1612.958037][T22487] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1612.958078][T22487] uvcvideo 4-1:220.0: No valid video chain found. [ 1613.022593][T22487] usb 4-1: selecting invalid altsetting 0 [ 1613.022636][T22487] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1613.087885][T22487] usb 4-1: USB disconnect, device number 30 [ 1613.508951][T24547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.573991][T24547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.590310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.607057][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1613.645089][ T3186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.645228][ T3186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.757080][T23295] Bluetooth: hci4: command tx timeout [ 1613.809250][T24648] netlink: 'syz.7.6127': attribute type 1 has an invalid length. [ 1613.879842][T24648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1613.985715][T24652] bond1: (slave gretap1): making interface the new active one [ 1614.003125][T24652] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1614.056971][T19861] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1614.256865][ T1229] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1614.282429][T19861] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1614.282471][T19861] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1614.282514][T19861] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1614.282542][T19861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.346505][T24660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6130'. [ 1614.362884][T24650] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1614.412694][T19861] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1614.426734][ T1229] usb 9-1: Using ep0 maxpacket: 16 [ 1614.436898][ T1229] usb 9-1: config 0 has no interfaces? [ 1614.436939][ T1229] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1614.436967][ T1229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.476937][ T1229] usb 9-1: config 0 descriptor?? [ 1615.438798][T24547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1615.836819][T23295] Bluetooth: hci4: command tx timeout [ 1616.066730][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1616.066769][ C0] lec:lec_tx_timeout: lec0 [ 1616.066903][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1616.742572][T24547] veth0_vlan: entered promiscuous mode [ 1616.773284][T24547] veth1_vlan: entered promiscuous mode [ 1616.832263][T19861] usb 4-1: USB disconnect, device number 31 [ 1616.974079][T24547] veth0_macvtap: entered promiscuous mode [ 1616.976032][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976077][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976116][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976146][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976174][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976202][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976233][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976263][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976293][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1616.976324][T24680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1617.123632][T24682] FAULT_INJECTION: forcing a failure. [ 1617.123632][T24682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.123672][T24682] CPU: 1 UID: 0 PID: 24682 Comm: syz.3.6135 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1617.123703][T24682] Tainted: [L]=SOFTLOCKUP [ 1617.123712][T24682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1617.123726][T24682] Call Trace: [ 1617.123735][T24682] [ 1617.123746][T24682] dump_stack_lvl+0xe8/0x150 [ 1617.123786][T24682] should_fail_ex+0x46b/0x600 [ 1617.123822][T24682] _copy_to_user+0x31/0xb0 [ 1617.123858][T24682] simple_read_from_buffer+0xe1/0x170 [ 1617.123892][T24682] proc_fail_nth_read+0x1be/0x230 [ 1617.123924][T24682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1617.123957][T24682] ? rw_verify_area+0x2ac/0x4e0 [ 1617.123992][T24682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1617.124023][T24682] vfs_read+0x212/0xa80 [ 1617.124066][T24682] ? __pfx_vfs_read+0x10/0x10 [ 1617.124111][T24682] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1617.124148][T24682] ? lockdep_hardirqs_on+0x7a/0x110 [ 1617.124182][T24682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1617.124217][T24682] ? mutex_lock_nested+0x152/0x1d0 [ 1617.124244][T24682] ? fdget_pos+0x252/0x320 [ 1617.124281][T24682] ksys_read+0x156/0x270 [ 1617.124317][T24682] ? __pfx_ksys_read+0x10/0x10 [ 1617.124362][T24682] do_syscall_64+0x14d/0xf80 [ 1617.124395][T24682] ? trace_irq_disable+0x3b/0x150 [ 1617.124421][T24682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.124450][T24682] ? clear_bhb_loop+0x40/0x90 [ 1617.124478][T24682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.124501][T24682] RIP: 0033:0x7f5f7ef4cfce [ 1617.124522][T24682] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1617.124542][T24682] RSP: 002b:00007f5f7d1ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1617.124566][T24682] RAX: ffffffffffffffda RBX: 00007f5f7d1de6c0 RCX: 00007f5f7ef4cfce [ 1617.124583][T24682] RDX: 000000000000000f RSI: 00007f5f7d1de0a0 RDI: 0000000000000004 [ 1617.124598][T24682] RBP: 00007f5f7d1de090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.124613][T24682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.124626][T24682] R13: 00007f5f7f206038 R14: 00007f5f7f205fa0 R15: 00007ffdd9be7a08 [ 1617.124664][T24682] [ 1617.467313][T24547] veth1_macvtap: entered promiscuous mode [ 1617.528544][T24547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.967984][ T36] usb 9-1: USB disconnect, device number 44 [ 1618.429064][T24547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1618.544725][T23747] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.564457][T23747] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.564514][T23747] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.564554][T23747] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.908426][T19861] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1619.066777][T19861] usb 4-1: Using ep0 maxpacket: 8 [ 1619.069177][T19861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1619.076318][T19861] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1619.076355][T19861] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1619.076379][T19861] usb 4-1: Product: syz [ 1619.076396][T19861] usb 4-1: Manufacturer: syz [ 1619.076414][T19861] usb 4-1: SerialNumber: syz [ 1619.272104][T22432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1619.272129][T22432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.400590][T19861] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1619.400625][T19861] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1619.400648][T19861] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1619.400670][T19861] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1619.574233][T23747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1619.574314][T23747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1619.617164][T19861] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1619.617247][T19861] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1619.621998][T19861] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1619.679007][T19861] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1619.683469][T19861] usb 4-1: USB disconnect, device number 32 [ 1619.710415][T19861] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1619.716091][T19861] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1619.737538][T19861] visor 4-1:1.0: device disconnected [ 1621.015904][T24713] m>e5n: entered promiscuous mode [ 1621.076950][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1621.076986][ C0] lec:lec_tx_timeout: lec0 [ 1621.077071][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1621.099200][ T5937] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1621.269228][ T5937] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1621.269291][ T5937] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1621.270789][ T5937] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1621.270827][ T5937] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1621.270852][ T5937] usb 10-1: Manufacturer: syz [ 1621.291456][ T5937] usb 10-1: config 0 descriptor?? [ 1621.331304][ T5937] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1623.278547][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1623.429276][T10643] usb 10-1: USB disconnect, device number 2 [ 1623.576755][T24762] FAULT_INJECTION: forcing a failure. [ 1623.576755][T24762] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.576795][T24762] CPU: 1 UID: 0 PID: 24762 Comm: syz.0.6157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1623.576827][T24762] Tainted: [L]=SOFTLOCKUP [ 1623.576835][T24762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1623.576849][T24762] Call Trace: [ 1623.576859][T24762] [ 1623.576869][T24762] dump_stack_lvl+0xe8/0x150 [ 1623.576909][T24762] should_fail_ex+0x46b/0x600 [ 1623.576945][T24762] should_failslab+0xa8/0x100 [ 1623.576971][T24762] kmem_cache_alloc_noprof+0x87/0x680 [ 1623.577006][T24762] ? skb_clone+0x212/0x3a0 [ 1623.577036][T24762] skb_clone+0x212/0x3a0 [ 1623.577064][T24762] __netlink_deliver_tap+0x404/0x850 [ 1623.577110][T24762] ? netlink_deliver_tap+0x2e/0x1b0 [ 1623.577145][T24762] netlink_deliver_tap+0x19c/0x1b0 [ 1623.577180][T24762] netlink_sendskb+0x68/0x140 [ 1623.577212][T24762] netlink_unicast+0x3c5/0x9f0 [ 1623.577261][T24762] ? __pfx_netlink_unicast+0x10/0x10 [ 1623.577301][T24762] rtnl_unicast+0x4e/0x60 [ 1623.577361][T24762] inet_rtm_getroute+0x1da7/0x2930 [ 1623.577400][T24762] ? inet_rtm_getroute+0xe67/0x2930 [ 1623.577445][T24762] ? kasan_quarantine_put+0xbb/0x1f0 [ 1623.577484][T24762] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 1623.577553][T24762] ? __dev_queue_xmit+0x27d/0x39b0 [ 1623.577585][T24762] ? ____sys_sendmsg+0x94c/0x9c0 [ 1623.577636][T24762] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 1623.577673][T24762] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1623.577709][T24762] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1623.577741][T24762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1623.577771][T24762] ? ref_tracker_free+0x673/0x820 [ 1623.577800][T24762] ? __copy_skb_header+0xa3/0x4a0 [ 1623.577826][T24762] ? __pfx_ref_tracker_free+0x10/0x10 [ 1623.577855][T24762] ? __skb_clone+0x63/0x7a0 [ 1623.577889][T24762] netlink_rcv_skb+0x232/0x4b0 [ 1623.577921][T24762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1623.577956][T24762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1623.578001][T24762] ? netlink_deliver_tap+0x2e/0x1b0 [ 1623.578041][T24762] netlink_unicast+0x831/0x9f0 [ 1623.578079][T24762] ? __pfx_netlink_unicast+0x10/0x10 [ 1623.578110][T24762] ? netlink_sendmsg+0x650/0xb40 [ 1623.578140][T24762] ? skb_put+0x11b/0x210 [ 1623.578179][T24762] netlink_sendmsg+0x813/0xb40 [ 1623.578222][T24762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.578258][T24762] ? unwind_get_return_address+0x4d/0x90 [ 1623.578287][T24762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1623.578334][T24762] ____sys_sendmsg+0x94c/0x9c0 [ 1623.578364][T24762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1623.578399][T24762] ? import_iovec+0x73/0xa0 [ 1623.578439][T24762] ___sys_sendmsg+0x2a5/0x360 [ 1623.578471][T24762] ? __pfx____sys_sendmsg+0x10/0x10 [ 1623.578535][T24762] ? __fget_files+0x2a/0x420 [ 1623.578565][T24762] ? __fget_files+0x3a6/0x420 [ 1623.578607][T24762] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1623.578636][T24762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1623.578672][T24762] ? __pfx_ksys_write+0x10/0x10 [ 1623.578720][T24762] do_syscall_64+0x14d/0xf80 [ 1623.578755][T24762] ? trace_irq_disable+0x3b/0x150 [ 1623.578782][T24762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.578805][T24762] ? clear_bhb_loop+0x40/0x90 [ 1623.578832][T24762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.578857][T24762] RIP: 0033:0x7f4ce191c799 [ 1623.578878][T24762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.578898][T24762] RSP: 002b:00007f4cdfb6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1623.578922][T24762] RAX: ffffffffffffffda RBX: 00007f4ce1b95fa0 RCX: 00007f4ce191c799 [ 1623.578940][T24762] RDX: ea5bc50b6199d77e RSI: 0000200000000000 RDI: 0000000000000003 [ 1623.578956][T24762] RBP: 00007f4cdfb6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.578970][T24762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1623.578983][T24762] R13: 00007f4ce1b96038 R14: 00007f4ce1b95fa0 R15: 00007ffdf8cff348 [ 1623.579019][T24762] [ 1624.258447][ T5937] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1624.378947][T24770] kAFS: No cell specified [ 1624.408343][T24772] FAULT_INJECTION: forcing a failure. [ 1624.408343][T24772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.408383][T24772] CPU: 1 UID: 0 PID: 24772 Comm: syz.8.6161 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1624.408415][T24772] Tainted: [L]=SOFTLOCKUP [ 1624.408424][T24772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1624.408438][T24772] Call Trace: [ 1624.408449][T24772] [ 1624.408459][T24772] dump_stack_lvl+0xe8/0x150 [ 1624.408501][T24772] should_fail_ex+0x46b/0x600 [ 1624.408536][T24772] _copy_from_user+0x2d/0xb0 [ 1624.408579][T24772] ___sys_sendmsg+0x1c6/0x360 [ 1624.408612][T24772] ? __pfx____sys_sendmsg+0x10/0x10 [ 1624.408674][T24772] ? __fget_files+0x2a/0x420 [ 1624.408703][T24772] ? __fget_files+0x3a6/0x420 [ 1624.408745][T24772] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1624.408773][T24772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1624.408808][T24772] ? __pfx_ksys_write+0x10/0x10 [ 1624.408857][T24772] do_syscall_64+0x14d/0xf80 [ 1624.408893][T24772] ? trace_irq_disable+0x3b/0x150 [ 1624.408921][T24772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.408945][T24772] ? clear_bhb_loop+0x40/0x90 [ 1624.408975][T24772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.409000][T24772] RIP: 0033:0x7ff224b2c799 [ 1624.409022][T24772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.409043][T24772] RSP: 002b:00007ff222d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1624.409068][T24772] RAX: ffffffffffffffda RBX: 00007ff224da5fa0 RCX: 00007ff224b2c799 [ 1624.409086][T24772] RDX: 0000000024044800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1624.409102][T24772] RBP: 00007ff222d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.409117][T24772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.409131][T24772] R13: 00007ff224da6038 R14: 00007ff224da5fa0 R15: 00007ffdf841e038 [ 1624.409166][T24772] [ 1624.443342][ T5937] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1624.443440][ T5937] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1624.443537][ T5937] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1624.671256][ T5937] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1624.671291][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1624.671315][ T5937] usb 10-1: Product: syz [ 1624.671331][ T5937] usb 10-1: Manufacturer: syz [ 1624.671348][ T5937] usb 10-1: SerialNumber: syz [ 1625.016948][ T5937] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1625.037061][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 1625.061757][T24776] net_ratelimit: 1142 callbacks suppressed [ 1625.061780][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061816][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061844][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061870][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061895][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061920][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061945][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061969][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.061994][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.062018][T24776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1625.431634][T19860] usb 10-1: USB disconnect, device number 3 [ 1625.490851][T19860] usblp0: removed [ 1625.594039][T24785] program syz.7.6165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1626.078310][T24794] FAULT_INJECTION: forcing a failure. [ 1626.078310][T24794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1626.078351][T24794] CPU: 1 UID: 0 PID: 24794 Comm: syz.9.6167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1626.078384][T24794] Tainted: [L]=SOFTLOCKUP [ 1626.078393][T24794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1626.078408][T24794] Call Trace: [ 1626.078418][T24794] [ 1626.078428][T24794] dump_stack_lvl+0xe8/0x150 [ 1626.078467][T24794] should_fail_ex+0x46b/0x600 [ 1626.078503][T24794] _copy_from_iter+0x1d3/0x1670 [ 1626.078544][T24794] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1626.078578][T24794] ? __alloc_skb+0x27d/0x7d0 [ 1626.078612][T24794] ? __pfx__copy_from_iter+0x10/0x10 [ 1626.078640][T24794] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1626.078675][T24794] ? __alloc_skb+0x27d/0x7d0 [ 1626.078714][T24794] ? netlink_sendmsg+0x650/0xb40 [ 1626.078746][T24794] ? skb_put+0x11b/0x210 [ 1626.078785][T24794] netlink_sendmsg+0x6c0/0xb40 [ 1626.078827][T24794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1626.078862][T24794] ? unwind_get_return_address+0x4d/0x90 [ 1626.078891][T24794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1626.078929][T24794] ____sys_sendmsg+0x94c/0x9c0 [ 1626.078960][T24794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1626.078995][T24794] ? import_iovec+0x73/0xa0 [ 1626.079032][T24794] ___sys_sendmsg+0x2a5/0x360 [ 1626.079063][T24794] ? __pfx____sys_sendmsg+0x10/0x10 [ 1626.079135][T24794] ? __fget_files+0x2a/0x420 [ 1626.079164][T24794] ? __fget_files+0x3a6/0x420 [ 1626.079204][T24794] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1626.079232][T24794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1626.079267][T24794] ? __pfx_ksys_write+0x10/0x10 [ 1626.079315][T24794] do_syscall_64+0x14d/0xf80 [ 1626.079351][T24794] ? trace_irq_disable+0x3b/0x150 [ 1626.079379][T24794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.079403][T24794] ? clear_bhb_loop+0x40/0x90 [ 1626.079433][T24794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.079457][T24794] RIP: 0033:0x7f270005c799 [ 1626.079479][T24794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.079499][T24794] RSP: 002b:00007f26fe2b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1626.079524][T24794] RAX: ffffffffffffffda RBX: 00007f27002d5fa0 RCX: 00007f270005c799 [ 1626.079541][T24794] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 1626.079557][T24794] RBP: 00007f26fe2b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.079570][T24794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.079583][T24794] R13: 00007f27002d6038 R14: 00007f27002d5fa0 R15: 00007ffe082f4ac8 [ 1626.079617][T24794] [ 1626.086749][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1626.086784][ C0] lec:lec_tx_timeout: lec0 [ 1626.086900][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1627.821530][T24812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6174'. [ 1628.075088][T24818] netlink: 'syz.9.6177': attribute type 1 has an invalid length. [ 1628.801765][T10643] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1628.926812][T10643] usb 10-1: device descriptor read/64, error -71 [ 1628.962501][T23295] Bluetooth: hci6: unexpected subevent 0x0e length: 30 > 15 [ 1628.962533][T23295] Bluetooth: hci6: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1629.177620][T10643] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1629.306748][T10643] usb 10-1: device descriptor read/64, error -71 [ 1629.418202][T10643] usb usb10-port1: attempt power cycle [ 1629.779710][T10643] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1629.818351][T10643] usb 10-1: device descriptor read/8, error -71 [ 1630.056833][T10643] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1630.083281][T10643] usb 10-1: device descriptor read/8, error -71 [ 1630.187164][T10643] usb usb10-port1: unable to enumerate USB device [ 1630.236806][T19860] usb 8-1: new full-speed USB device number 73 using dummy_hcd [ 1630.314091][T24845] netlink: 184 bytes leftover after parsing attributes in process `syz.8.6185'. [ 1630.389888][T19860] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1630.390482][T19860] usb 8-1: not running at top speed; connect to a high speed hub [ 1630.391716][T19860] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.391768][T19860] usb 8-1: config 9 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1630.391796][T19860] usb 8-1: config 9 interface 0 has no altsetting 0 [ 1630.446778][T19860] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1630.446812][T19860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.446834][T19860] usb 8-1: Product: syz [ 1630.446850][T19860] usb 8-1: Manufacturer: syz [ 1630.446865][T19860] usb 8-1: SerialNumber: syz [ 1630.747387][T19860] usb 8-1: USB disconnect, device number 73 [ 1631.096889][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1631.096919][ C0] lec:lec_tx_timeout: lec0 [ 1631.097021][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1634.609559][T24892] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6198'. [ 1634.755577][T24898] input: syz0 as /devices/virtual/input/input56 [ 1634.848473][T24903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1634.900797][T24903] vlan2: entered promiscuous mode [ 1634.900819][T24903] ip6gretap0: entered promiscuous mode [ 1635.117214][ T5937] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1635.273035][ T5937] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1635.273087][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.273118][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.273144][ T5937] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1635.274687][ T5937] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1635.274718][ T5937] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1635.274742][ T5937] usb 8-1: Manufacturer: syz [ 1635.356080][ T5937] usb 8-1: config 0 descriptor?? [ 1635.781011][ T5937] appleir 0003:05AC:8243.0023: item fetching failed at offset 0/1 [ 1635.781785][ T5937] appleir 0003:05AC:8243.0023: parse failed [ 1635.781902][ T5937] appleir 0003:05AC:8243.0023: probe with driver appleir failed with error -22 [ 1635.995223][T19860] usb 8-1: USB disconnect, device number 74 [ 1636.106713][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1636.106752][ C0] lec:lec_tx_timeout: lec0 [ 1636.106836][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1639.325925][T24980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1639.325955][T24980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1639.325973][T24980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1639.463983][T24984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6225'. [ 1641.094158][T25009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6230'. [ 1641.116754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1641.116789][ C0] lec:lec_tx_timeout: lec0 [ 1641.116885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1645.214915][T25048] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1645.809554][T25056] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6248'. [ 1645.809574][T25056] netlink: 'syz.7.6248': attribute type 1 has an invalid length. [ 1645.809590][T25056] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6248'. [ 1646.126914][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1646.126950][ C0] lec:lec_tx_timeout: lec0 [ 1646.127037][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1648.086753][T19860] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1648.259047][T19860] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1648.259085][T19860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.264594][T19860] usb 4-1: config 0 descriptor?? [ 1648.475463][T19860] ath6kl: Failed to submit usb control message: -71 [ 1648.475519][T19860] ath6kl: unable to send the bmi data to the device: -71 [ 1648.475537][T19860] ath6kl: Unable to send get target info: -71 [ 1648.486742][T19860] ath6kl: Failed to init ath6kl core: -71 [ 1648.488222][T19860] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1648.546258][T19860] usb 4-1: USB disconnect, device number 33 [ 1650.191826][T25097] netlink: 120 bytes leftover after parsing attributes in process `syz.9.6261'. [ 1650.191846][T25097] netlink: 'syz.9.6261': attribute type 1 has an invalid length. [ 1650.191856][T25097] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6261'. [ 1652.236709][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6110 ms [ 1652.236758][ C0] lec:lec_tx_timeout: lec0 [ 1652.237030][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1652.503741][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6267'. [ 1652.619223][T25124] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6268'. [ 1653.368671][T25123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1654.085942][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6275'. [ 1655.536803][ T5937] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1655.596843][T23295] Bluetooth: hci0: command 0x0406 tx timeout [ 1655.702222][T25169] netlink: 120 bytes leftover after parsing attributes in process `syz.8.6280'. [ 1655.702249][T25169] netlink: 'syz.8.6280': attribute type 1 has an invalid length. [ 1655.702265][T25169] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6280'. [ 1655.741576][ T5937] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1655.741610][ T5937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.741633][ T5937] usb 8-1: Product: syz [ 1655.741650][ T5937] usb 8-1: Manufacturer: syz [ 1655.741667][ T5937] usb 8-1: SerialNumber: syz [ 1656.983228][ T5937] rtl8150 8-1:1.0: couldn't reset the device [ 1656.983630][ T5937] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 1657.011646][ T5937] usb 8-1: USB disconnect, device number 75 [ 1657.049636][ T1229] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1657.159224][ T5881] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1657.214552][ T1229] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 1657.214584][ T1229] usb 10-1: config 0 has no interface number 0 [ 1657.214652][ T1229] usb 10-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 1657.214683][ T1229] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid maxpacket 165, setting to 64 [ 1657.216586][ T1229] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1657.264913][ T1229] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1657.264933][ T1229] usb 10-1: Manufacturer: syz [ 1657.264945][ T1229] usb 10-1: SerialNumber: syz [ 1657.301600][ T1229] usb 10-1: config 0 descriptor?? [ 1657.304911][T25174] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1657.381741][ T5881] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1657.381796][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.381826][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1657.391600][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1657.391668][ T5881] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1657.391691][ T5881] usb 4-1: Manufacturer: syz [ 1657.507061][ T1229] usbtouchscreen 10-1:0.214: Failed to read FW rev: 0 [ 1657.507353][ T1229] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1657.561920][ T5881] usb 4-1: config 0 descriptor?? [ 1657.956820][T22487] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1658.471943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6230 ms [ 1658.471981][ C0] lec:lec_tx_timeout: lec0 [ 1658.473848][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1658.541709][ T5881] appleir 0003:05AC:8243.0024: item fetching failed at offset 0/1 [ 1658.542338][ T5881] appleir 0003:05AC:8243.0024: parse failed [ 1658.542417][ T5881] appleir 0003:05AC:8243.0024: probe with driver appleir failed with error -22 [ 1658.697544][T22487] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1658.697596][T22487] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.697625][T22487] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1658.706232][T22487] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1658.706266][T22487] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1658.706289][T22487] usb 9-1: Manufacturer: syz [ 1658.792118][T22487] usb 9-1: config 0 descriptor?? [ 1658.812132][T19860] usb 4-1: USB disconnect, device number 34 [ 1659.220616][T22487] appleir 0003:05AC:8243.0025: item fetching failed at offset 0/1 [ 1659.223341][T22487] appleir 0003:05AC:8243.0025: parse failed [ 1659.223422][T22487] appleir 0003:05AC:8243.0025: probe with driver appleir failed with error -22 [ 1659.336742][ T5937] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1659.472944][T19860] usb 9-1: USB disconnect, device number 45 [ 1659.499821][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.499860][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.782484][ T5937] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1660.782520][ T5937] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1660.782543][ T5937] usb 8-1: Manufacturer: syz [ 1660.837929][ T5937] usb 8-1: config 0 descriptor?? [ 1661.111685][ T5881] usb 10-1: USB disconnect, device number 8 [ 1661.259504][T25205] netlink: 'syz.8.6290': attribute type 1 has an invalid length. [ 1662.541743][T25213] netlink: 'syz.8.6290': attribute type 2 has an invalid length. [ 1662.567894][ T5937] usbhid 8-1:0.0: can't add hid device: -71 [ 1662.567989][ T5937] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1662.573783][ T5937] usb 8-1: USB disconnect, device number 76 [ 1663.094467][T25221] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1663.094487][T25221] netlink: 'syz.3.6295': attribute type 1 has an invalid length. [ 1663.094498][T25221] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1663.146866][T19860] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1663.225251][T25213] macvlan2: entered promiscuous mode [ 1663.225281][T25213] macvlan2: entered allmulticast mode [ 1663.248185][T25213] bond4: entered promiscuous mode [ 1663.264995][T25213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1663.297110][T19860] usb 10-1: Using ep0 maxpacket: 16 [ 1663.299244][T19860] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 1663.299266][T19860] usb 10-1: config 1 has no interface number 0 [ 1663.299298][T19860] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1663.299318][T19860] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1663.299337][T19860] usb 10-1: config 1 interface 105 has no altsetting 0 [ 1663.301613][T19860] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1663.301749][T19860] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1663.301766][T19860] usb 10-1: Product: syz [ 1663.301777][T19860] usb 10-1: Manufacturer: syz [ 1663.301788][T19860] usb 10-1: SerialNumber: syz [ 1663.334113][T25212] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1663.335180][T25212] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1663.492148][T25213] bond4: left promiscuous mode [ 1663.834536][T25210] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1663.836246][T25210] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1664.396670][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 1664.396710][ C0] lec:lec_tx_timeout: lec0 [ 1664.397174][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1664.514671][T19860] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1664.515087][T19860] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1664.862385][T19860] aqc111 10-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:1d:de:32:d0:59 [ 1664.894748][T19860] usb 10-1: USB disconnect, device number 9 [ 1665.330552][T19860] aqc111 10-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1666.254175][T19860] aqc111 10-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1666.254271][T19860] aqc111 10-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1666.254359][T19860] aqc111 10-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1667.748574][T25253] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6307'. [ 1668.888627][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.164955][T25268] tmpfs: Bad value for 'size' [ 1669.257314][T19860] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1670.158626][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 1670.158663][ C0] lec:lec_tx_timeout: lec0 [ 1670.159245][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1670.164313][T19860] usb 8-1: device descriptor read/64, error -71 [ 1670.814825][T19860] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1670.956860][T19860] usb 8-1: device descriptor read/64, error -71 [ 1671.067284][T19860] usb usb8-port1: attempt power cycle [ 1671.137290][T25279] FAULT_INJECTION: forcing a failure. [ 1671.137290][T25279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.137331][T25279] CPU: 1 UID: 0 PID: 25279 Comm: syz.0.6316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1671.137364][T25279] Tainted: [L]=SOFTLOCKUP [ 1671.137373][T25279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1671.137388][T25279] Call Trace: [ 1671.137397][T25279] [ 1671.137407][T25279] dump_stack_lvl+0xe8/0x150 [ 1671.137448][T25279] should_fail_ex+0x46b/0x600 [ 1671.137483][T25279] copy_folio_from_iter_atomic+0x30f/0x1950 [ 1671.137541][T25279] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1671.137584][T25279] ? shmem_write_begin+0x1ce/0x320 [ 1671.137615][T25279] generic_perform_write+0x5b1/0x8b0 [ 1671.137729][T25279] ? __pfx_generic_perform_write+0x10/0x10 [ 1671.137763][T25279] ? file_update_time_flags+0x3b9/0x4b0 [ 1671.137804][T25279] shmem_file_write_iter+0xfb/0x120 [ 1671.137836][T25279] vfs_write+0x629/0xba0 [ 1671.137879][T25279] ? __pfx_vfs_write+0x10/0x10 [ 1671.137917][T25279] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1671.137954][T25279] ? lockdep_hardirqs_on+0x7a/0x110 [ 1671.137992][T25279] ? mutex_lock_nested+0x152/0x1d0 [ 1671.138020][T25279] ? fdget_pos+0x252/0x320 [ 1671.138067][T25279] ksys_write+0x156/0x270 [ 1671.138106][T25279] ? __pfx_ksys_write+0x10/0x10 [ 1671.138152][T25279] do_syscall_64+0x14d/0xf80 [ 1671.138186][T25279] ? trace_irq_disable+0x3b/0x150 [ 1671.138212][T25279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.138237][T25279] ? clear_bhb_loop+0x40/0x90 [ 1671.138266][T25279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.138291][T25279] RIP: 0033:0x7f4ce191c799 [ 1671.138314][T25279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.138334][T25279] RSP: 002b:00007f4cdfb6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1671.138358][T25279] RAX: ffffffffffffffda RBX: 00007f4ce1b95fa0 RCX: 00007f4ce191c799 [ 1671.138376][T25279] RDX: 0000000000032600 RSI: 0000200000000080 RDI: 0000000000000004 [ 1671.138389][T25279] RBP: 00007f4cdfb6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.138404][T25279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1671.138418][T25279] R13: 00007f4ce1b96038 R14: 00007f4ce1b95fa0 R15: 00007ffdf8cff348 [ 1671.138454][T25279] [ 1671.617323][T19860] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1671.717232][T19860] usb 8-1: device descriptor read/8, error -71 [ 1672.747454][T19860] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1673.050047][T19860] usb 8-1: device descriptor read/8, error -71 [ 1673.158408][T19860] usb usb8-port1: unable to enumerate USB device [ 1673.199724][T25295] FAULT_INJECTION: forcing a failure. [ 1673.199724][T25295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1673.199767][T25295] CPU: 0 UID: 0 PID: 25295 Comm: syz.7.6322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1673.199800][T25295] Tainted: [L]=SOFTLOCKUP [ 1673.199808][T25295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.199822][T25295] Call Trace: [ 1673.199832][T25295] [ 1673.199843][T25295] dump_stack_lvl+0xe8/0x150 [ 1673.199884][T25295] should_fail_ex+0x46b/0x600 [ 1673.199927][T25295] prepare_alloc_pages+0x22a/0x6b0 [ 1673.199962][T25295] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1673.199994][T25295] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1673.200024][T25295] ? __pfx_policy_nodemask+0x10/0x10 [ 1673.200053][T25295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1673.200091][T25295] ? lockdep_hardirqs_on+0x7a/0x110 [ 1673.200131][T25295] alloc_pages_mpol+0xd1/0x380 [ 1673.200161][T25295] alloc_pages_noprof+0xce/0x1e0 [ 1673.200189][T25295] get_free_pages_noprof+0xf/0x80 [ 1673.200215][T25295] __kasan_populate_vmalloc+0x38/0x1d0 [ 1673.200248][T25295] ? rt_spin_unlock+0x160/0x200 [ 1673.200280][T25295] alloc_vmap_area+0xd73/0x14b0 [ 1673.200331][T25295] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1673.200367][T25295] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1673.200405][T25295] ? __get_vm_area_node+0x171/0x350 [ 1673.200437][T25295] ? n_tty_open+0x1d/0x150 [ 1673.200462][T25295] __get_vm_area_node+0x226/0x350 [ 1673.200503][T25295] __vmalloc_node_range_noprof+0x372/0x1730 [ 1673.200540][T25295] ? n_tty_open+0x1d/0x150 [ 1673.200562][T25295] ? register_lock_class+0x31/0x2e0 [ 1673.200624][T25295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1673.200666][T25295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1673.200700][T25295] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1673.200734][T25295] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1673.200764][T25295] ? n_tty_open+0x1d/0x150 [ 1673.200787][T25295] vzalloc_noprof+0xb2/0xe0 [ 1673.200822][T25295] ? n_tty_open+0x1d/0x150 [ 1673.200847][T25295] n_tty_open+0x1d/0x150 [ 1673.200871][T25295] tty_ldisc_setup+0x1be/0x280 [ 1673.200917][T25295] tty_init_dev+0x279/0x4d0 [ 1673.200951][T25295] ptmx_open+0x120/0x340 [ 1673.200983][T25295] chrdev_open+0x4d0/0x5f0 [ 1673.201012][T25295] ? __pfx_chrdev_open+0x10/0x10 [ 1673.201037][T25295] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1673.201077][T25295] ? __pfx_chrdev_open+0x10/0x10 [ 1673.201100][T25295] do_dentry_open+0x83d/0x13e0 [ 1673.201143][T25295] vfs_open+0x3b/0x350 [ 1673.201169][T25295] ? path_openat+0x2e2b/0x38a0 [ 1673.201206][T25295] path_openat+0x2e43/0x38a0 [ 1673.201281][T25295] ? __pfx_path_openat+0x10/0x10 [ 1673.201317][T25295] ? __lock_acquire+0x6b5/0x2cf0 [ 1673.201344][T25295] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1673.201387][T25295] ? do_raw_spin_lock+0x12b/0x2f0 [ 1673.201431][T25295] do_file_open+0x23e/0x4a0 [ 1673.201465][T25295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1673.201505][T25295] ? __pfx_do_file_open+0x10/0x10 [ 1673.201538][T25295] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1673.201596][T25295] ? alloc_fd+0x64e/0x6c0 [ 1673.201637][T25295] do_sys_openat2+0x113/0x200 [ 1673.201670][T25295] ? __pfx_do_sys_openat2+0x10/0x10 [ 1673.201702][T25295] ? ksys_write+0x248/0x270 [ 1673.201740][T25295] ? __pfx_ksys_write+0x10/0x10 [ 1673.201781][T25295] __x64_sys_openat+0x138/0x170 [ 1673.201816][T25295] do_syscall_64+0x14d/0xf80 [ 1673.201852][T25295] ? trace_irq_disable+0x3b/0x150 [ 1673.201880][T25295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.201911][T25295] ? clear_bhb_loop+0x40/0x90 [ 1673.201941][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.201966][T25295] RIP: 0033:0x7f15c118c799 [ 1673.201988][T25295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.202009][T25295] RSP: 002b:00007f15bf3de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1673.202032][T25295] RAX: ffffffffffffffda RBX: 00007f15c1405fa0 RCX: 00007f15c118c799 [ 1673.202049][T25295] RDX: 0000000000060081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1673.202066][T25295] RBP: 00007f15bf3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.202081][T25295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.202095][T25295] R13: 00007f15c1406038 R14: 00007f15c1405fa0 R15: 00007ffd9a9ba518 [ 1673.202133][T25295] [ 1673.202197][T25295] syz.7.6322: vmalloc error: size 9096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 1673.202364][T25295] CPU: 0 UID: 0 PID: 25295 Comm: syz.7.6322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1673.202394][T25295] Tainted: [L]=SOFTLOCKUP [ 1673.202403][T25295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.202415][T25295] Call Trace: [ 1673.202424][T25295] [ 1673.202434][T25295] dump_stack_lvl+0xe8/0x150 [ 1673.202471][T25295] warn_alloc+0x263/0x3e0 [ 1673.202497][T25295] ? kasan_quarantine_put+0xbb/0x1f0 [ 1673.202534][T25295] ? __pfx_warn_alloc+0x10/0x10 [ 1673.202559][T25295] ? __get_vm_area_node+0x23f/0x350 [ 1673.202592][T25295] ? __get_vm_area_node+0x171/0x350 [ 1673.202626][T25295] ? n_tty_open+0x1d/0x150 [ 1673.202650][T25295] ? __get_vm_area_node+0x23f/0x350 [ 1673.202693][T25295] __vmalloc_node_range_noprof+0x397/0x1730 [ 1673.202729][T25295] ? register_lock_class+0x31/0x2e0 [ 1673.202794][T25295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1673.202835][T25295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1673.202868][T25295] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1673.202907][T25295] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1673.202936][T25295] ? n_tty_open+0x1d/0x150 [ 1673.202960][T25295] vzalloc_noprof+0xb2/0xe0 [ 1673.202994][T25295] ? n_tty_open+0x1d/0x150 [ 1673.203018][T25295] n_tty_open+0x1d/0x150 [ 1673.203043][T25295] tty_ldisc_setup+0x1be/0x280 [ 1673.203077][T25295] tty_init_dev+0x279/0x4d0 [ 1673.203112][T25295] ptmx_open+0x120/0x340 [ 1673.203144][T25295] chrdev_open+0x4d0/0x5f0 [ 1673.203173][T25295] ? __pfx_chrdev_open+0x10/0x10 [ 1673.203198][T25295] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1673.203238][T25295] ? __pfx_chrdev_open+0x10/0x10 [ 1673.203261][T25295] do_dentry_open+0x83d/0x13e0 [ 1673.203303][T25295] vfs_open+0x3b/0x350 [ 1673.203327][T25295] ? path_openat+0x2e2b/0x38a0 [ 1673.203366][T25295] path_openat+0x2e43/0x38a0 [ 1673.203440][T25295] ? __pfx_path_openat+0x10/0x10 [ 1673.203477][T25295] ? __lock_acquire+0x6b5/0x2cf0 [ 1673.203503][T25295] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1673.203547][T25295] ? do_raw_spin_lock+0x12b/0x2f0 [ 1673.203591][T25295] do_file_open+0x23e/0x4a0 [ 1673.203627][T25295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1673.203668][T25295] ? __pfx_do_file_open+0x10/0x10 [ 1673.203700][T25295] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1673.203757][T25295] ? alloc_fd+0x64e/0x6c0 [ 1673.203799][T25295] do_sys_openat2+0x113/0x200 [ 1673.203832][T25295] ? __pfx_do_sys_openat2+0x10/0x10 [ 1673.203863][T25295] ? ksys_write+0x248/0x270 [ 1673.203908][T25295] ? __pfx_ksys_write+0x10/0x10 [ 1673.203949][T25295] __x64_sys_openat+0x138/0x170 [ 1673.203986][T25295] do_syscall_64+0x14d/0xf80 [ 1673.204019][T25295] ? trace_irq_disable+0x3b/0x150 [ 1673.204046][T25295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.204071][T25295] ? clear_bhb_loop+0x40/0x90 [ 1673.204101][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.204124][T25295] RIP: 0033:0x7f15c118c799 [ 1673.204143][T25295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.204163][T25295] RSP: 002b:00007f15bf3de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1673.204185][T25295] RAX: ffffffffffffffda RBX: 00007f15c1405fa0 RCX: 00007f15c118c799 [ 1673.204202][T25295] RDX: 0000000000060081 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1673.204217][T25295] RBP: 00007f15bf3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.204232][T25295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.204245][T25295] R13: 00007f15c1406038 R14: 00007f15c1405fa0 R15: 00007ffd9a9ba518 [ 1673.204282][T25295] [ 1673.204292][T25295] Mem-Info: [ 1673.204303][T25295] active_anon:2382 inactive_anon:26394 isolated_anon:0 [ 1673.204303][T25295] active_file:27571 inactive_file:39313 isolated_file:0 [ 1673.204303][T25295] unevictable:768 dirty:159 writeback:0 [ 1673.204303][T25295] slab_reclaimable:13254 slab_unreclaimable:114515 [ 1673.204303][T25295] mapped:44705 shmem:20435 pagetables:1913 [ 1673.204303][T25295] sec_pagetables:0 bounce:0 [ 1673.204303][T25295] kernel_misc_reclaimable:0 [ 1673.204303][T25295] free:1226140 free_pcp:3513 free_cma:0 [ 1673.204364][T25295] Node 0 active_anon:9528kB inactive_anon:105576kB active_file:110096kB inactive_file:157252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178820kB dirty:636kB writeback:0kB shmem:80204kB kernel_stack:15136kB pagetables:7504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1673.204417][T25295] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1673.204471][T25295] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.204537][T25295] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1673.204577][T25295] Node 0 DMA32 free:948948kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9528kB inactive_anon:105576kB active_file:110096kB inactive_file:157252kB unevictable:1536kB writepending:636kB zspages:0kB present:3129332kB managed:2566508kB mlocked:0kB bounce:0kB free_pcp:14052kB local_pcp:5916kB free_cma:0kB [ 1673.204646][T25295] lowmem_reserve[]: 0 0 0 0 0 [ 1673.204681][T25295] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.204743][T25295] lowmem_reserve[]: 0 0 0 0 0 [ 1673.204779][T25295] Node 1 Normal free:3940252kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1673.204842][T25295] lowmem_reserve[]: 0 0 0 0 0 [ 1673.204878][T25295] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1673.205014][T25295] Node 0 DMA32: 2187*4kB (UME) 3331*8kB (UME) 2581*16kB (UME) 87*32kB (UME) 354*64kB (UME) 397*128kB (UME) 237*256kB (UME) 156*512kB (UME) 58*1024kB (UM) 9*2048kB (UME) 141*4096kB (M) = 948852kB [ 1673.205194][T25295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1673.205311][T25295] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 12*16kB (UM) 12*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (M) 960*4096kB (UM) = 3940252kB [ 1673.205488][T25295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.205508][T25295] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1673.205527][T25295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.205545][T25295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.205563][T25295] 87265 total pagecache pages [ 1673.205574][T25295] 0 pages in swap cache [ 1673.205582][T25295] Free swap = 124996kB [ 1673.205591][T25295] Total swap = 124996kB [ 1673.205601][T25295] 2097051 pages RAM [ 1673.205609][T25295] 0 pages HighMem/MovableOnly [ 1673.205617][T25295] 423704 pages reserved [ 1673.205626][T25295] 0 pages cma reserved [ 1673.206561][T25295] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1674.524446][T25301] support for the xor transformation has been removed. [ 1675.761342][T25334] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6333'. [ 1675.916706][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 1675.916741][ C0] lec:lec_tx_timeout: lec0 [ 1675.917166][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1677.092240][T22487] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1677.226805][T22487] usb 8-1: device descriptor read/64, error -71 [ 1677.391689][T23295] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1677.429812][T23295] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1677.431844][T23295] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1677.434051][T23295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1677.434947][T23295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1677.559244][T25353] wg1 speed is unknown, defaulting to 1000 [ 1677.728276][T22487] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1678.027344][T22487] usb 8-1: device descriptor read/64, error -71 [ 1678.205986][T22487] usb usb8-port1: attempt power cycle [ 1678.656838][T22487] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1678.677490][T22487] usb 8-1: device descriptor read/8, error -71 [ 1678.927227][T22487] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1678.947992][T22487] usb 8-1: device descriptor read/8, error -71 [ 1679.058075][T22487] usb usb8-port1: unable to enumerate USB device [ 1679.186738][ T5881] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1679.349597][ T5881] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1679.349650][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.349680][ T5881] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1679.351234][ T5881] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1679.351288][ T5881] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1679.351312][ T5881] usb 9-1: Manufacturer: syz [ 1679.421112][ T5881] usb 9-1: config 0 descriptor?? [ 1679.854482][T23295] Bluetooth: hci7: command tx timeout [ 1679.958835][ T5881] appleir 0003:05AC:8243.0026: item fetching failed at offset 0/1 [ 1679.959482][ T5881] appleir 0003:05AC:8243.0026: parse failed [ 1679.959568][ T5881] appleir 0003:05AC:8243.0026: probe with driver appleir failed with error -22 [ 1679.986878][T19861] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1680.097605][ T5881] usb 9-1: USB disconnect, device number 46 [ 1680.190307][T19861] usb 10-1: Using ep0 maxpacket: 16 [ 1680.192368][T19861] usb 10-1: config index 0 descriptor too short (expected 526, got 367) [ 1680.192398][T19861] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.194820][T19861] usb 10-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 1680.194850][T19861] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.194874][T19861] usb 10-1: Product: syz [ 1680.194891][T19861] usb 10-1: Manufacturer: syz [ 1680.194907][T19861] usb 10-1: SerialNumber: syz [ 1680.216331][T19861] usb 10-1: config 0 descriptor?? [ 1680.687451][T23295] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 1680.687506][T23295] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1680.980565][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1680.990738][ C0] lec:lec_tx_timeout: lec0 [ 1681.090302][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1681.459867][T19861] usb 10-1: USB disconnect, device number 10 [ 1681.533075][T10643] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 1681.533105][T10643] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 1681.533130][T10643] CPU: 0 UID: 0 PID: 10643 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1681.533171][T10643] Tainted: [L]=SOFTLOCKUP [ 1681.533179][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1681.533195][T10643] Workqueue: events l2cap_info_timeout [ 1681.533225][T10643] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1681.533251][T10643] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1681.533272][T10643] RSP: 0018:ffffc900058cf808 EFLAGS: 00010202 [ 1681.533291][T10643] RAX: dffffc0000000000 RBX: ffffffff88ecff8e RCX: 0000000080000001 [ 1681.533309][T10643] RDX: 0000000000000000 RSI: ffffffff88ecff8e RDI: 000000000000006b [ 1681.533323][T10643] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1681.533336][T10643] R10: dffffc0000000000 R11: ffffffff8a2328f0 R12: 0000000000000000 [ 1681.533351][T10643] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 1681.533365][T10643] FS: 0000000000000000(0000) GS:ffff88812633b000(0000) knlGS:0000000000000000 [ 1681.533383][T10643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.533398][T10643] CR2: 00007f15bef79d58 CR3: 00000000644ee000 CR4: 00000000003526f0 [ 1681.533418][T10643] Call Trace: [ 1681.533427][T10643] [ 1681.533437][T10643] __kasan_check_byte+0x12/0x40 [ 1681.533474][T10643] lock_acquire+0x79/0x2e0 [ 1681.533499][T10643] lock_sock_nested+0x3e/0x130 [ 1681.533528][T10643] ? l2cap_sock_ready_cb+0x46/0x160 [ 1681.533561][T10643] l2cap_sock_ready_cb+0x46/0x160 [ 1681.533593][T10643] l2cap_conn_start+0x779/0xff0 [ 1681.533622][T10643] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1681.533653][T10643] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1681.533688][T10643] ? lockdep_hardirqs_on+0x7a/0x110 [ 1681.533724][T10643] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1681.533758][T10643] ? mutex_lock_nested+0x152/0x1d0 [ 1681.533784][T10643] ? l2cap_info_timeout+0x60/0xa0 [ 1681.533810][T10643] l2cap_info_timeout+0x68/0xa0 [ 1681.533833][T10643] ? process_scheduled_works+0xa8d/0x18c0 [ 1681.533863][T10643] process_scheduled_works+0xb6e/0x18c0 [ 1681.533910][T10643] ? __pfx_process_scheduled_works+0x10/0x10 [ 1681.533945][T10643] ? assign_work+0x3d5/0x5e0 [ 1681.533976][T10643] worker_thread+0xa53/0xfc0 [ 1681.534021][T10643] kthread+0x388/0x470 [ 1681.534043][T10643] ? __pfx_worker_thread+0x10/0x10 [ 1681.534071][T10643] ? __pfx_kthread+0x10/0x10 [ 1681.534095][T10643] ret_from_fork+0x51e/0xb90 [ 1681.534127][T10643] ? __pfx_ret_from_fork+0x10/0x10 [ 1681.534167][T10643] ? __switch_to+0xc7d/0x1450 [ 1681.534195][T10643] ? __pfx_kthread+0x10/0x10 [ 1681.534219][T10643] ret_from_fork_asm+0x1a/0x30 [ 1681.534249][T10643] [ 1681.534263][T10643] Modules linked in: [ 1681.534287][T10643] ---[ end trace 0000000000000000 ]--- [ 1681.534300][T10643] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1681.534324][T10643] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1681.534344][T10643] RSP: 0018:ffffc900058cf808 EFLAGS: 00010202 [ 1681.534363][T10643] RAX: dffffc0000000000 RBX: ffffffff88ecff8e RCX: 0000000080000001 [ 1681.534381][T10643] RDX: 0000000000000000 RSI: ffffffff88ecff8e RDI: 000000000000006b [ 1681.534396][T10643] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1681.534410][T10643] R10: dffffc0000000000 R11: ffffffff8a2328f0 R12: 0000000000000000 [ 1681.534427][T10643] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 1681.534441][T10643] FS: 0000000000000000(0000) GS:ffff88812633b000(0000) knlGS:0000000000000000 [ 1681.534464][T10643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1681.534482][T10643] CR2: 00007f15bef79d58 CR3: 00000000644ee000 CR4: 00000000003526f0 [ 1681.534510][T10643] Kernel panic - not syncing: Fatal exception [ 1681.534692][T10643] Kernel Offset: disabled