last executing test programs: 14.038858483s ago: executing program 3 (id=3236): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 12.924326565s ago: executing program 3 (id=3240): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="02004d4a0e29a1b92752e9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 11.945120092s ago: executing program 3 (id=3245): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f00000001c0)=0x319) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close(r7) r8 = socket$inet6(0xa, 0x1, 0x0) listen(r8, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000080), &(0x7f0000000840)=r7}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r13, @ANYBLOB="04005b000600650040"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.275304503s ago: executing program 3 (id=3247): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/148) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x1c, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000002140)=ANY=[@ANYRES32=r0, @ANYBLOB="00005e5f00000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000007000000b7040000000000208500000001000000180100002020702500000000000000bfa100000000000007010000f8ffffffb77a1a36e1af0f28538767e82c02000008000000b7030000000000008500000010000000955187a875c3969dd205f0f823f513508391bf19adb5f7dbc42f5352ff6e0bfd8e9f9b988394d397987ed2d11431a9f10b2d93192fe3c5ab14ad404da773943aaa5182c1a8375b3960449bdc5f4ab2c6e917ba258338167724bce78c50c1cf6773a686a8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0x9bb}], 0x1}], 0x1, 0x20000800) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = getpgrp(0xffffffffffffffff) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0xa, 0x6, 0x8, 0x6, 0x8000000000000000, r4}) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x400, 0x800) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') writev(r0, &(0x7f0000001dc0)=[{&(0x7f0000000a00)="201f5a65d9c4d8f1292f8365f74b0c4261866a230230f52aa736c109638eec819aed899f84103396320b461aeaad86377dc46dbf921af358fecec39ad0533a9c59d75326d689cd917335ff26e7d20c35280070bd5d49b8a5e4da2fe3d9535610090a576a35044bc004c8f047198d08f029850dc13d9b2edf5f7f76c93443477ceeb1a0870fa70c8e02bdbe44dec5ce6ca27c3322dc9f2c69c06691ac2ac3c81caaf329b2442e382ed01382841519d0fe71fc5d7a1a15dc417209acc9e3b95afda08ee0a0351fd8819439be11fb4ea27c87247e800092c1a59ec45af96bc69039662ae7e1e00b7b3382fe5b496c94bc59d0bb29ca8a44bd74b05455b41d9508d8cbf5a13aff4a76924af947fdb847f4c5094fd0ce12d9b0045703bf104fd8dbcf405724af1a2f9684b949ed6a0144c239b361528cd663c052e7b5183b7033f06e0d4181b477e9c1f250db9092991028198e43202a40032464bdf2ff23c8ebd1a15edeb29dc18d329fe57aef13f3b4e69aae98a898cfba8096bd7063968bf4c704519eb10af92933a4800a8a4e2f385bf8bcf56e593dd9f74189e150d1e091ff8e8c5e152bfc02ec11f8c5bc1b501de4111366e5767128d08cae404d0f52a968decfd098b9d49fa9df96a0c06489f4dfcee8caa441f01205d9861fea3733d6700d68069a2c1563cfa31a209b613b94db7df078cb7abc4775009aa62aa095b2c714a98e04ba7a8c23721b42a44b7dff0231abe28bf64e6c6c96904fa9a966c8a77e25c7a2b7b3abede4353173cd3929787735807567bf6e80696628f5a9c4ddc6c9246a14546723b5ef333278037b55437503a1ae6a41907e5746c6215704857c4839e9a9faef19f44d944057f76ed52e3327c901b4ceb7b7dad6a78453a1e036818738372da80250b3a1048b4d43112c45c9be5e4424ed82317344a45aa16ad4b5cf0f1c44e30a6b6a76890838a4edc7288ffc1b7375b4a7d0eb27a8956fa62eee1c6bd01a7bbde9d5549f88669d5b9a9263dc92d654037f095f0d6af5a8d071cd7f8952b3e9fda107964563c9fc0143138a9c2977cb41cd8f09accdc52404b086701a2a0fa9f57545141d2a3fba66b1381107081fd056cd967cc80b8704d7fca3bf8c82c01626ed00cf4f60a4f809452ea3a448a34974508ba88f2adf93c963dfa21d6156733aa20268c171613d803696854e359e982598654388e79598832e0e6aa4dbadb5b822c8518dc4da9ff94b859809b8bbd4a01e4b505450a7d04aa56e8a4c791ce4643b7123c31186976419e9e2d9c50e9068553869b93ffb80348039864a73d52de6e0d30d03d73e6bc98462f8f03a5d48076f285c76add123758e2506419adc01a8548d4bdb3b9c4a5540dc86c503a0d5fb53a746b835135b655feb3115e78c0088a7ff13e95c9a2d03c92dc3eee38f8de13e2be9e617445afb90cf72a0c82579b853c555c6c81de20915c3ec55909c3879812386612d7de923448009a9c0ddbe7a3664363c2d957ce4a5e56d64ce72d31bff741fba86947b6917ae353ed05d0718176bac43f165736f4654576d981e9ee83b3ca9926207140494e0258a09af2abc98b4a7e7d364959bb5daf1f59a291a214eb317fa372ba34678704d3ac06b66c184537cc4218ad149c2daef00b4388a65cea299196cd5635d2d3e54f62e2c324658886be1bcbb51c4a983da34b4b566ab3e269a2e5adcc3e712bd4ca2eb29763c540469b46e1ba652a8b6ef08f66993b8822a34cf2edc7c80d6c714bef2aca326aef5abd106792587aa29aa8f590c7982b91a44b844fd0401b8993ddf33c69af84cb5b4f11fbb3121241fcc8d143dda21883eedfe5c37c310f7322fbc700b59214fd5c20ec8cad883b5a85d9b7f15e03d839672a131d666edb1256fc017b870742395b983838296be7ca24a5eb59c9fd4a821177908166923f5b66e827c4113132e4f59d3d11c6ec53da5e72ea9da06f852147db36fd83c913e746673b6b04f08211d02789f2f34e8751b1595de0ae0b74d2ce3a7a3b554342864f8515627722c6736630b7ba9569af4b38d8995c752caab9b115277553e80d31427b6e26a6d88738fb35e09fad50f6daac7045dbfca9488a558ba5c3e654cc133026824dbcecf29a6ed4655c540966ab9a1d9cc8315f85f18afeacd87ada5c131731d6586f25956c71e1bf6afc78864b189773c7bce0a20a82b61c24330c0472a61676a15e52faed31a289aa78d04ed7df7325d4507adc8958ef8212330386ee6bd44277f9d873d977fce3b5ed92f1b7413524fa499ae9f0d7cd0c7de7e268eef4312842e54f29afde8e096eb1f7fe7e10cff1eb5bb9537b4b18650ba40b246464fa80b67543d5c8951ab48ecbce277acd835e689cc4e7c41d7880d1a994c96aa59e5f2e623f822f970d40c17249a8980d2906ff40fad6910c8c6138fadeb7a193d9639c083ea7e5383e5b70cf0f45ac40ac2dffc8bbb3b8b8aeb8aac404d80bbe58770c4814ee8056a79442d882727b033b6a1af409c72c3bf5a1bb9236ed5beb0cf06fec96d81caf96ba51f4b57299c6528d3cb323080f0f679f7ba97d945b05375a0b3b8230e895d9a7d6995d976373258d0fecd6859e3a34804172864cc023ceade006cb6a27367947147abdb6119761750a10257a28150c3cb3f6091c858544619ea9de56354fe9b8bf900a2465a7d57505e4fdc3187fb45175afc17b1179e7c0b78d60a6bfac37951293df65ba3e2cebdeba5d8d3ce2b8281aeda6e08e66cf0ed56fef0e435c45b0ba4d916eee1080e8292bacb1a3a7378eb753b1951f7024fd283083efdc3e49ae38155ea906248e67040b8d6fffb06f3bef49e2f68c138c0732f05add93e042a1abe95b6689550c492507ccf7bccac0d2f9862b08c1f0189dd14dca8d3d6cf3a03725318216248459759c87509931c71c1e49f1e6b515247924054a5c0344fff73ccc904830db5b1346b4740c96643b9d9e2b5560c78a057349fcef70e4729f90e45ae921d6edc086df3f9cbce515d351b1eec6c0cd537db9d43fb581ec09c467393c8c54352cf90c2e7f4bd8e8fb6c1debcba48cda8c2e76c368dfeb04baf96eca45fea95a949fbc212269ea0f9f2e59d8261acdc18e8094d5a73e26f529d66e15adef5e31b39bc9587059efd61068c398acb680531f48c3dd68455c9021a09640bf423fa5df621048d1840f3af49355423349b31e00a534ec57d155f50a64fdf7bd615db41f61e4a407e81eeb1c61145b30a2b60c27b43aab5489ec8eba0b8245333eb315fb0707eedc245b99b9ce3cab15dce325ff981061a4447c88c78d47db2d8f9e2761331441efc90304b1fd9abb4194abf69952576b6b9304533e088e7610adc073f2f4106753b40bbcea245b232b38351ce3ee30736617a95c7bd03546676160871fd0aa7cf747b49143994010a6c0e7696c770437a0b0347ec2a332b7496307f000093e63a9ee7e25393b4ad15082cecd19328fc2ec8c911088d642c495dc3c6532f39ab4fb11563c01669a641eca64d376252a6326d68f2fcfc9286392c11c3828945eb8cb3b5dcc54832646122a63a98da029ada98833ab6299b5e92198f3f13aec73ff39d50e38bd327febae9defc4731e475493062b7b30cd2b61ec9f90d69d0fdd5658162d93b648b2e606c85e334ae82f4872bbf089d357f65209cee307a456ac2bef14343cf8036c81ce141bb1a37876149cbd5ce35753a98406a82df102d2775f28534fcf2400f21491297fc08c90c55e21d0e168a09a5b8064ad5e69914d53cd0ab6a0eb2397fe8f485e2675bb98f4afb7535af9913ac61cb0ff01b2b48fcdb8bbad4698ba60316e1cba2a91f573532b432ad2f0b4ca2f95ba7269ac9da011cf5f9971b6f3ea88319b56998fd2ecd7ca6a8cfd5000689fc6e062ff91dc724399bf0fbf8a8bedb4f4081fab98569f67c798a63008c5c34d6c34bb85084949d14c179397d2d9bc61dc03ff6a8271dfb21b3d50da380f1b482dcafcdfa3504c76b7ae72ec3be40455c8187cf2b02f60dd359ba4b65f445c896238367e3da56b30f0cc71f6f52d28aa299bccdce3ace942f3fd35194ea1f60b19e32bd83b13982c7dfcaba869447baeea36cca445b53d7ddbe914e1f9dab6562543443f6ac7948fa1727d7aab36dd45715d47c34df1b1af0801874f78686b731c0ee67587a8cfdae478ba680cf73bf607b15cf59b050beb295bb00074a138d6521bed2e2d8615daa6df5ed7cd151ffd4addff9f4d9ace2377e708f5fd873930ff92fbedb9608d59df021f2e40f950894697c7cc6c08d0b9e459e37e822dce94fe57101faba1850301a616cb794400949dff0378ae3ad90cbdd8a8b410a91c80f7b840549d860c84bd2c839cebaea98f66e82fd045d88aaf9d8e3da2bc050c67f89934a51b447e19a870f9611ad26aa29b9cabd00bddcf08da89001d598ee311dbc29fbe17c010e87cd90b7dc68111d1a9b7d2e05b495afcbf842826e9266fdd8b89c7a331558293c5f206a8a8429d9c5cfd91778a42e6dcf26d73075df32d2f4f40304f77a4addd8e1c45b4477bd4ed31302a9828f01ee46791c59dbf5090bffcafdf5df86d8c6b038c9b8f3485935d677b8badbabe5b740c77c0c78857709051f83c59308afe8b2e3e87e4198585b8794db9619942653d11325d18bf7bbf6d3a35998a80fbd6996591908c28e26f2cb1a871a2051ef4a0563c8907804373965f1058a0065e5c986c574a5fa7fb314e1c5e51c0378a6dd6ef3a29e39d444e606fd9e7b1acc81c246e9d4dc83e99b9f0700834ccfbbaac35a25ea10226de2fc6d74721a41945af0b107e10d2f715e0cf15db3d123fe7823c15cdb3338cd1c94f9c9687764097c012ab3270640aed8c37e6087c77c29232c83f6aa865ecf4cc0fd4837bcf2ce583e7a96454683476ad56cb0c2d13fc60e7a1dac32594563d86fed05d0855bbc12c9cd1134a2ee22aff7af6c954250335eb5844186e9569eaebc890bbbaf6654f3e0ce689f26bfe559ce1ed99cb7a5ae229f68ca58e005c74f891c75fc3310a691d49a5cb9a6a0feb71c71e972b348f8cd6ffe525a2052d61b8b1389ec6af382af99b8fb504461ca030ce745eafa64ac471d48f654d37e6e12c30d1084c0b30b4e43ce90e586adceddd84f837a653ca7d72007e421bcff5fd3eb8578027d07e80bdbdebb92a2a562762cdc5dacfcfeee2526ce3c922318c1396e877562fcaa83c7c3f68a95a9ee226613037cc66dd4ecb475da0e8e52c79175574c11aad87cc40bbdb3928dbb338479767ac706377acebfe5e60a981bde7179879196aba34d41d49548ad630fc15781f20b6a33d53af16cddc11094a235542088af4ce6c958a95c9a14a5ac106d7f78738b6323335395c2c206a6981406f2b84dc222de9432ef8cfb812d269d57c216229c1e1f7fc31294d84eb6b6959baa0ab7e76fde523a20be7ea7c80b4d69ab0bf202cc43c716d939ef613407c8cad8d4092b6a0a7d031395fa013075966bd6c99a57e9a69d54d95e1f57f462717e69c5b17ca91b2274f9116d7920ece34b25529f050d9322cff733103ea74c0ba6dc9cdc1ee2e8ad61e3b8abeb42e18da3ccd51a346c926675506035b79829cf7e33086c10a2f8e03956aefa5fafea113c63317d58cf5e7a93268766e39ea3af281681e7eaece247ccd5bf71edc818c78c3d7d6ae44468cea2c56496f224e19cdddeeb7abc73e298deb6f29691e817d4510e179ee8361363f27bd5df91be2b0ae0ba4076bcc3201501acd33c594ced1c5c70c725fe84f31e5a40", 0x1000}, {&(0x7f0000001a00)="b4866b012f3203276da47a3bd5dc62ea8259a4b84aa1b9237cb22e8598d543c02db161eb176895fdbe7baa1c09b90857005bc7ae23a7f3e3c722b02c25b3fec559107a5dbb60e610531cb743e6adf97c119a026f3585369aef5c631a42690fc0d4413fba66b06628f27786a57e91eb0b8eebadd5aae8842108dc4d5aa90000a1401660fbb68fe32bb82c4672c4942fc59d1fd69e5c0c58f08a0734881077b6df806bea71104eb6", 0xa7}, {&(0x7f0000001ac0)="66629e016622754148129f425d4597e9e036f1fb8dad7feb3188c6ac05e04741125269895b2188cecfbe43f1eff783e0b785922ccca41f3bde66c76564b0920e9027fe3989721e7a5f8f5a30ba", 0x4d}, {&(0x7f0000001b40)="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", 0xfa}, {&(0x7f0000001c40)="330e0da2b6af641c2815cea37510411ba7200ac670a2327e825fb8f40a0b40dd9e2378ca06c4c6c8d638a7a026affddeb050f320955e3e44868a53769d1077bb88196d3886adc2c4a913771ed921da48b71936f37b131a260b9c0c71d2818d6fee09e0b6950a63c8e9b257f8986f77056aa9aa0eb6a63ba97e09d65f804f3410e958a7c62f5a1c813e892c0dc1535b5671ae16d79718e6c5f37bda05d92d9e96dc11ddb30514ee685b4291343c97ab613be98a9968ccca60fcbd2a7ed3c5", 0xbe}, {&(0x7f0000001d00)="5e6fc7be97aa3ec5170b1e1dc02bd8473a0f229aee81bacef91c56910e339e691c7b9ff4c4ee3e27e6ee08458d410c999eb9207bf6e264de1321f6a90e1f9f8c9923ed2a84e96c0be779a288904d3a1880746f40b8158692695ee142b86e87b2900040b76b2fdffe6e9140bab7112025e036cb339020e7", 0x77}, {&(0x7f0000001d80)="65e4189ef4619107", 0x8}], 0x7) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000500)="9402552eb6b8c0112574eb29166150dce500058bb17822db226aeb7f76ad95623ce27581d607422814edb611a092da666a8566242b454c4633584fbe4991af02dfb4a79150f5c8e16c28d2179655146d211ffd05af62680f5f8a5fbe53e7e499143330d96f0d29d9a09c653f1e430f5350d3e16fabbb5adb8106ebb7b201db4d512ee04ac2", 0x85}], 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000200)={@hyper}) 9.340192671s ago: executing program 2 (id=3250): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 8.15616938s ago: executing program 4 (id=3253): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_emit_ethernet(0x246, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x210, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x3a, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028de"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x31, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b3"}, @generic={0xcc, 0xb1, "096b92bd157e46e368dcc6b270d4047bcef994504c03bb4fbd39e6376959844c297e6cf3d50c29a293032c2c0dfff5fa7bc635f6e3c2e1cddaf9c6d6f8d109b3aa3dbd9e035fd2d7bee98302bf7836a1ad6e0df7f9d541baeb05119c2b9bad311c3a928c8e3f4e6fc2d1f98878b4decd71839f46c15e83b448df116784906946d509c3b696698bd8b8f9e5bba2307c9a71ae459e6492c58c1ad6940a25b7012613e8882f24a3897adf9728de5eedff0e7d"}]}]}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r4, 0xffffffffffffffff) socket(0x1d, 0x2, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 8.01277164s ago: executing program 2 (id=3254): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x400000000000, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r1, 0x2004, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xb3c}}, './file0\x00'}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x241, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x3ff, 0xfff}}, './file0/file0\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 6.857288827s ago: executing program 0 (id=3255): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="02004d4a0e29a1b92752e9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 6.255280356s ago: executing program 2 (id=3256): r0 = inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xa, 0x1, 0x9, 0x1, 0x1, "36f9ee2a3513f83c9999613371365636fb31ca", 0xff, 0x9}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x40, 0x0, 0x30314752, 0x7, 0x0, 0xfffffffc, 0x4, 0x2, 0x1, 0x0, 0x0, 0x3}}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0xe7, 0x80000300}}) close_range(r0, 0xffffffffffffffff, 0x0) 6.007433934s ago: executing program 1 (id=3257): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f00000001c0)=0x319) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close(r7) r8 = socket$inet6(0xa, 0x1, 0x0) listen(r8, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000080), &(0x7f0000000840)=r7}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r13, @ANYBLOB="04005b000600650040"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.974682716s ago: executing program 3 (id=3258): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='batadv_slave_1\x00') mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x6, [0x1, 0x8, 0x1, 0x200, 0x33f, 0x5fc24f65]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro32=0x4402, 0xb970, 0x2, 0x80000001}}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0x4167}}, @wrmsr={0x65, 0x20, {0xb81, 0x42}}, @rdmsr={0x66, 0x18, {0x94c}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xc8, {0x0, 0xd, [@nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x2, 0xf}}, @nested_amd_invlpga={0x17d, 0x20, {0x8080000, 0x3ed7}}, @in_dx={0x69, 0x20, {0x31fc, 0x6}}]}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x4, 0x3, 0x40adde6d, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0x5ea5}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x1}, @code={0xa, 0x42, {"0fc77e3c0f225f66b84d008ed067430f7827dbdd0f01c96765470fc77ed6670f001a0f20c035080000000f22c00f4f7100"}}], 0x2a2}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000440)=@attr_other={0x0, 0x8, 0xfffffffffffffffc, &(0x7f0000000400)=0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) sched_setscheduler(r2, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="8477b864d5baa538754a53223b756932c35dba0e131c06c9e605b942698f1ff656f6e8545db476262f91de8685d27ee35b2a3f0269535e0301e86c351f910b26d752832b57009dc76f6ce31204baff8fad9b0a3c1ade91803470781bc2d5d1f7908eda0deb964e43d9a4bb8bb73884ea72aad0c6bf39dc7996c47796465cd8b2b1578e5e56be58ccc2", 0x89}, {&(0x7f0000000600)="f3fc6b33e14109f96af76810ba6dc5d5e8be1bbbada354da7a40f8a11d94f72f99eb5279e52ba00069639d116078f2ea27ed25fe7fb64f9683c4ef5acec14e447775cef28e422527c3bedf247f046330b604c52da66d7fab8d5d117b", 0x5c}, {&(0x7f00000006c0)="035d601674a4f553a6deeb295a7cd5ba11b76c4ac8bf4f52c5ed362d93802ab39b3f41ccc7f4e395fc13", 0x2a}, {&(0x7f0000000700)="2835f72199cfe4c2d8950c1ea0f42acc815fa892cacc7c731ec63b8e4583f66f20ad8a4a70c9c4adec2e5eca557368b57298c4d3acd656eed88925dfb8e3e38db17c6b9f140c941c3ad1", 0x4a}, {&(0x7f0000000780)="2fdb2b2e9b75cd6e0aec47818ab2a67c2bfcdb3bfa7e9cf00cfd8c6053d10b1b185dfd649287758a661f33fe699306a173c1f6534af77e30377f7f2f82de8b85fa88bcec4299d007aa4168f8f43de7c31ca790a79c0e07130196628a6773bfba6f760079b96956253221c511e6585c80232febc3edcc6c8f7021bdcd6138ada3ff88fdeaceb67dc9ceb50ddebbc511dbec845ec887279b9b0bbb46d06d7fd71d9750fe14210d2f5b0a8e853e29821523a84441b086f49aa1f884355714daebf3fb594efe9f5c26b2785669", 0xcb}, {&(0x7f0000000880)="052aed13e0c8ae4d70bd74fab754dbc867ebbe0b6560af82940319f94424f118c3aa81b56d93f1cf23ffbf4443d0974c54bfbc9c8ea8f69b650a140b91e5a132a4593c63fe0b89539993c7410dfdc5f188cc86b24c2511c7f4cca341e2503b07f11a2540a9f54d3c364ceb14122867196a81fbc3b725faf21f8a54fa49f99569561df3bc9e13b22a5597f6dcc861460ed758590102e0963abf58de", 0x9b}, {&(0x7f0000000940)="62d7c9d713fec9ffcfbc48d4682bcbe4e8894a14ca8a6f86893bd354288aa09076dc2252d2dfe40964c2c01c5f9d2a12b04c17a5d53991bb1a55bcf2c232a76cfa2bce7824509cbcc067a3c0b53f293efda46c1ab8bbbe988d20b562743b181d2c9b081a2fdc50cc6397924ae3c00a92aca69058d0ccfe09232a232ace2b66011c9a18bab0ab4292", 0x88}], 0x7, &(0x7f0000000a80)=[@ip_retopts={{0x64, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x2d, [@multicast1, @private=0xa010100, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4}, @end, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x5c, [@broadcast]}, @timestamp={0x44, 0x14, 0x12, 0x0, 0xf, [0x7fff, 0x2, 0x3, 0xb]}, @end, @generic={0x1d, 0xd, "e8c6eda661a863751a5fdd"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffbff}}], 0xb0}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x40080) mount(&(0x7f0000000cc0)=@rnullb, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='qnx6\x00', 0x2000000, &(0x7f0000000d80)='.{\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8eae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001}, 0x40080) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001000)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000001040)={0x7, 0xfcd, 0xf, 0x7fff, 0x7, 0x100000000000, 0x84, 0x5, 0x5}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), r8) sendmsg$IEEE802154_START_REQ(r9, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0xc1) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) mount$9p_tcp(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), 0x42044, &(0x7f0000001300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@uname={'uname', 0x3d, '/dev/nbd'}}, {@cache_fscache}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',:'}}, {@obj_type={'obj_type', 0x3d, '{{\xa9@!!.'}}, {@dont_measure}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000013c0), 0x8880, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x404c030) sendmmsg$unix(r6, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001540)="fa5f2792dcb6d871d4baf8b68ac33000a0ccf693f359c8177ddb1b964140130c505270c313af75611f1fcad61821416b37001851a61ed3ed1e037e49", 0x3c}, {&(0x7f0000001580)="a3dba447f5498655f3c7d682861018c8a65b48e75ad597341a85bbd53f606ef7ae157a41c96f6857549cde4b645bc5dd9f5249d508eeea300ce2ffa0f919689169c32159a04831a1c12af0018289db282ac1f83b885eef91cd326139c59e3926d3686486167d162d860816c0f0d54b649a75627d93aa5395e59fd11bf96ef9089c74d82d360ab2f1aad83b2768a5e77110ee029eb7a33252d0d769175e5be0a06d83cbe96add58e16ed667f3a23d965cd1db190cfbaaf16da75ff6bb06508e5b835e70483d8692325c829b5fd4284392998b55c5ce1aa30508d295d8cab2e1265ad69a0bfa57a04c29", 0xe9}, {&(0x7f0000001680)="9d0e38437a6d16ab2316cba69051cb80eff42ab1a0429509dcd30c948475a86c3de9560889b7a0198cb85eb41273973174fd1c1f33f6be48c339bf5edc937c146cad04d9d9ee6dca75cde2fff4315eb687f70f8669cf474059afb5376b1ca4baf6573995bb4a1be3353773cc07515b9b5880cb69d70930765c3d8e134dcf0a527ef20100144f15fb46bf1ac4687dc184b1e7a6511b61f0e9f78474baa898894612c337c146d0f081ba9443eb8a", 0xad}, {&(0x7f0000001740)="d8f8fb628a7b4629ad04edfbe7f2a688830484fba8caec39ec6acd76aeaf6f2cad8bc41b9d652501b512eccb14b3f5641ddecbad60c8aa0e691a43f408180a34c7f8d57e3685b0f5c504b61730f29497c86d19cbb04c095e703ba398d3e2c5bc983760d9a4cbb5cfcb22fdc58714b79577a2f8d6559bf7e60ede2aa978bd76e4bb70939302e9df33f64290d089cd6c4ebb382d1dbf00ec523c1d01d6dbb8ae1255acc110292c5e31de2542441e14fb34cfa9397bbe6ae898e77883a3566f9aee260641dc705f91112dbb8d66", 0xcc}, {&(0x7f0000001840)="e2ab714872c520f18a4cf371a99809a44ab3ede9b0168e91df6aae176f6046c826df77c446a36537f8d8e1b5819ca738835f7b54a085672a91c9ec3504167aef4256b420252482b6ce889d96bb2e482c6c26bd2b57640d5102b60298537ec56f5f02f9f05e90ffe3b8ac08a8d26ae6ceefd316e7682138f5e1181b0ceecd443f72d9ae69e56c38236898f85786ef9a0af2f3a90e864e7c36733cc91c116f3bd568f92f9431b4bed8b17abd90a5257dcfbde605fd7c35c5e3346ca110872c141d4b0dfe032c1e58afad4d994799a21fa536009d", 0xd3}], 0x5, 0x0, 0x0, 0x40d1}}, {{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001a40)="be5373c56bf40c0818fedcd8d87c0ecb9411791ec98b709fda2b0f48dfc8907c688468b4c30b524d3c141d11f8b8c7c39e835906ad4dae0ca0befd501deefe2e15eaa690a78e19209d41622fdb99100feba04a5fc83db93d56711647c2211ef72f54f9130b17b0e38a399bab5e28bd3fa77a0997c1d1c700d040492147a84a0cc080e9da3d21c3506af42ce1b20bd82d3912b9b0755b0796dc8d10176ad511f460b262d16d86f43e7996228ef777a5b7503ab522de093fcbc1df6783f4bd4a3197d9c08dc46688a4581ae1ed9cb2b35e44dfd34d4eaf95189f", 0xd9}, {&(0x7f0000001b40)="43e27d3ab1cf4e75b204b1788b36b76ea41a680fd5fdb97c224d763d0ddcd7fe8382679407330fa3a5457053e84d7f0c8d21d1b074b53a81a3969d85c58fe297496b1011b4734470605a5bfa6d4679cb800de5507c55d6a5d2c5e12d06ea2772bdb9c9f1effdb4382cf091cd209bf3ccf9566abc98fe828e092b316f8f383088351c76816f7db1771b56a34d1b2a53c1b90b94e41820de45077dc048ec2f844f9948d8d3ce385a7346d9412747996628980beeed72f779c2bcf2a260f8a3778c5d07ac5d9563a3839dab601d11cbcf66cc8bfa35771781ea6e03412287a502494b22cf09", 0xe4}, {&(0x7f0000001c40)="6c25765dbe90303f697de41cda307a916c966c38f38a270ab504831ad4963ac0ec695b9d625cdea92293adc8e972d538e76d098aa0139529ab17b2a0", 0x3c}], 0x3, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}, @rights={{0x38, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r11, r5, r0, r11, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r7]}}, @rights={{0x28, 0x1, 0x1, [r5, r0, r11, r1, r7, r11]}}, @rights={{0x1c, 0x1, 0x1, [r11, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x100, 0x4000}}, {{&(0x7f0000003380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003400)="9d3ce59a9e83386e4a54f13ca8", 0xd}], 0x1, 0x0, 0x0, 0x4000044}}], 0x3, 0x40000) 5.474907481s ago: executing program 0 (id=3259): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_reconf_req={{0x19, 0x4, 0x12}, {0x4, 0x5, [0x3, 0x3, 0x9, 0xa, 0x3, 0x1, 0x800]}}}}, 0x1f) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20a000) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x401) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x9, 0x4}, {0xfff3, 0x5}}}}, 0x11) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_open_dev$sndctrl(&(0x7f0000000140), 0x9, 0x45b637dfdebce4e3) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_info_req={{0xa, 0x40, 0x2}, {0x1000}}, @l2cap_info_req={{0xa, 0x3, 0x2}, {0x2}}, @l2cap_cmd_rej_unk={{0x1, 0x81, 0x2}, {0x2}}, @l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x4, 0x4, 0xd3}}, @l2cap_info_req={{0xa, 0x10, 0x2}, {0x2}}]}}, 0x2a) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x1, 0x2016}}}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240)={0xfc}, 0x1) r2 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x341080) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0xfffffffffffffffb, 0x240200) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000440)=@urb_type_interrupt={0x1, {0x9}, 0x800, 0x25, &(0x7f0000000300)="c549594ecb7c724b5e98be0623bfc70c2a30e4da1a00ffeef634f2417921a6f35031afe10e9edd458b9c92ed9795810a034a23012a30c66d222076443c509df6b2236d4f4661f9bf1905251aba6989cecdc7fb651e19d186c96edbdcf5913bee20e564fbc7a93df60591e45655211579286c920f77befd5d8aa2582766180ed8fb867cd321fdb303256d1ba62518f3a8f36ef6165c9fee7e63fef1102fd9b1f0db70780c3c3bfa17ea", 0xa9, 0x7ff, 0xf4f, 0x0, 0x0, 0xb9, &(0x7f00000003c0)="c8f28a0de54c978dac480d72efeee0344d64b630391d8373178f2ff272b5b1b7536b380d3b9a44a9a074067b40d2fd219630460024ca71d1dd1a7089f8d44df32195cb7a9f4fd1275dc32e5f091457b8bd"}) fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, 0x0}) prlimit64(r4, 0x85839be607f44ff9, &(0x7f00000004c0)={0x3, 0x6}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000e00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000540)={0x868, 0xd, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x834, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x25, 0x6, 0x1, 0x0, "1f488d4e3a3fbf9e55241e6badb24d2ea759fde6f0164786a64e85764ec927d505"}, @NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "e7dd8c5aa689ba3581b26b3e6a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x45, 0x1, "c2808c4beefa97ffb22189e10492d60a1e2f088f1ace0a02f7930078aba3339f35ecb213db5c5bace2d6900da1103a42086e741ea5a99486d81ac7b95827525053"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x58b30c9f}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x134, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x78, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x22}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_LOG_PREFIX={0x16, 0x2, 0x1, 0x0, '/dev/input/mouse#\x00'}, @NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2d}, @NFTA_LOG_PREFIX={0x16, 0x2, 0x1, 0x0, '/dev/input/mouse#\x00'}, @NFTA_LOG_LEVEL={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xcfd96fce9389c27f}, @NFTA_TUNNEL_MODE={0x8}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "52b5e939a306c372cb7a47c21580f48e23937a707a23017199f7f7d12e7cc9a4d8324664072d586c8e549593b04c75a02ec6754f82088bc2bc891c9f7a2b6a3a5cad7533dd6ab3c9ce9904d33f1464c148bdd1"}, @NFTA_DATA_VALUE={0xe8, 0x1, "2453ea4a147644365d151f944d8f3e999f45d8cb474cb9634dd2910e62d9e4745ee3a81cb7a0079949d0eed212275ba2e5a1106816f9e3aadf2e333aea61cd249eb3a7f092ffafb2b2bf5ab5d10388870940ed961af7a482757163bd969e5c5291b38e780981bc7047f52dc1d447cb2d1cbe4523e366a1d531563b5f9fb1a4277fd5c8ac91b47442533f7af1429240386b59dcc0815bd3b49511129dcc92271a976bef79bffa387d8d44efc6c6ab15e9dc12e4df80c4c3aefed5196d04b4d0c4e1fe43035fb29691bf8ab9b03d66f927c40b1bd041f6d4becc99a6f24c4df5f115fa26d3"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x83, 0x1, "4acd3feb125aeace73844d846d91f878f32139adf62f6be9d57a626c797299b1d688e3f60f3700c86243414629078c7295f8f0e4c5e01e6e642b115d625a47b3cd200c37dd2f20ed897ef2e84662c3e6d2f04dd8403b9047e64acf25ae5e61d967dbf32264fc9a1360b505476f037b579fdd6046662519931188434b337b90"}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "05cb14411805c6a9907d8bdda5ff67c8c4548184516a643172a56fbaf711098468b6314d282f5562dcf11662ad5b417d5364"}, @NFTA_SET_ELEM_KEY={0x90, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "a4b9e9aa4765e03a7eaff672c84404d05f1d0d07ebe0854163496b5651dd1d4b885c2802a51766aca0b7ad275447e05c73c0b537b9a18553ff6446f5866dea0b90a9a7b660bfb40f320ec74b6f9f9695e00828a93c5a650fe4e4b3ad1ae92517d1cf6c9b38a2188bcd62bd5c5d9c10305deba630613d02844e18c9f44574a243862c512508"}]}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9712}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "e20f3f6c1e"}, @NFTA_DATA_VALUE={0x7b, 0x1, "b2133eacfc9fc22d001bf46f263ee8888887ce06070371eb2a59ecf6f295b794baea32c0af3ff0fe95aa2ca33995cf90c2943e5a6b1e68ca0c86c7e61803cfa839321cfcf207279a4108836adb14ab75d11b2b0918a43e7203b9966c371612891df633ec6712cf9cc478f7569372dcccb4ba97bc9587ab"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x45, 0x1, "caee9589237e24532791a9ec59c97b356db70e541a0e1048353f9971953b6ac7735a632131148d5c6e88b18eed937801faff6dcbbd100b34508fc36b272a057b07"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x868}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x17ef, 0x60ee, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x30, 0x59, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0xf8, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x3d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x6e, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x5, 0xfe}}]}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x250, 0x0, 0x4b, 0x7, 0xbf, 0xb}, 0x5, &(0x7f0000000ec0)={0x5, 0xf, 0x5}, 0x4, [{0x9d, &(0x7f0000000f00)=@string={0x9d, 0x3, "e94ecb7f5d86d96709f044295abdcab6d4979572a04092ea1f163f9b2aac44d7691a90cee4876318189fc540ed740096f084320734db7875586305236842e28505c2b475288cb3cb57eed516016b84f0a9df0dec3c616e152109e42035d8481013abf8db6c4c7fd295866efe8fb4a0ad8653c8bec1bd1f62f306ea20ef6f80701ec960e695736133a480826781a146b5e8bab0d37bbe32ed44b1e7"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x441}}, {0x1d, &(0x7f0000001000)=@string={0x1d, 0x3, "5049602e648fc23aa0b9b32a0995ea5b732e850c6c1a3146b93b28"}}, {0x88, &(0x7f0000001040)=@string={0x88, 0x3, "ac0c147a620b616374af166e60a2e4677dd76bbbf5bfb13fa900f494372a21885aeec848e6ce4292251f4a28eba270c8a50ea24f897b4d914c4b2dc3f7326e96f2ee0b6a933bc23abcc79b5b2b9734171e95fc919c1f5756c9f1d572827c1399640595c478deaa815ad663501ae37f265152ada2c34365409b923fdddefc836a483083ac7d14"}}]}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001180)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0xfffffffffffffffc, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xff, 0xff, 0xffffffff], [0xffffff00, 0xff], 'batadv_slave_1\x00', 'veth0_macvtap\x00', {}, {}, 0x89, 0x2, 0x1, 0xe}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xffffffff, 0xff, 0xffffff00, 0xff], [0x1fe000000, 0x0, 0xff000000, 0xffffff00], 'geneve1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x83, 0xf8, 0x0, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x40, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xde, 0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@ipv6header={{0x28}, {0xa3, 0x45}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000015c0)=""/176) bind$tipc(r3, &(0x7f0000001680)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000016c0)=0x1, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001700), 0x684040, 0x0) syz_open_dev$vbi(&(0x7f0000001740), 0x0, 0x2) 5.318858238s ago: executing program 1 (id=3260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) io_uring_setup(0x3450, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @local}}, 0x5, 0x5, 0x0, 0x200}, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.305784807s ago: executing program 2 (id=3261): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, r0}, 0xc) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a', @ANYRESHEX], 0x0) 5.032332664s ago: executing program 3 (id=3262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000080)={0xfffffffffffffe01, 0x7}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071400000080000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c000000ac141427000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000200000000000000feffffffffffffff02000000fcffffff400000002abd700003350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x24004010) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000000c0)={0x21, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xfeb, 0x3, 0x0, 0x7f, 0x1, 0x4, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x200, @mcast2, 0x7}}, 0x4, 0x400000, 0x1, 0x3ff, 0x8ff}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x201, @remote, 0x102}, 0x1c, &(0x7f0000001880)=[{&(0x7f00000001c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[], 0x28}}], 0x1, 0x854) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) fsopen(&(0x7f0000000200)='bfs\x00', 0x1) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)={0x40, 0x6, 0x1, '+'}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffa, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.816400395s ago: executing program 4 (id=3263): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586", 0xd, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 3.68270149s ago: executing program 0 (id=3264): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x400000000000, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r1, 0x2004, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xb3c}}, './file0\x00'}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x241, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x366, 0x5, 0x2, 0xc, 0xe, 0x7, 0x79, 0x3, 0x80008, 0x2, 0x0, 0x1, 0x7, 0xfffffffd, 0x100, 0x100, 0xfffffffb, 0x8007, 0xbe, 0x7fffffff, 0x89, 0xca9b, 0x0, 0x20001e58, 0x1, 0x74, 0x3, 0x8, 0x2, 0x0, 0xfffffff8]}) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 3.671890173s ago: executing program 1 (id=3265): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c80002000000000000", @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="02004d4a0e29a1b92752e9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 3.196505967s ago: executing program 4 (id=3266): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181d000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181d000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) (async) 1.967611616s ago: executing program 2 (id=3267): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='batadv_slave_1\x00') mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x6, [0x1, 0x8, 0x1, 0x200, 0x33f, 0x5fc24f65]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro32=0x4402, 0xb970, 0x2, 0x80000001}}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0x4167}}, @wrmsr={0x65, 0x20, {0xb81, 0x42}}, @rdmsr={0x66, 0x18, {0x94c}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xc8, {0x0, 0xd, [@nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x2, 0xf}}, @nested_amd_invlpga={0x17d, 0x20, {0x8080000, 0x3ed7}}, @in_dx={0x69, 0x20, {0x31fc, 0x6}}]}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x4, 0x3, 0x40adde6d, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0x5ea5}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x1}, @code={0xa, 0x42, {"0fc77e3c0f225f66b84d008ed067430f7827dbdd0f01c96765470fc77ed6670f001a0f20c035080000000f22c00f4f7100"}}], 0x2a2}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r1, 0x4018aee3, &(0x7f0000000440)=@attr_other={0x0, 0x8, 0xfffffffffffffffc, &(0x7f0000000400)=0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) sched_setscheduler(r2, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="8477b864d5baa538754a53223b756932c35dba0e131c06c9e605b942698f1ff656f6e8545db476262f91de8685d27ee35b2a3f0269535e0301e86c351f910b26d752832b57009dc76f6ce31204baff8fad9b0a3c1ade91803470781bc2d5d1f7908eda0deb964e43d9a4bb8bb73884ea72aad0c6bf39dc7996c47796465cd8b2b1578e5e56be58ccc2", 0x89}, {&(0x7f0000000600)="f3fc6b33e14109f96af76810ba6dc5d5e8be1bbbada354da7a40f8a11d94f72f99eb5279e52ba00069639d116078f2ea27ed25fe7fb64f9683c4ef5acec14e447775cef28e422527c3bedf247f046330b604c52da66d7fab8d5d117b5e5f5477678c466952c1e38ab3d56959d423c7a72715741619d32d783d6153d7768e76a491d1d468bab99e8304bd", 0x8a}, {&(0x7f00000006c0)="035d601674a4f553a6deeb295a7cd5ba11b76c4ac8bf4f52c5ed362d93802ab39b3f41ccc7f4e395fc13", 0x2a}, {&(0x7f0000000700)="2835f72199cfe4c2d8950c1ea0f42acc815fa892cacc7c731ec63b8e4583f66f20ad8a4a70c9c4adec2e5eca557368b57298c4d3acd656eed88925dfb8e3e38db17c6b9f140c941c3ad1", 0x4a}, {&(0x7f0000000780)="2fdb2b2e9b75cd6e0aec47818ab2a67c2bfcdb3bfa7e9cf00cfd8c6053d10b1b185dfd649287758a661f33fe699306a173c1f6534af77e30377f7f2f82de8b85fa88bcec4299d007aa4168f8f43de7c31ca790a79c0e07130196628a6773bfba6f760079b96956253221c511e6585c80232febc3edcc6c8f7021bdcd6138ada3ff88fdeaceb67dc9ceb50ddebbc511dbec845ec887279b9b0bbb46d06d7fd71d9750fe14210d2f5b0a8e853e29821523a84441b086f49aa1f884355714daebf3fb594efe9f5c26b2785669", 0xcb}, {&(0x7f0000000880)="052aed13e0c8ae4d70bd74fab754dbc867ebbe0b6560af82940319f94424f118c3aa81b56d93f1cf23ffbf4443d0974c54bfbc9c8ea8f69b650a140b91e5a132a4593c63fe0b89539993c7410dfdc5f188cc86b24c2511c7f4cca341e2503b07f11a2540a9f54d3c364ceb14122867196a81fbc3b725faf21f8a54fa49f99569561df3bc9e13b22a5597f6dcc861460ed758590102e0963abf58de", 0x9b}, {&(0x7f0000000940)="62d7c9d713fec9ffcfbc48d4682bcbe4e8894a14ca8a6f86893bd354288aa09076dc2252d2dfe40964c2c01c5f9d2a12b04c17a5d53991bb1a55bcf2c232a76cfa2bce7824509cbcc067a3c0b53f293efda46c1ab8bbbe988d20b562743b181d2c9b081a2fdc50cc6397924ae3c00a92aca69058d0ccfe09232a232ace2b66011c9a18bab0ab4292", 0x88}], 0x7, &(0x7f0000000a80)=[@ip_retopts={{0x64, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x2d, [@multicast1, @private=0xa010100, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4}, @end, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x5c, [@broadcast]}, @timestamp={0x44, 0x14, 0x12, 0x0, 0xf, [0x7fff, 0x2, 0x3, 0xb]}, @end, @generic={0x1d, 0xd, "e8c6eda661a863751a5fdd"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffbff}}], 0xb0}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x40080) mount(&(0x7f0000000cc0)=@rnullb, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)='qnx6\x00', 0x2000000, &(0x7f0000000d80)='.{\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8eae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001}, 0x40080) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001000)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000001040)={0x7, 0xfcd, 0xf, 0x7fff, 0x7, 0x100000000000, 0x84, 0x5, 0x5}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), r8) sendmsg$IEEE802154_START_REQ(r9, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0xc1) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) mount$9p_tcp(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), 0x42044, &(0x7f0000001300)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@uname={'uname', 0x3d, '/dev/nbd'}}, {@cache_fscache}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',:'}}, {@obj_type={'obj_type', 0x3d, '{{\xa9@!!.'}}, {@dont_measure}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}]}}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000013c0), 0x8880, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x404c030) sendmmsg$unix(r6, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001540)="fa5f2792dcb6d871d4baf8b68ac33000a0ccf693f359c8177ddb1b964140130c505270c313af75611f1fcad61821416b37001851a61ed3ed1e037e49", 0x3c}, {&(0x7f0000001580)="a3dba447f5498655f3c7d682861018c8a65b48e75ad597341a85bbd53f606ef7ae157a41c96f6857549cde4b645bc5dd9f5249d508eeea300ce2ffa0f919689169c32159a04831a1c12af0018289db282ac1f83b885eef91cd326139c59e3926d3686486167d162d860816c0f0d54b649a75627d93aa5395e59fd11bf96ef9089c74d82d360ab2f1aad83b2768a5e77110ee029eb7a33252d0d769175e5be0a06d83cbe96add58e16ed667f3a23d965cd1db190cfbaaf16da75ff6bb06508e5b835e70483d8692325c829b5fd4284392998b55c5ce1aa30508d295d8cab2e1265ad69a0bfa57a04c29", 0xe9}, {&(0x7f0000001680)="9d0e38437a6d16ab2316cba69051cb80eff42ab1a0429509dcd30c948475a86c3de9560889b7a0198cb85eb41273973174fd1c1f33f6be48c339bf5edc937c146cad04d9d9ee6dca75cde2fff4315eb687f70f8669cf474059afb5376b1ca4baf6573995bb4a1be3353773cc07515b9b5880cb69d70930765c3d8e134dcf0a527ef20100144f15fb46bf1ac4687dc184b1e7a6511b61f0e9f78474baa898894612c337c146d0f081ba9443eb8a", 0xad}, {&(0x7f0000001740)="d8f8fb628a7b4629ad04edfbe7f2a688830484fba8caec39ec6acd76aeaf6f2cad8bc41b9d652501b512eccb14b3f5641ddecbad60c8aa0e691a43f408180a34c7f8d57e3685b0f5c504b61730f29497c86d19cbb04c095e703ba398d3e2c5bc983760d9a4cbb5cfcb22fdc58714b79577a2f8d6559bf7e60ede2aa978bd76e4bb70939302e9df33f64290d089cd6c4ebb382d1dbf00ec523c1d01d6dbb8ae1255acc110292c5e31de2542441e14fb34cfa9397bbe6ae898e77883a3566f9aee260641dc705f91112dbb8d66", 0xcc}, {&(0x7f0000001840)="e2ab714872c520f18a4cf371a99809a44ab3ede9b0168e91df6aae176f6046c826df77c446a36537f8d8e1b5819ca738835f7b54a085672a91c9ec3504167aef4256b420252482b6ce889d96bb2e482c6c26bd2b57640d5102b60298537ec56f5f02f9f05e90ffe3b8ac08a8d26ae6ceefd316e7682138f5e1181b0ceecd443f72d9ae69e56c38236898f85786ef9a0af2f3a90e864e7c36733cc91c116f3bd568f92f9431b4bed8b17abd90a5257dcfbde605fd7c35c5e3346ca110872c141d4b0dfe032c1e58afad4d994799a21fa536009d", 0xd3}], 0x5, 0x0, 0x0, 0x40d1}}, {{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001a40)="be5373c56bf40c0818fedcd8d87c0ecb9411791ec98b709fda2b0f48dfc8907c688468b4c30b524d3c141d11f8b8c7c39e835906ad4dae0ca0befd501deefe2e15eaa690a78e19209d41622fdb99100feba04a5fc83db93d56711647c2211ef72f54f9130b17b0e38a399bab5e28bd3fa77a0997c1d1c700d040492147a84a0cc080e9da3d21c3506af42ce1b20bd82d3912b9b0755b0796dc8d10176ad511f460b262d16d86f43e7996228ef777a5b7503ab522de093fcbc1df6783f4bd4a3197d9c08dc46688a4581ae1ed9cb2b35e44dfd34d4eaf95189f", 0xd9}, {&(0x7f0000001b40)="43e27d3ab1cf4e75b204b1788b36b76ea41a680fd5fdb97c224d763d0ddcd7fe8382679407330fa3a5457053e84d7f0c8d21d1b074b53a81a3969d85c58fe297496b1011b4734470605a5bfa6d4679cb800de5507c55d6a5d2c5e12d06ea2772bdb9c9f1effdb4382cf091cd209bf3ccf9566abc98fe828e092b316f8f383088351c76816f7db1771b56a34d1b2a53c1b90b94e41820de45077dc048ec2f844f9948d8d3ce385a7346d9412747996628980beeed72f779c2bcf2a260f8a3778c5d07ac5d9563a3839dab601d11cbcf66cc8bfa35771781ea6e03412287a502494b22cf09", 0xe4}, {&(0x7f0000001c40)="6c25765dbe90303f697de41cda307a916c966c38f38a270ab504831ad4963ac0ec695b9d625cdea92293adc8e972d538e76d098aa0139529ab17b2a0", 0x3c}], 0x3, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r4}}}, @rights={{0x38, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r11, r5, r0, r11, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r7]}}, @rights={{0x28, 0x1, 0x1, [r5, r0, r11, r1, r7, r11]}}, @rights={{0x1c, 0x1, 0x1, [r11, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x100, 0x4000}}, {{&(0x7f0000003380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003400)="9d3ce59a9e83386e4a54f13ca8", 0xd}], 0x1, 0x0, 0x0, 0x4000044}}], 0x3, 0x40000) 1.955979877s ago: executing program 1 (id=3268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (fail_nth: 2) 1.868350915s ago: executing program 0 (id=3269): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000", @ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="02004d4a0e29a1b92752e9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.184261042s ago: executing program 4 (id=3270): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f00000001c0)=0x319) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close(r7) r8 = socket$inet6(0xa, 0x1, 0x0) listen(r8, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000080), &(0x7f0000000840)=r7}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r13, @ANYBLOB="04005b000600650040"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.173987893s ago: executing program 1 (id=3271): syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x42, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x280, {0xa, 0x6, "4bbad9", 0x1, 0x33, 0xff, @mcast1, @loopback, [@srh={0x4, 0x0, 0x4, 0x0, 0xf9, 0x10, 0x401}], "265754e4c9bca15d72f3"}}}}}}}, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff68}}, 0x1006) 1.047117358s ago: executing program 2 (id=3272): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) kexec_load(0xa, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000340), 0x0, 0xfd, 0x9}, {&(0x7f0000000640)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a1982145b29db115fa871c6310f66f4381fc7c7a7bd49b0b32658d3b7776334bcd5dc9f79e10bb1d79215fdb6292e9d64f45dd4a56f02e1aaa22bcaacc4cd89af510d8e8e17a555f5c648954aed4e2d2a6fca67e2475cd3b88fcae9b1bc20ea4b6b6", 0x9e, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6", 0x84}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c0", 0xa5}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680", 0xd1}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup2(r0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000600)={0x1fe, 0x6, 0xc000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x9, 0x1b}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) sendmsg$AUDIT_USER(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x88, 0x3ed, 0x400, 0x70bd2b, 0x25dfdbff, "72f38f3b932170594f9f07ee8bcd208436826209d87fab86f5dbdce83e644e64c7af95b7b561d30b3ed8fce3a3e27b08d02381690fb6696584845030ba73e56d770c10cdf694261302b94467955e7e901a121d535952965583e7c476e97134d6d2abf625288b70332ad98e7f524ac7072ac4cdda9aec", ["", "", "", "", "", "", "", "", "", ""]}, 0x88}, 0x1, 0x0, 0x0, 0x5498c8ef10196233}, 0x200048c4) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 986.031288ms ago: executing program 0 (id=3273): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 508.732418ms ago: executing program 4 (id=3274): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000001b40)=0x0, &(0x7f0000001b00)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x505}, &(0x7f0000001b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffe}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_1k="fef4d42563c7d987cb63043de02dfbac61d2306fcc195beb478a0e8632a81b3d0a8979ecd02dc5ab43e9eef08abf964abe2a0f71ffe0ac0512c77a2f42767e4a54e13936712d879ca6eb65d6e91991c645ef825e6550199ed7a0058b20078c662dc719daa75a698d7eeac185be010a9944845422d719794c36e051c9d8ad3607ca335987514cad864beef40eba7eade568d1008e46a46ccd6c59037c123f2e71271388857b237a3c4ebcc6c66b061e9264352d53badf3b5bfcdabff5a5411898dd68fb75fb93fbefd9c103d981e02487e671d51289021ed106263ed9d1c9034f5e1bf457c408777bbcfe7382abe44fd63e8285f9d5b3134be0a09340e827ec22d7fd1ccc815ad27dc001738ec2e5b3bc29cfadab67ce7ca3ce2d771468647028ba2edffd1853435268d5b7e9b2521c34fbb15f9b5aaecbc4448ccc4398f57d19c46eb8866df3f3b63ad80c7ba2d5de26bb8f53df1d2fdba7757ecce8067badd4e5c493b6a4a19fe0c2e83300e22e4ea427117282fbbcec5bb6842e0c36336ff50cc4a379209f685d38fd4e7f0411111b271f3c88d8b59c18f4977698fef962770a8f36ff2fedc5d8a4b76faa99e6272de9c7d8f78f5da6e798e790f110685276118a9cffaa26199192b12f434a798fbcfb427b604ac05c27563b0b1d043ee6656d16da66fc55de06206d7bbea8cd3853d04e27b265c361a5237755e2ad491b9168e6d1d1a0d2fe0973b97333e5b9f1b10cc8895c01ef7c872ae03b58fc284512134d5eb3be71c7733e1ec97eaeeb57303f3882be08ae58cab39ace32b3fa1bf680c64a8c670b88b9f46080423d6077b49fd40eeb9f49c16b0073230c6beabfdd1a8fb5b6a7f7b7a70a79bbac1602280fa615335fd0ff8de66bd06f66a8fe6b592da1fe42afc1683044a574b9cccd7d2d1f1c36a35acca47b25b32d91f5825b66fc6155adb55f514304596d5fb190c0a8668ced9c4f498c9c78aa438fb1264d55f503a17f52f8ea24d15a6d4ff31a0297fb66ac741824735071e47b07f180805af055c9ccadf746a7164b4ac59bb2244f376da4200b68224a5f23e98dfdd73e5f6659d4a2d6dfffb061e93dc1e9cbdc80c696398bb0dc2dfbe432af1874fd51cf19083e84effdde55482dbabc3821b02c84e95fe7b6dc43cd9a7df89a48b13bb64c349047c77f2a15c9261d7a1703d0597806c0203f7b56695a88a1686a2a834eb2bba08f4572c6826d7402e6f21ea6e9adc73b1c85239a86d4828e2410872ae33d86124cb31352f5bc22ba22b8c532660a8d3c58f07a86acbc10e80cae49e7419cd8a2a3964d83df54322fcf67d4a916f5504172dd9106c6c1d04174da5e65a56cf943923eef2a4e85acab25bd00ca746667859d3c3e53a0a8ff66a48262100f5b9fdfcc138182ab4dc0638018039ba7792cdda1824a103b3f8ce348befe292e"}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() r10 = socket$netlink(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r12 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r12, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r13 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r13, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) 340.404646ms ago: executing program 1 (id=3275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) io_uring_setup(0x3450, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 202.285684ms ago: executing program 0 (id=3276): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461010090", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {&(0x7f0000000340), 0x0, 0x100, 0x9}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, &(0x7f00000008c0)=[@iv={0xb0, 0x117, 0x2, 0x9b, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652"}], 0xb0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=3277): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3, 0x2, 0x100, "d569e8061000fa0004002000", 0x33524742}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000080)=ANY=[@ANYBLOB="2e2e221e416d36501379f26fb60a1e530942"]) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c000000b89b939d2ee58edc0719a623973c1db4fb8a541de693694204d5ebb9c14e7aa99fbb31f9b4e8f727c4179812b33ebd4cef23366d17"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x40, 0x1, 0x27, "f41d8cee9d5e423c1d90dd67c6c64bb005bd5fa31c4b410d79fae2393657920b7d605a1411f64d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000009c0)=0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_control_io$rtl8150(r1, &(0x7f0000000700)={0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="0010ba000000ba10428f387c5355e5e5d99c3871bb42c4d367529ff509d47bc55e6413696496be4b128ce9734fb4348cd6f15243a0ffd3cccfa03ff5d05a7696f41a517b2406c69603c2566fec1407e76a94757a6383958353c26c5b7cfcbaf7fb20db77a7fcd08fe9657c59ff68771ef17ab25219df3f826a75e2f2566ce66af1ce82884fb331b1fba62b13f363ff45f15a88a41ecfc5f8854ede0d9180441a3955ae5aa0502036a80df6b3e8fca20b59ccb736f09045b96a2bcbb25ce505b0898c63cbe331ed457299769656212bb316b66b9a8807ff2028fd735440e940a7a60cc467b3a63573c1c91026f940"], &(0x7f0000000640)={0x0, 0x3, 0xba, @string={0xba, 0x3, "b5c75108d623f26b71e9b5a3ec06f2acabe183f899a79525bf4ad64ce1ba59878a3029dfb20123db7ff8f9826a4209d1531dc27d3c4842b8e0fb3a08f373ef73b5e86abf61e5b954f757aecc1c5131ef4d364b050ec2caf5fed075ffdd696c6ede5e0a98ef9f1dd9c2b74ac77b8272cdc6b3780fb82439426e27146a8d7f02b0bc8d2965ff8fbfe24c9e491cfbde3b4b8592a1e0ddf4e6fd030d74ba47b4a1ddbfb97707f1c6e85369e0cb539b5d50f898f8dce2785fcff9"}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000740)={0x0, 0x17, 0x1e, "6c522e14ae21173f8f344b31a6a81367bb326929ac637b58f2121ce48397"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0xc0, 0x5, 0x1, "b8"}, &(0x7f0000000840)={0x40, 0x5, 0x5, "58698a06ea"}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, {0x14, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}}, 0x4040800) kernel console output (not intermixed with test programs): 707936][T13961] __x64_sys_statfs+0x120/0x270 [ 801.707971][T13961] ? __pfx___x64_sys_statfs+0x10/0x10 [ 801.708003][T13961] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 801.708038][T13961] ? rt_mutex_slowunlock+0x1cb/0x300 [ 801.708064][T13961] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 801.708118][T13961] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 801.708152][T13961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.708177][T13961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.708202][T13961] do_syscall_64+0x174/0x580 [ 801.708234][T13961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.708257][T13961] ? clear_bhb_loop+0x40/0x90 [ 801.708294][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.708316][T13961] RIP: 0033:0x7f8f18a3ce59 [ 801.708337][T13961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.708356][T13961] RSP: 002b:00007f8f16c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 801.708380][T13961] RAX: ffffffffffffffda RBX: 00007f8f18cb5fa0 RCX: 00007f8f18a3ce59 [ 801.708397][T13961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 801.708410][T13961] RBP: 00007f8f16c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 801.708424][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.708437][T13961] R13: 00007f8f18cb6038 R14: 00007f8f18cb5fa0 R15: 00007ffecd144c38 [ 801.708473][T13961] [ 801.972981][ T38] audit: type=1800 audit(5344357275.686:2014): pid=13946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2716" name="file0" dev="tmpfs" ino=2126 res=0 errno=0 [ 802.139658][T13964] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2723'. [ 802.266975][T12101] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 802.575351][T12101] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 802.575384][T12101] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 802.575406][T12101] usb 2-1: config 220 has no interface number 2 [ 802.575497][T12101] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 802.575525][T12101] usb 2-1: config 220 interface 0 has no altsetting 0 [ 802.575543][T12101] usb 2-1: config 220 interface 76 has no altsetting 0 [ 802.575562][T12101] usb 2-1: config 220 interface 1 has no altsetting 0 [ 802.622678][T12101] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 802.622711][T12101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.622734][T12101] usb 2-1: Product: syz [ 802.622750][T12101] usb 2-1: Manufacturer: syz [ 802.622766][T12101] usb 2-1: SerialNumber: syz [ 803.832264][T13979] FAULT_INJECTION: forcing a failure. [ 803.832264][T13979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.832333][T13979] CPU: 1 UID: 0 PID: 13979 Comm: syz.2.2727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 803.832367][T13979] Tainted: [L]=SOFTLOCKUP [ 803.832375][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 803.832389][T13979] Call Trace: [ 803.832398][T13979] [ 803.832408][T13979] dump_stack_lvl+0xe8/0x150 [ 803.832440][T13979] should_fail_ex+0x467/0x600 [ 803.832480][T13979] _copy_from_user+0x2d/0xb0 [ 803.832529][T13979] do_sock_getsockopt+0x200/0x7e0 [ 803.832575][T13979] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 803.832607][T13979] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 803.832658][T13979] ? __fget_files+0x3a8/0x420 [ 803.832679][T13979] ? __fget_files+0x2a/0x420 [ 803.832709][T13979] __x64_sys_getsockopt+0x1aa/0x250 [ 803.832748][T13979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.832773][T13979] do_syscall_64+0x174/0x580 [ 803.832809][T13979] ? clear_bhb_loop+0x40/0x90 [ 803.832837][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.832860][T13979] RIP: 0033:0x7f6f1664ce59 [ 803.832882][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.832901][T13979] RSP: 002b:00007f6f14864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 803.832924][T13979] RAX: ffffffffffffffda RBX: 00007f6f168c6180 RCX: 00007f6f1664ce59 [ 803.832942][T13979] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000006 [ 803.832955][T13979] RBP: 00007f6f14864090 R08: 0000200000000080 R09: 0000000000000000 [ 803.832970][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.832983][T13979] R13: 00007f6f168c6218 R14: 00007f6f168c6180 R15: 00007ffd533a62c8 [ 803.833019][T13979] [ 804.792609][T12101] usb 2-1: selecting invalid altsetting 0 [ 804.852395][T12101] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 804.852438][T12101] uvcvideo 2-1:220.0: No valid video chain found. [ 804.946964][T12101] usb 2-1: selecting invalid altsetting 0 [ 804.947006][T12101] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 804.974152][T12101] usb 2-1: USB disconnect, device number 59 [ 805.183417][T13306] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 805.343327][T13306] usb 3-1: Using ep0 maxpacket: 32 [ 805.346306][T13306] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 805.346339][T13306] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 805.346368][T13306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 805.350182][T13306] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 805.350216][T13306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.350239][T13306] usb 3-1: Product: syz [ 805.350257][T13306] usb 3-1: Manufacturer: syz [ 805.350273][T13306] usb 3-1: SerialNumber: syz [ 805.428999][T13306] usb 3-1: config 0 descriptor?? [ 805.906921][T13306] gs_usb 3-1:0.0: Configuring for 158 interfaces [ 806.288489][T13997] ALSA: mixer_oss: invalid OSS volume '' [ 806.289277][T13997] ALSA: mixer_oss: invalid OSS volume 'Reûtv¤›kR_]ñªá{¶¹CKç¸$Õ;»' [ 806.329026][ T6775] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 806.471136][ T6775] usb 5-1: device descriptor read/64, error -71 [ 806.653203][T13306] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 806.653522][T13306] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 806.663878][T13306] usb 3-1: USB disconnect, device number 14 [ 806.706266][T12101] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 808.344356][ T6775] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 809.098626][T12101] usb 4-1: device descriptor read/64, error -71 [ 809.169276][T14005] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2737'. [ 809.355970][T12101] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 809.870828][T12101] usb 4-1: device descriptor read/64, error -71 [ 809.975941][T14015] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2741'. [ 809.990280][T12101] usb usb4-port1: attempt power cycle [ 811.814524][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2747'. [ 811.814963][T14036] 8021q: VLANs not supported on wg1 [ 811.880400][T14039] tipc: Enabling of bearer rejected, failed to enable media [ 811.882893][T14039] netlink: 'syz.0.2749': attribute type 2 has an invalid length. [ 811.882911][T14039] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2749'. [ 812.026407][ T37] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 812.188865][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 812.192099][ T37] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.192132][ T37] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 812.192161][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 812.195655][ T37] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 812.195687][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.195710][ T37] usb 4-1: Product: syz [ 812.195727][ T37] usb 4-1: Manufacturer: syz [ 812.195745][ T37] usb 4-1: SerialNumber: syz [ 812.233900][ T37] usb 4-1: config 0 descriptor?? [ 812.662020][T14045] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2751'. [ 812.739167][ T37] gs_usb 4-1:0.0: Configuring for 158 interfaces [ 813.245271][T14051] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2753'. [ 813.423212][ T37] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 813.424071][ T37] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 813.441818][T12101] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 813.474678][ T37] usb 4-1: USB disconnect, device number 18 [ 813.596969][T12101] usb 5-1: Using ep0 maxpacket: 32 [ 813.599585][T12101] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.599614][T12101] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.602690][T12101] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 813.602721][T12101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.602743][T12101] usb 5-1: Product: syz [ 813.602760][T12101] usb 5-1: Manufacturer: syz [ 813.602776][T12101] usb 5-1: SerialNumber: syz [ 813.873316][T12101] usb 5-1: config 0 descriptor?? [ 815.043501][ T5879] usb 5-1: USB disconnect, device number 63 [ 816.797041][T14067] netlink: 'syz.3.2760': attribute type 1 has an invalid length. [ 816.861541][ T38] audit: type=1326 audit(5344357289.450:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.861600][ T38] audit: type=1326 audit(5344357289.450:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.864878][ T38] audit: type=1326 audit(5344357289.450:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.865354][ T38] audit: type=1326 audit(5344357289.450:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.865408][ T38] audit: type=1326 audit(5344357289.450:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.866384][ T38] audit: type=1326 audit(5344357289.450:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.867251][ T38] audit: type=1326 audit(5344357289.450:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.867725][ T38] audit: type=1326 audit(5344357289.450:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.867779][ T38] audit: type=1326 audit(5344357289.450:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 816.868480][ T38] audit: type=1326 audit(5344357289.450:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.2.2759" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1664ce59 code=0x7ffc0000 [ 817.222385][T14067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.323694][ T37] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 817.330911][T14070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.331460][T14070] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 817.333186][T14070] bond1: (slave gre1): Error -95 calling set_mac_address [ 817.483473][T14072] gretap1: entered promiscuous mode [ 817.508224][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 817.533216][ T37] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 817.533251][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.533273][ T37] usb 3-1: Product: syz [ 817.533289][ T37] usb 3-1: Manufacturer: syz [ 817.533306][ T37] usb 3-1: SerialNumber: syz [ 817.566010][ T37] usb 3-1: config 0 descriptor?? [ 817.916835][T14081] fuse: Unknown parameter 'user_i00000000000000000000' [ 818.060881][ T37] airspy 3-1:0.0: Board ID: 00 [ 818.060905][ T37] airspy 3-1:0.0: Firmware version: [ 819.479941][ T37] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 819.666935][ T37] airspy 3-1:0.0: Registered as swradio24 [ 819.666953][ T37] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 819.670349][ T37] usb 3-1: USB disconnect, device number 15 [ 820.066726][T13713] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 820.148858][T14105] FAULT_INJECTION: forcing a failure. [ 820.148858][T14105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.148899][T14105] CPU: 1 UID: 0 PID: 14105 Comm: syz.3.2769 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 820.148944][T14105] Tainted: [L]=SOFTLOCKUP [ 820.148952][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 820.148965][T14105] Call Trace: [ 820.148975][T14105] [ 820.148984][T14105] dump_stack_lvl+0xe8/0x150 [ 820.149018][T14105] should_fail_ex+0x467/0x600 [ 820.149058][T14105] _copy_to_user+0x31/0xb0 [ 820.149099][T14105] simple_read_from_buffer+0xe1/0x170 [ 820.149143][T14105] proc_fail_nth_read+0x1be/0x230 [ 820.149171][T14105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 820.149215][T14105] ? rw_verify_area+0x250/0x4d0 [ 820.149244][T14105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 820.149280][T14105] vfs_read+0x219/0xa90 [ 820.149315][T14105] ? __pfx_vfs_read+0x10/0x10 [ 820.149344][T14105] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 820.149380][T14105] ? lockdep_hardirqs_on+0x7a/0x110 [ 820.149413][T14105] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 820.149447][T14105] ? mutex_lock_nested+0x152/0x1d0 [ 820.149473][T14105] ? fdget_pos+0x252/0x320 [ 820.149505][T14105] ksys_read+0x156/0x270 [ 820.149535][T14105] ? __pfx_ksys_read+0x10/0x10 [ 820.149571][T14105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.149598][T14105] do_syscall_64+0x174/0x580 [ 820.149629][T14105] ? trace_irq_disable+0x3b/0x140 [ 820.149657][T14105] ? clear_bhb_loop+0x40/0x90 [ 820.149687][T14105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.149711][T14105] RIP: 0033:0x7f8f189fd68e [ 820.149738][T14105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 820.149758][T14105] RSP: 002b:00007f8f16c6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 820.149782][T14105] RAX: ffffffffffffffda RBX: 00007f8f16c6d6c0 RCX: 00007f8f189fd68e [ 820.149799][T14105] RDX: 000000000000000f RSI: 00007f8f16c6d0a0 RDI: 0000000000000005 [ 820.149813][T14105] RBP: 00007f8f16c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 820.149827][T14105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.149841][T14105] R13: 00007f8f18cb6128 R14: 00007f8f18cb6090 R15: 00007ffecd144c38 [ 820.149877][T14105] [ 820.237037][T13713] usb 2-1: Using ep0 maxpacket: 32 [ 820.239944][T13713] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.239977][T13713] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 820.240015][T13713] usb 2-1: config 0 interface 0 has no altsetting 0 [ 820.262536][T13713] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 820.262571][T13713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.262595][T13713] usb 2-1: Product: syz [ 820.262612][T13713] usb 2-1: Manufacturer: syz [ 820.262628][T13713] usb 2-1: SerialNumber: syz [ 820.687632][T13713] usb 2-1: config 0 descriptor?? [ 821.279717][T13713] gs_usb 2-1:0.0: Configuring for 158 interfaces [ 823.880796][T13713] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 823.881121][T13713] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 823.912504][T13713] usb 2-1: USB disconnect, device number 60 [ 824.475730][T14120] ip6erspan0: entered allmulticast mode [ 828.250570][T14130] fuse: fd is not a fuse device [ 830.226445][T14164] kAFS: unable to lookup cell 'ÿ' [ 830.226952][T14164] kAFS: unable to lookup cell '(,c¾Ì' [ 834.903431][ T5627] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 835.328555][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.328850][ T5627] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 835.328933][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.949208][ T5627] usb 2-1: config 0 descriptor?? [ 836.195748][ T5627] usbhid 2-1:0.0: can't add hid device: -71 [ 836.195895][ T5627] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 836.221873][ T5627] usb 2-1: USB disconnect, device number 61 [ 836.292835][T14220] syz_tun: entered allmulticast mode [ 836.680772][T14219] syz_tun: left allmulticast mode [ 836.801338][ T5627] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 837.068848][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.068902][ T5627] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 837.068929][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.114194][ T5627] usb 2-1: config 0 descriptor?? [ 837.779376][T14243] FAULT_INJECTION: forcing a failure. [ 837.779376][T14243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 837.779445][T14243] CPU: 1 UID: 0 PID: 14243 Comm: syz.2.2798 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 837.779477][T14243] Tainted: [L]=SOFTLOCKUP [ 837.779485][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.779499][T14243] Call Trace: [ 837.779508][T14243] [ 837.779518][T14243] dump_stack_lvl+0xe8/0x150 [ 837.779550][T14243] should_fail_ex+0x467/0x600 [ 837.779590][T14243] prepare_alloc_pages+0x223/0x690 [ 837.779738][T14243] __alloc_frozen_pages_noprof+0x12f/0x380 [ 837.779774][T14243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 837.779810][T14243] ? __pfx_policy_nodemask+0x10/0x10 [ 837.779865][T14243] ? __lock_acquire+0x683/0x2cc0 [ 837.779912][T14243] alloc_pages_mpol+0xce/0x280 [ 837.779947][T14243] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 837.779981][T14243] vma_alloc_folio_noprof+0xe1/0x1e0 [ 837.780015][T14243] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 837.780047][T14243] ? __pte_offset_map+0x29/0x200 [ 837.780101][T14243] do_pte_missing+0x835/0x28f0 [ 837.780185][T14243] ? handle_mm_fault+0xe8/0x1400 [ 837.780217][T14243] handle_mm_fault+0xd27/0x1400 [ 837.780251][T14243] ? handle_mm_fault+0xe8/0x1400 [ 837.780281][T14243] ? __pfx_handle_mm_fault+0x10/0x10 [ 837.780308][T14243] ? irqentry_exit+0x218/0x8e0 [ 837.780360][T14243] ? do_user_addr_fault+0xa2e/0x1340 [ 837.780394][T14243] do_user_addr_fault+0xa4d/0x1340 [ 837.780432][T14243] ? trace_page_fault_user+0x84/0x1e0 [ 837.780461][T14243] exc_page_fault+0x6a/0xc0 [ 837.780496][T14243] asm_exc_page_fault+0x26/0x30 [ 837.780519][T14243] RIP: 0033:0x7f6f1650e8d1 [ 837.780541][T14243] Code: 00 31 c0 e8 51 3b ff ff 48 8d 3d a5 3a 1d 00 e8 d5 3c ff ff 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 81 ec 78 10 00 00 <48> 89 7c 24 18 48 89 74 24 10 48 89 54 24 08 4c 8b 7c 24 18 4c 8b [ 837.780561][T14243] RSP: 002b:00007f6f14862f70 EFLAGS: 00010202 [ 837.780582][T14243] RAX: 00007f6f1650e8c0 RBX: 00007f6f168c6180 RCX: 0000000000000000 [ 837.780598][T14243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 837.780611][T14243] RBP: 00007f6f14864090 R08: 0000000000000000 R09: 0000000000000000 [ 837.780625][T14243] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 837.780638][T14243] R13: 00007f6f168c6218 R14: 00007f6f168c6180 R15: 00007ffd533a62c8 [ 837.780675][T14243] [ 837.781012][T14243] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 838.283967][T14240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.105651][ T5627] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 839.126813][ T5627] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 839.383342][ T5627] usb 2-1: USB disconnect, device number 62 [ 839.383446][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 839.462671][T14248] syz_tun: entered allmulticast mode [ 839.703336][T14248] dvmrp6: entered allmulticast mode [ 839.732738][T14252] FAULT_INJECTION: forcing a failure. [ 839.732738][T14252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.732784][T14252] CPU: 0 UID: 0 PID: 14252 Comm: syz.2.2800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 839.732822][T14252] Tainted: [L]=SOFTLOCKUP [ 839.732831][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 839.732848][T14252] Call Trace: [ 839.732858][T14252] [ 839.732869][T14252] dump_stack_lvl+0xe8/0x150 [ 839.732905][T14252] should_fail_ex+0x467/0x600 [ 839.732949][T14252] _copy_from_user+0x2d/0xb0 [ 839.732992][T14252] copy_from_sockptr+0x48/0x70 [ 839.733120][T14252] ip_mroute_setsockopt+0x839/0x10d0 [ 839.733160][T14252] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 839.733188][T14252] ? get_pid_task+0x20/0x1f0 [ 839.733222][T14252] ? get_pid_task+0x20/0x1f0 [ 839.733252][T14252] ? get_pid_task+0x20/0x1f0 [ 839.733299][T14252] ? __lock_acquire+0x683/0x2cc0 [ 839.733343][T14252] do_ip_setsockopt+0xeba/0x2e30 [ 839.733394][T14252] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 839.733435][T14252] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 839.733477][T14252] ? __fget_files+0x2a/0x420 [ 839.733518][T14252] ? __fget_files+0x2a/0x420 [ 839.733547][T14252] ip_setsockopt+0x66/0x110 [ 839.733570][T14252] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 839.733605][T14252] do_sock_setsockopt+0x17c/0x1b0 [ 839.733647][T14252] __x64_sys_setsockopt+0x143/0x1b0 [ 839.733686][T14252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.733715][T14252] do_syscall_64+0x174/0x580 [ 839.733750][T14252] ? trace_irq_disable+0x3b/0x140 [ 839.733781][T14252] ? clear_bhb_loop+0x40/0x90 [ 839.733812][T14252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.733838][T14252] RIP: 0033:0x7f6f1664ce59 [ 839.733861][T14252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.733884][T14252] RSP: 002b:00007f6f14864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 839.733910][T14252] RAX: ffffffffffffffda RBX: 00007f6f168c6180 RCX: 00007f6f1664ce59 [ 839.733929][T14252] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 839.733944][T14252] RBP: 00007f6f14864090 R08: 000000000000003c R09: 0000000000000000 [ 839.733960][T14252] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 839.733976][T14252] R13: 00007f6f168c6218 R14: 00007f6f168c6180 R15: 00007ffd533a62c8 [ 839.734016][T14252] [ 839.952628][T14247] syz_tun: left allmulticast mode [ 842.431507][ T5603] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 842.623034][ T5603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 842.641217][ T5603] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 842.641248][ T5603] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 842.641277][ T5603] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 842.641301][ T5603] usb 2-1: config 13 has no interface number 0 [ 842.641351][ T5603] usb 2-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 842.641382][ T5603] usb 2-1: config 13 interface 50 has no altsetting 0 [ 842.711223][ T5603] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 842.711264][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.711288][ T5603] usb 2-1: Product: syz [ 842.711305][ T5603] usb 2-1: Manufacturer: syz [ 842.711322][ T5603] usb 2-1: SerialNumber: syz [ 843.078153][ T5603] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 843.117329][ T5603] usb 2-1: USB disconnect, device number 63 [ 843.138734][ T197] usb 2-1: Failed to submit usb control message: -19 [ 843.138776][ T197] usb 2-1: unable to send the bmi data to the device: -19 [ 843.138797][ T197] usb 2-1: unable to get target info from device [ 843.138824][ T197] usb 2-1: could not get target info (-19) [ 843.139217][ T197] usb 2-1: could not probe fw (-19) [ 843.785557][ T5527] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 843.948087][ T5527] usb 3-1: Using ep0 maxpacket: 16 [ 843.950546][ T5527] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.950604][ T5527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.950636][ T5527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 843.950661][ T5527] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 843.950686][ T5527] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.952439][ T5527] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 843.952470][ T5527] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 843.952494][ T5527] usb 3-1: Manufacturer: syz [ 844.035983][ T5527] usb 3-1: config 0 descriptor?? [ 844.220102][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 844.220128][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 844.342508][ T149] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.342832][ T149] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.342879][ T149] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.342923][ T149] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.500447][ T5527] rc_core: IR keymap rc-hauppauge not found [ 844.500482][ T5527] Registered IR keymap rc-empty [ 844.500657][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.522172][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.548200][ T5527] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 844.571734][ T5527] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 844.649442][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.663482][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.690520][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.710554][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.732443][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.749670][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.777276][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.793218][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.815427][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.836684][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 844.935382][ T5527] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 844.935404][ T5527] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 845.022428][ T5527] usb 3-1: USB disconnect, device number 16 [ 850.138412][T14366] vivid-001: disconnect [ 850.497966][T14359] vivid-001: reconnect [ 853.674987][T12101] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 853.845202][T12101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 853.846498][T12101] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 853.846526][T12101] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 853.846564][T12101] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 853.846589][T12101] usb 3-1: config 13 has no interface number 0 [ 853.846640][T12101] usb 3-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 853.846672][T12101] usb 3-1: config 13 interface 50 has no altsetting 0 [ 853.910910][T12101] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 853.910944][T12101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.910968][T12101] usb 3-1: Product: syz [ 853.910984][T12101] usb 3-1: Manufacturer: syz [ 853.911001][T12101] usb 3-1: SerialNumber: syz [ 854.373990][T12101] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 854.410567][T12101] usb 3-1: USB disconnect, device number 17 [ 854.418549][T11739] usb 3-1: Failed to submit usb control message: -19 [ 854.418590][T11739] usb 3-1: unable to send the bmi data to the device: -19 [ 854.418612][T11739] usb 3-1: unable to get target info from device [ 854.418629][T11739] usb 3-1: could not get target info (-19) [ 854.418749][T11739] usb 3-1: could not probe fw (-19) [ 855.129060][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 855.130258][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.036751][T14437] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2843'. [ 858.945436][T14447] pimreg: entered allmulticast mode [ 860.325210][T14460] binder: 14459:14460 ioctl c0306201 200000004a40 returned -22 [ 861.802817][T14469] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2855'. [ 865.391588][T14494] fuse: fd is not a fuse device [ 868.642834][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 868.902559][T14523] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2869'. [ 870.501451][T14519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.518235][T14519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.876506][ T37] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 874.039006][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 874.044622][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.044727][ T37] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.047901][ T37] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 874.047933][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.047955][ T37] usb 3-1: Product: syz [ 874.047972][ T37] usb 3-1: Manufacturer: syz [ 874.047988][ T37] usb 3-1: SerialNumber: syz [ 874.111038][ T37] usb 3-1: config 0 descriptor?? [ 874.348612][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 874.427787][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.427828][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.428250][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.428284][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.428327][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.428356][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.428396][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.428425][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.466502][T12101] usb 3-1: USB disconnect, device number 18 [ 876.137923][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2885'. [ 876.229841][T14587] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2892'. [ 876.447503][T14591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 876.469090][T14591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 877.045417][T14605] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2898'. [ 877.045459][T14605] openvswitch: netlink: Missing key (keys=40, expected=100) [ 880.031413][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2905'. [ 882.444529][ T5527] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 882.599115][ T5736] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 882.617774][ T5527] usb 3-1: Using ep0 maxpacket: 16 [ 882.660577][ T5527] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.660639][ T5527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 882.660903][ T5527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 882.703090][ T5527] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 882.703125][ T5527] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.729089][ T5527] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 882.729197][ T5527] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 882.729223][ T5527] usb 3-1: Manufacturer: syz [ 882.787394][ T5527] usb 3-1: config 0 descriptor?? [ 883.238136][T14669] FAULT_INJECTION: forcing a failure. [ 883.238136][T14669] name failslab, interval 1, probability 0, space 0, times 0 [ 883.238167][T14669] CPU: 0 UID: 0 PID: 14669 Comm: syz.1.2917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 883.238189][T14669] Tainted: [L]=SOFTLOCKUP [ 883.238195][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.238206][T14669] Call Trace: [ 883.238212][T14669] [ 883.238218][T14669] dump_stack_lvl+0xe8/0x150 [ 883.238245][T14669] should_fail_ex+0x467/0x600 [ 883.238275][T14669] should_failslab+0xa8/0x100 [ 883.238299][T14669] __kmalloc_noprof+0xdf/0x7a0 [ 883.238318][T14669] ? kfree+0x4d/0x6c0 [ 883.238333][T14669] ? tomoyo_realpath_from_path+0xef/0x640 [ 883.238358][T14669] tomoyo_realpath_from_path+0xef/0x640 [ 883.238384][T14669] ? tomoyo_path_number_perm+0x219/0x5f0 [ 883.238409][T14669] tomoyo_path_number_perm+0x246/0x5f0 [ 883.238437][T14669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 883.238461][T14669] ? __lock_acquire+0x683/0x2cc0 [ 883.238488][T14669] ? do_raw_spin_lock+0x12b/0x2f0 [ 883.238514][T14669] ? hook_file_ioctl+0x1f3/0x5d0 [ 883.238550][T14669] ? __fget_files+0x2a/0x420 [ 883.238576][T14669] ? __fget_files+0x2a/0x420 [ 883.238590][T14669] ? __fget_files+0x3a8/0x420 [ 883.238603][T14669] ? __fget_files+0x2a/0x420 [ 883.238621][T14669] security_file_ioctl+0xc3/0x2a0 [ 883.238648][T14669] __se_sys_ioctl+0x47/0x170 [ 883.238669][T14669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.238687][T14669] do_syscall_64+0x174/0x580 [ 883.238714][T14669] ? trace_irq_disable+0x3b/0x140 [ 883.238735][T14669] ? clear_bhb_loop+0x40/0x90 [ 883.238755][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.238771][T14669] RIP: 0033:0x7f04fb2fce59 [ 883.238786][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.238800][T14669] RSP: 002b:00007f04f954e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.238817][T14669] RAX: ffffffffffffffda RBX: 00007f04fb575fa0 RCX: 00007f04fb2fce59 [ 883.238829][T14669] RDX: 0000200000000080 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 883.238839][T14669] RBP: 00007f04f954e090 R08: 0000000000000000 R09: 0000000000000000 [ 883.238849][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.238859][T14669] R13: 00007f04fb576038 R14: 00007f04fb575fa0 R15: 00007fff91f34978 [ 883.238884][T14669] [ 883.238890][T14669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 884.935833][ T5527] rc_core: IR keymap rc-hauppauge not found [ 884.935849][ T5527] Registered IR keymap rc-empty [ 884.936023][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 884.965913][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.018338][ T5527] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 885.102809][ T5527] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 885.188833][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.219166][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.239471][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.261018][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.282520][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.304679][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.326287][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.347960][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.369158][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.394113][ T5527] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 885.463970][ T5527] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 885.464002][ T5527] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 885.550817][ T5527] usb 3-1: USB disconnect, device number 19 [ 887.960024][T12101] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 888.853473][T12101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 888.853510][T12101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 888.853540][T12101] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 888.853587][T12101] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 888.853612][T12101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.930982][T12101] usb 4-1: config 0 descriptor?? [ 888.933231][T14723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 889.230653][T14723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.261765][T14723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.345418][T14723] overlayfs: failed to resolve './file0': -2 [ 889.582712][ T5603] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 889.756026][ T5603] usb 5-1: Using ep0 maxpacket: 16 [ 889.765670][ T5603] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 889.765708][ T5603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 889.771018][ T5603] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 889.771107][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.771144][ T5603] usb 5-1: Product: syz [ 889.771161][ T5603] usb 5-1: Manufacturer: syz [ 889.771178][ T5603] usb 5-1: SerialNumber: syz [ 889.805369][ T5603] usb 5-1: config 0 descriptor?? [ 889.867871][ T5603] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 889.867910][ T5603] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 890.121990][T12101] usbhid 4-1:0.0: can't add hid device: -71 [ 890.122219][T12101] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 890.145912][T12101] usb 4-1: USB disconnect, device number 19 [ 890.533957][ T5603] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 890.546391][ T5603] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 892.101215][T14739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.101901][T14739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.324247][ T5603] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 892.490613][ T5603] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 892.491073][ T5603] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 892.491529][ T5603] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 892.492001][ T5603] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 892.492358][ T5603] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 892.564086][ T5603] usb 5-1: USB disconnect, device number 65 [ 892.912682][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 894.184068][T13713] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 894.300081][T14795] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2943'. [ 894.327072][T13713] usb 2-1: device descriptor read/64, error -71 [ 895.227859][T13713] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 895.995977][T13713] usb 2-1: device descriptor read/64, error -71 [ 896.158642][T13713] usb usb2-port1: attempt power cycle [ 899.430281][ T5603] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 899.602224][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 899.604638][ T5603] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.604671][ T5603] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.604698][ T5603] usb 4-1: config 0 interface 0 has no altsetting 0 [ 899.609518][ T5603] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 899.609563][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.609587][ T5603] usb 4-1: Product: syz [ 899.609604][ T5603] usb 4-1: Manufacturer: syz [ 899.609620][ T5603] usb 4-1: SerialNumber: syz [ 899.695957][ T5603] usb 4-1: config 0 descriptor?? [ 900.660176][ T5603] gs_usb 4-1:0.0: Configuring for 158 interfaces [ 900.988682][ T5627] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 902.150790][ T5627] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 902.150889][ T5627] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 902.150920][ T5627] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 902.150949][ T5627] usb 2-1: config 0 interface 0 has no altsetting 0 [ 902.151064][ T5627] usb 2-1: New USB device found, idVendor=18d1, idProduct=502b, bcdDevice= 0.00 [ 902.151090][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.282718][ T5603] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 902.283038][ T5603] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 902.323118][ T5627] usb 2-1: config 0 descriptor?? [ 902.323974][T14852] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 902.385735][ T5603] usb 4-1: USB disconnect, device number 20 [ 902.782456][ T5627] hid (null): report_id 0 is invalid [ 902.812940][ T5627] hid-generic 0003:18D1:502B.0006: ignoring exceeding usage max [ 902.816306][ T5627] hid-generic 0003:18D1:502B.0006: report_id 0 is invalid [ 902.816331][ T5627] hid-generic 0003:18D1:502B.0006: item 0 0 1 8 parsing failed [ 902.818923][ T5627] hid-generic 0003:18D1:502B.0006: probe with driver hid-generic failed with error -22 [ 904.121439][ T5603] usb 2-1: USB disconnect, device number 67 [ 904.999885][ T5603] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 905.170188][ T5603] usb 3-1: Using ep0 maxpacket: 8 [ 905.550802][ T5603] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 905.584740][ T5603] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 905.584770][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.584835][ T5603] usb 3-1: Product: syz [ 905.584890][ T5603] usb 3-1: Manufacturer: syz [ 905.584946][ T5603] usb 3-1: SerialNumber: syz [ 905.909512][ T5603] cdc_ncm 3-1:1.0: bind() failure [ 905.951548][ T5603] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 905.951598][ T5603] cdc_ncm 3-1:1.1: bind() failure [ 907.439457][ T5603] usb 3-1: USB disconnect, device number 20 [ 909.445305][T14945] netlink: 'syz.1.2980': attribute type 2 has an invalid length. [ 909.591475][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'. [ 909.591499][T14952] openvswitch: netlink: Message has 16 unknown bytes. [ 910.710165][T14969] FAULT_INJECTION: forcing a failure. [ 910.710165][T14969] name failslab, interval 1, probability 0, space 0, times 0 [ 910.710210][T14969] CPU: 0 UID: 0 PID: 14969 Comm: syz.4.2987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 910.710247][T14969] Tainted: [L]=SOFTLOCKUP [ 910.710256][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 910.710271][T14969] Call Trace: [ 910.710280][T14969] [ 910.710292][T14969] dump_stack_lvl+0xe8/0x150 [ 910.710329][T14969] should_fail_ex+0x467/0x600 [ 910.710372][T14969] should_failslab+0xa8/0x100 [ 910.710407][T14969] __kmalloc_noprof+0xdf/0x7a0 [ 910.710437][T14969] ? kfree+0x4d/0x6c0 [ 910.710460][T14969] ? tomoyo_realpath_from_path+0xef/0x640 [ 910.710498][T14969] tomoyo_realpath_from_path+0xef/0x640 [ 910.710540][T14969] ? tomoyo_path_number_perm+0x219/0x5f0 [ 910.710581][T14969] tomoyo_path_number_perm+0x246/0x5f0 [ 910.710625][T14969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 910.710662][T14969] ? __lock_acquire+0x683/0x2cc0 [ 910.710701][T14969] ? do_raw_spin_lock+0x12b/0x2f0 [ 910.710743][T14969] ? hook_file_ioctl+0x1f3/0x5d0 [ 910.710803][T14969] ? __fget_files+0x2a/0x420 [ 910.710831][T14969] ? __fget_files+0x2a/0x420 [ 910.710857][T14969] ? __fget_files+0x3a8/0x420 [ 910.710881][T14969] ? __fget_files+0x2a/0x420 [ 910.710912][T14969] security_file_ioctl+0xc3/0x2a0 [ 910.710954][T14969] __se_sys_ioctl+0x47/0x170 [ 910.710986][T14969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.711015][T14969] do_syscall_64+0x174/0x580 [ 910.711052][T14969] ? trace_irq_disable+0x3b/0x140 [ 910.711081][T14969] ? clear_bhb_loop+0x40/0x90 [ 910.711123][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.711150][T14969] RIP: 0033:0x7f776086ce59 [ 910.711173][T14969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.711196][T14969] RSP: 002b:00007f775eac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.711222][T14969] RAX: ffffffffffffffda RBX: 00007f7760ae5fa0 RCX: 00007f776086ce59 [ 910.711241][T14969] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 910.711258][T14969] RBP: 00007f775eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 910.711274][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.711289][T14969] R13: 00007f7760ae6038 R14: 00007f7760ae5fa0 R15: 00007ffef462a528 [ 910.711330][T14969] [ 910.714183][T14969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 911.513481][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 911.583483][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 911.595702][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 911.615128][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 911.615957][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 911.679702][ T5603] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 911.842739][ T5603] usb 4-1: Using ep0 maxpacket: 8 [ 911.845999][ T5603] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 911.846077][ T5603] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 911.846107][ T5603] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 911.846138][ T5603] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 911.846169][ T5603] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.846221][ T5603] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 911.846250][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.932907][ T5626] Bluetooth: hci4: command tx timeout [ 914.804780][ T1508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.029127][ T5527] usb 4-1: USB disconnect, device number 21 [ 915.869235][ T1508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.186824][ T5626] Bluetooth: hci4: command tx timeout [ 917.257148][ T1508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.389272][T15068] FAULT_INJECTION: forcing a failure. [ 917.389272][T15068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.389315][T15068] CPU: 1 UID: 0 PID: 15068 Comm: syz.3.3006 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 917.389347][T15068] Tainted: [L]=SOFTLOCKUP [ 917.389356][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 917.389370][T15068] Call Trace: [ 917.389379][T15068] [ 917.389388][T15068] dump_stack_lvl+0xe8/0x150 [ 917.389422][T15068] should_fail_ex+0x467/0x600 [ 917.389461][T15068] _copy_from_user+0x2d/0xb0 [ 917.389498][T15068] ___sys_sendmsg+0x1c6/0x360 [ 917.389535][T15068] ? __lock_acquire+0x683/0x2cc0 [ 917.389571][T15068] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.389645][T15068] ? __fget_files+0x2a/0x420 [ 917.389667][T15068] ? __fget_files+0x3a8/0x420 [ 917.389700][T15068] __x64_sys_sendmsg+0x1c3/0x2a0 [ 917.389745][T15068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 917.389791][T15068] ? __pfx_ksys_write+0x10/0x10 [ 917.389827][T15068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.389853][T15068] do_syscall_64+0x174/0x580 [ 917.389887][T15068] ? trace_irq_disable+0x3b/0x140 [ 917.389914][T15068] ? clear_bhb_loop+0x40/0x90 [ 917.389943][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.389967][T15068] RIP: 0033:0x7f8f18a3ce59 [ 917.389988][T15068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.390009][T15068] RSP: 002b:00007f8f16c8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.390035][T15068] RAX: ffffffffffffffda RBX: 00007f8f18cb5fa0 RCX: 00007f8f18a3ce59 [ 917.390052][T15068] RDX: 0000000024008084 RSI: 0000200000000300 RDI: 0000000000000003 [ 917.390066][T15068] RBP: 00007f8f16c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 917.390079][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.390092][T15068] R13: 00007f8f18cb6038 R14: 00007f8f18cb5fa0 R15: 00007ffecd144c38 [ 917.390127][T15068] [ 917.973018][ T6775] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 918.085729][T15082] FAULT_INJECTION: forcing a failure. [ 918.085729][T15082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.085781][T15082] CPU: 0 UID: 0 PID: 15082 Comm: syz.2.3008 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 918.085815][T15082] Tainted: [L]=SOFTLOCKUP [ 918.085824][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 918.085839][T15082] Call Trace: [ 918.085848][T15082] [ 918.085857][T15082] dump_stack_lvl+0xe8/0x150 [ 918.085891][T15082] should_fail_ex+0x467/0x600 [ 918.085930][T15082] _copy_from_user+0x2d/0xb0 [ 918.085968][T15082] ___sys_sendmsg+0x1c6/0x360 [ 918.086005][T15082] ? __lock_acquire+0x683/0x2cc0 [ 918.086042][T15082] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.086172][T15082] ? __fget_files+0x2a/0x420 [ 918.086196][T15082] ? __fget_files+0x3a8/0x420 [ 918.086225][T15082] __x64_sys_sendmsg+0x1c3/0x2a0 [ 918.086263][T15082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.086307][T15082] ? __pfx_ksys_write+0x10/0x10 [ 918.086344][T15082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.086369][T15082] do_syscall_64+0x174/0x580 [ 918.086406][T15082] ? clear_bhb_loop+0x40/0x90 [ 918.086435][T15082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.086470][T15082] RIP: 0033:0x7f6f1664ce59 [ 918.086493][T15082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.086514][T15082] RSP: 002b:00007f6f14885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.086538][T15082] RAX: ffffffffffffffda RBX: 00007f6f168c6090 RCX: 00007f6f1664ce59 [ 918.086555][T15082] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 918.086570][T15082] RBP: 00007f6f14885090 R08: 0000000000000000 R09: 0000000000000000 [ 918.086584][T15082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.086598][T15082] R13: 00007f6f168c6128 R14: 00007f6f168c6090 R15: 00007ffd533a62c8 [ 918.086633][T15082] [ 918.135708][ T6775] usb 2-1: Using ep0 maxpacket: 8 [ 918.250687][ T6775] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 918.250721][ T6775] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 918.250833][ T6775] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.250900][ T6775] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 918.250979][ T6775] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 918.251071][ T6775] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 918.251113][ T6775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.438881][ T5626] Bluetooth: hci4: command tx timeout [ 918.776731][ T6775] usbtmc 2-1:16.0: bulk endpoints not found [ 919.051098][ T1508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.492781][ T5603] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 919.662859][ T5603] usb 5-1: Using ep0 maxpacket: 32 [ 919.672166][ T5603] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.672206][ T5603] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 919.672232][ T5603] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 919.672261][ T5603] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 919.672288][ T5603] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 919.676299][ T5603] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 919.676384][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 919.676446][ T5603] usb 5-1: SerialNumber: syz [ 919.811788][T15090] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 919.870930][ T5603] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 920.008568][ T5603] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 920.432108][T14978] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.433864][T14978] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.434089][T14978] bridge_slave_0: entered allmulticast mode [ 920.437111][T14978] bridge_slave_0: entered promiscuous mode [ 920.553419][T14978] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.553552][T14978] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.553747][T14978] bridge_slave_1: entered allmulticast mode [ 920.566243][T14978] bridge_slave_1: entered promiscuous mode [ 920.693256][ T5626] Bluetooth: hci4: command tx timeout [ 920.972919][T14978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.985965][T14978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.065648][T14978] team0: Port device team_slave_0 added [ 921.073694][T14978] team0: Port device team_slave_1 added [ 921.135234][T14978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.135255][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.135288][T14978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.139567][T14978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.139584][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.139618][T14978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.412714][T14978] hsr_slave_0: entered promiscuous mode [ 921.414691][T14978] hsr_slave_1: entered promiscuous mode [ 921.416822][T14978] debugfs: 'hsr0' already exists in 'hsr' [ 921.416850][T14978] Cannot create hsr debugfs directory [ 921.515151][ T5750] usb 2-1: USB disconnect, device number 68 [ 921.657691][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 921.657768][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 922.979755][ T37] usb 5-1: USB disconnect, device number 66 [ 924.376787][ T1508] bridge_slave_1: left allmulticast mode [ 924.376817][ T1508] bridge_slave_1: left promiscuous mode [ 924.383897][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.396572][ T5603] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 924.572605][ T1508] bridge_slave_0: left allmulticast mode [ 924.572632][ T1508] bridge_slave_0: left promiscuous mode [ 924.572857][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.591482][ T5603] usb 5-1: Using ep0 maxpacket: 32 [ 924.610857][T15150] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 924.610857][T15150] program syz.2.3020 not setting count and/or reply_len properly [ 924.615138][ T5603] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.615220][ T5603] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.615285][ T5603] usb 5-1: config 0 interface 0 has no altsetting 0 [ 924.658272][ T5603] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 924.658304][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.658336][ T5603] usb 5-1: Product: syz [ 924.658352][ T5603] usb 5-1: Manufacturer: syz [ 924.658367][ T5603] usb 5-1: SerialNumber: syz [ 924.673969][ T5603] usb 5-1: config 0 descriptor?? [ 924.822926][ T1508] dvmrp8: left allmulticast mode [ 925.210537][ T5603] gs_usb 5-1:0.0: Configuring for 158 interfaces [ 925.430903][ T5603] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 925.430962][ T5603] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 925.826948][ T1508] bond1 (unregistering): (slave geneve2): Releasing active interface [ 926.368640][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.455241][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.506071][ T1508] bond0 (unregistering): Released all slaves [ 926.523940][ T1508] bond1 (unregistering): Released all slaves [ 926.584846][ T1508] bond2 (unregistering): (slave dummy0): Removing an active aggregator [ 926.585787][ T1508] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 926.629052][ T1508] bond2 (unregistering): Released all slaves [ 928.240785][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3026'. [ 928.475965][ T5603] usb 5-1: USB disconnect, device number 67 [ 928.497294][T15184] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3027'. [ 929.076801][T15190] FAULT_INJECTION: forcing a failure. [ 929.076801][T15190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.076842][T15190] CPU: 1 UID: 0 PID: 15190 Comm: syz.4.3028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 929.076874][T15190] Tainted: [L]=SOFTLOCKUP [ 929.076882][T15190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 929.076895][T15190] Call Trace: [ 929.076904][T15190] [ 929.076913][T15190] dump_stack_lvl+0xe8/0x150 [ 929.076946][T15190] should_fail_ex+0x467/0x600 [ 929.077018][T15190] _copy_to_user+0x31/0xb0 [ 929.077057][T15190] simple_read_from_buffer+0xe1/0x170 [ 929.077102][T15190] proc_fail_nth_read+0x1be/0x230 [ 929.077127][T15190] ? ldsem_up_read+0xcd/0x130 [ 929.077282][T15190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 929.077328][T15190] ? rw_verify_area+0x250/0x4d0 [ 929.077356][T15190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 929.077393][T15190] vfs_read+0x219/0xa90 [ 929.077429][T15190] ? __pfx_vfs_read+0x10/0x10 [ 929.077458][T15190] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 929.077493][T15190] ? lockdep_hardirqs_on+0x7a/0x110 [ 929.077524][T15190] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 929.077558][T15190] ? mutex_lock_nested+0x152/0x1d0 [ 929.077582][T15190] ? fdget_pos+0x252/0x320 [ 929.077613][T15190] ksys_read+0x156/0x270 [ 929.077643][T15190] ? __pfx_ksys_read+0x10/0x10 [ 929.077679][T15190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.077706][T15190] do_syscall_64+0x174/0x580 [ 929.077738][T15190] ? trace_irq_disable+0x3b/0x140 [ 929.077765][T15190] ? clear_bhb_loop+0x40/0x90 [ 929.077795][T15190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.077818][T15190] RIP: 0033:0x7f776082d68e [ 929.077839][T15190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 929.077859][T15190] RSP: 002b:00007f775eac5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 929.077883][T15190] RAX: ffffffffffffffda RBX: 00007f775eac66c0 RCX: 00007f776082d68e [ 929.077900][T15190] RDX: 000000000000000f RSI: 00007f775eac60a0 RDI: 0000000000000005 [ 929.077914][T15190] RBP: 00007f775eac6090 R08: 0000000000000000 R09: 0000000000000000 [ 929.077927][T15190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.077941][T15190] R13: 00007f7760ae6038 R14: 00007f7760ae5fa0 R15: 00007ffef462a528 [ 929.077984][T15190] [ 930.590410][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 931.004055][ T5736] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 931.180925][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.180963][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.180989][ T5736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 931.181037][ T5736] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 931.181064][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.251495][ T5736] usb 4-1: config 0 descriptor?? [ 931.745516][ T5736] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 14/15 [ 931.749855][ T5736] plantronics 0003:047F:FFFF.0007: parse failed [ 931.776854][ T5736] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 931.959718][ T5603] usb 4-1: USB disconnect, device number 22 [ 932.282036][ T5736] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 932.446903][ T5736] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 932.446965][ T5736] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 932.446987][ T5736] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.447018][ T5736] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.447035][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.527799][ T5736] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 932.528871][ T5736] usb 5-1: invalid MIDI out EP 0 [ 933.191158][ T5736] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 933.211932][ T5736] usb 5-1: USB disconnect, device number 68 [ 933.526998][T15221] fuse: Bad value for 'user_id' [ 933.527019][T15221] fuse: Bad value for 'user_id' [ 934.061380][ T1508] hsr_slave_0: left promiscuous mode [ 934.102144][ T1508] hsr_slave_1: left promiscuous mode [ 934.103203][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.103232][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.176102][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.176134][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.272536][T15238] FAULT_INJECTION: forcing a failure. [ 934.272536][T15238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.272578][T15238] CPU: 1 UID: 0 PID: 15238 Comm: syz.1.3040 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 934.272609][T15238] Tainted: [L]=SOFTLOCKUP [ 934.272617][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 934.272631][T15238] Call Trace: [ 934.272640][T15238] [ 934.272649][T15238] dump_stack_lvl+0xe8/0x150 [ 934.272682][T15238] should_fail_ex+0x467/0x600 [ 934.272720][T15238] _copy_from_user+0x2d/0xb0 [ 934.272755][T15238] ___sys_sendmsg+0x1c6/0x360 [ 934.272789][T15238] ? __lock_acquire+0x683/0x2cc0 [ 934.272825][T15238] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.272865][T15238] ? kstrtouint+0x6e/0xe0 [ 934.272919][T15238] ? __fget_files+0x2a/0x420 [ 934.272941][T15238] ? __fget_files+0x3a8/0x420 [ 934.272974][T15238] __sys_sendmmsg+0x282/0x4e0 [ 934.273014][T15238] ? __pfx___sys_sendmmsg+0x10/0x10 [ 934.273056][T15238] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 934.273093][T15238] ? ksys_write+0x248/0x270 [ 934.273117][T15238] ? __pfx_ksys_write+0x10/0x10 [ 934.273144][T15238] __x64_sys_sendmmsg+0xa0/0xc0 [ 934.273171][T15238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.273191][T15238] do_syscall_64+0x174/0x580 [ 934.273218][T15238] ? trace_irq_disable+0x3b/0x140 [ 934.273240][T15238] ? clear_bhb_loop+0x40/0x90 [ 934.273263][T15238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.273281][T15238] RIP: 0033:0x7f04fb2fce59 [ 934.273302][T15238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.273317][T15238] RSP: 002b:00007f04f954e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.273337][T15238] RAX: ffffffffffffffda RBX: 00007f04fb575fa0 RCX: 00007f04fb2fce59 [ 934.273351][T15238] RDX: 0000000000000002 RSI: 0000200000002b40 RDI: 0000000000000003 [ 934.273362][T15238] RBP: 00007f04f954e090 R08: 0000000000000000 R09: 0000000000000000 [ 934.273374][T15238] R10: 0000000004048050 R11: 0000000000000246 R12: 0000000000000001 [ 934.273385][T15238] R13: 00007f04fb576038 R14: 00007f04fb575fa0 R15: 00007fff91f34978 [ 934.273413][T15238] [ 934.543103][ T1508] veth1_macvtap: left promiscuous mode [ 934.543215][ T1508] veth0_macvtap: left promiscuous mode [ 934.565522][ T1508] veth1_vlan: left promiscuous mode [ 934.565739][ T1508] veth0_vlan: left promiscuous mode [ 934.743348][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3041'. [ 934.743385][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3041'. [ 936.507980][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 936.572323][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 937.604904][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3044'. [ 937.695143][T14978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 937.790733][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 937.791870][T14978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 937.895595][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.899359][T14978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 938.076049][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 938.084958][T14978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 938.250716][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 938.521214][ T5736] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 938.707993][ T5736] usb 2-1: Using ep0 maxpacket: 16 [ 939.161384][T14978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.222487][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.222548][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.222579][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 939.222604][ T5736] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 939.222637][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.297960][ T5736] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 939.297994][ T5736] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 939.298018][ T5736] usb 2-1: Manufacturer: syz [ 939.346734][ T5736] usb 2-1: config 0 descriptor?? [ 939.595892][T14978] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.603613][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.603754][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.636094][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.636321][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.832779][ T5736] rc_core: IR keymap rc-hauppauge not found [ 939.832796][ T5736] Registered IR keymap rc-empty [ 939.832907][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 939.864333][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 939.873574][ T1508] IPVS: stop unused estimator thread 0... [ 939.902451][ T5736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 939.920588][ T5736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 939.975240][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.011097][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.034590][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.049633][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.071097][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.092013][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.120960][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.135414][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.160043][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.178634][ T5736] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 940.240945][ T5736] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 940.241375][ T5736] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 940.448952][T13713] usb 2-1: USB disconnect, device number 69 [ 940.619339][T15298] FAULT_INJECTION: forcing a failure. [ 940.619339][T15298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.619381][T15298] CPU: 1 UID: 0 PID: 15298 Comm: syz.2.3055 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 940.619414][T15298] Tainted: [L]=SOFTLOCKUP [ 940.619422][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 940.619436][T15298] Call Trace: [ 940.619446][T15298] [ 940.619456][T15298] dump_stack_lvl+0xe8/0x150 [ 940.619489][T15298] should_fail_ex+0x467/0x600 [ 940.619528][T15298] _copy_from_user+0x2d/0xb0 [ 940.619567][T15298] ___sys_sendmsg+0x1c6/0x360 [ 940.619603][T15298] ? __lock_acquire+0x683/0x2cc0 [ 940.619650][T15298] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.619722][T15298] ? __fget_files+0x2a/0x420 [ 940.619744][T15298] ? __fget_files+0x3a8/0x420 [ 940.619777][T15298] __x64_sys_sendmsg+0x1c3/0x2a0 [ 940.619816][T15298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.619861][T15298] ? __pfx_ksys_write+0x10/0x10 [ 940.619898][T15298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.619924][T15298] do_syscall_64+0x174/0x580 [ 940.619959][T15298] ? trace_irq_disable+0x3b/0x140 [ 940.619987][T15298] ? clear_bhb_loop+0x40/0x90 [ 940.620017][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.620041][T15298] RIP: 0033:0x7f6f1664ce59 [ 940.620063][T15298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.620084][T15298] RSP: 002b:00007f6f148a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.620109][T15298] RAX: ffffffffffffffda RBX: 00007f6f168c5fa0 RCX: 00007f6f1664ce59 [ 940.620127][T15298] RDX: 0000000000000800 RSI: 00002000000003c0 RDI: 0000000000000004 [ 940.620142][T15298] RBP: 00007f6f148a6090 R08: 0000000000000000 R09: 0000000000000000 [ 940.620157][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.620171][T15298] R13: 00007f6f168c6038 R14: 00007f6f168c5fa0 R15: 00007ffd533a62c8 [ 940.620207][T15298] [ 941.229177][ T37] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 941.825555][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 941.978246][ T37] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 941.978282][ T37] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 941.978312][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 941.990268][ T37] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 941.990302][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.990325][ T37] usb 4-1: Product: syz [ 941.990342][ T37] usb 4-1: Manufacturer: syz [ 941.990358][ T37] usb 4-1: SerialNumber: syz [ 942.694402][ T37] usb 4-1: config 0 descriptor?? [ 943.147686][ T37] gs_usb 4-1:0.0: Configuring for 158 interfaces [ 943.365017][ T37] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 943.365098][ T37] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 943.420561][T14978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.660936][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3061'. [ 944.229926][T14978] veth0_vlan: entered promiscuous mode [ 944.254947][T14978] veth1_vlan: entered promiscuous mode [ 944.372160][T14978] veth0_macvtap: entered promiscuous mode [ 944.406074][T14978] veth1_macvtap: entered promiscuous mode [ 944.509652][T14978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.519513][T15346] netlink: 'syz.4.3065': attribute type 5 has an invalid length. [ 944.570910][T14978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.793241][ T1508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.813074][ T1508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.828547][ T1508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.830424][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 944.865690][ T1508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.445157][ T5627] usb 4-1: USB disconnect, device number 23 [ 946.093786][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.093811][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.616487][ T5603] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 946.780462][T12101] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 946.808073][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 946.834333][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.834356][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.836322][ T5603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.836352][ T5603] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 946.908420][ T5603] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 946.908456][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.908478][ T5603] usb 4-1: Product: syz [ 946.908494][ T5603] usb 4-1: Manufacturer: syz [ 946.908510][ T5603] usb 4-1: SerialNumber: syz [ 947.000864][T12101] usb 2-1: unable to get BOS descriptor or descriptor too short [ 947.009848][T12101] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 947.009931][T12101] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 947.009985][T12101] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 947.010049][T12101] usb 2-1: config 13 has no interface number 0 [ 947.010400][T12101] usb 2-1: config 13 interface 50 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 947.010478][T12101] usb 2-1: config 13 interface 50 has no altsetting 0 [ 947.095864][ T5603] usb 4-1: 0:2 : does not exist [ 947.098890][T12101] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 947.098923][T12101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.098946][T12101] usb 2-1: Product: syz [ 947.098962][T12101] usb 2-1: Manufacturer: syz [ 947.098983][T12101] usb 2-1: SerialNumber: syz [ 947.201400][ T5603] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 947.624137][T12101] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 947.636999][T12101] usb 2-1: USB disconnect, device number 70 [ 947.714116][ T5603] usb 4-1: USB disconnect, device number 24 [ 947.771870][ T12] usb 2-1: Failed to submit usb control message: -71 [ 947.771906][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 947.771921][ T12] usb 2-1: unable to get target info from device [ 947.771934][ T12] usb 2-1: could not get target info (-71) [ 947.771949][ T12] usb 2-1: could not probe fw (-71) [ 948.557890][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.160277][T15382] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 955.837745][T15398] syz.2.3075 (15398) used greatest stack depth: 18944 bytes left [ 956.032830][T15434] FAULT_INJECTION: forcing a failure. [ 956.032830][T15434] name failslab, interval 1, probability 0, space 0, times 0 [ 956.032915][T15434] CPU: 1 UID: 0 PID: 15434 Comm: syz.3.3083 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 956.032950][T15434] Tainted: [L]=SOFTLOCKUP [ 956.032958][T15434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.032973][T15434] Call Trace: [ 956.032982][T15434] [ 956.032992][T15434] dump_stack_lvl+0xe8/0x150 [ 956.033025][T15434] should_fail_ex+0x467/0x600 [ 956.033053][T15434] should_failslab+0xa8/0x100 [ 956.033077][T15434] __kmalloc_noprof+0xdf/0x7a0 [ 956.033095][T15434] ? kfree+0x4d/0x6c0 [ 956.033111][T15434] ? tomoyo_realpath_from_path+0xef/0x640 [ 956.033135][T15434] tomoyo_realpath_from_path+0xef/0x640 [ 956.033170][T15434] ? tomoyo_path_number_perm+0x219/0x5f0 [ 956.033197][T15434] tomoyo_path_number_perm+0x246/0x5f0 [ 956.033222][T15434] ? __pfx___schedule+0x10/0x10 [ 956.033246][T15434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 956.033276][T15434] ? do_raw_spin_lock+0x12b/0x2f0 [ 956.033338][T15434] ? hook_file_ioctl+0x1f3/0x5d0 [ 956.033369][T15434] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 956.033409][T15434] ? __rcu_read_unlock+0x83/0xe0 [ 956.033430][T15434] ? __fget_files+0x2a/0x420 [ 956.033445][T15434] ? __fget_files+0x3a8/0x420 [ 956.033459][T15434] ? __fget_files+0x2a/0x420 [ 956.033478][T15434] security_file_ioctl+0xc3/0x2a0 [ 956.033506][T15434] __se_sys_ioctl+0x47/0x170 [ 956.033527][T15434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.033545][T15434] do_syscall_64+0x174/0x580 [ 956.033569][T15434] ? trace_irq_disable+0x3b/0x140 [ 956.033588][T15434] ? clear_bhb_loop+0x40/0x90 [ 956.033609][T15434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.033626][T15434] RIP: 0033:0x7f8f18a3ce59 [ 956.033642][T15434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.033657][T15434] RSP: 002b:00007f8f16c4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.033674][T15434] RAX: ffffffffffffffda RBX: 00007f8f18cb6180 RCX: 00007f8f18a3ce59 [ 956.033687][T15434] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000006 [ 956.033697][T15434] RBP: 00007f8f16c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 956.033708][T15434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.033718][T15434] R13: 00007f8f18cb6218 R14: 00007f8f18cb6180 R15: 00007ffecd144c38 [ 956.033743][T15434] [ 956.033989][T15434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 962.678861][T15455] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3090'. [ 964.346352][T15474] comedi comedi1: 8255: I/O base address not correctly aligned [ 967.973954][ T37] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 968.006079][T15516] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 968.472345][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 968.703036][ T37] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 968.703072][ T37] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 968.703101][ T37] usb 5-1: config 0 interface 0 has no altsetting 0 [ 968.708889][ T37] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 968.708925][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.708949][ T37] usb 5-1: Product: syz [ 968.708967][ T37] usb 5-1: Manufacturer: syz [ 968.708984][ T37] usb 5-1: SerialNumber: syz [ 968.786699][ T37] usb 5-1: config 0 descriptor?? [ 968.958783][ T5750] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 969.065681][T15529] hsr0: entered promiscuous mode [ 969.069051][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 969.122088][ T5750] usb 1-1: Using ep0 maxpacket: 16 [ 969.138876][ T5750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.138918][ T5750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.138966][ T5750] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 969.138995][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.161199][T15529] hsr_slave_0: left promiscuous mode [ 969.206063][ T5750] usb 1-1: config 0 descriptor?? [ 969.229208][ T37] gs_usb 5-1:0.0: Configuring for 158 interfaces [ 969.244749][T15529] hsr_slave_1: left promiscuous mode [ 969.449025][T15529] hsr0 (unregistering): left promiscuous mode [ 969.472445][ T37] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 969.472516][ T37] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 969.975382][ T5750] hid_parser_main: 30 callbacks suppressed [ 969.975429][ T5750] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 969.975452][ T5750] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 969.975472][ T5750] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 969.975491][ T5750] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 969.975510][ T5750] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 970.056892][ T5750] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 970.201697][ T37] usb 5-1: USB disconnect, device number 69 [ 970.335250][T15547] FAULT_INJECTION: forcing a failure. [ 970.335250][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 970.335293][T15547] CPU: 0 UID: 0 PID: 15547 Comm: syz.2.3115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 970.335326][T15547] Tainted: [L]=SOFTLOCKUP [ 970.335334][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 970.335348][T15547] Call Trace: [ 970.335357][T15547] [ 970.335367][T15547] dump_stack_lvl+0xe8/0x150 [ 970.335400][T15547] should_fail_ex+0x467/0x600 [ 970.335441][T15547] should_failslab+0xa8/0x100 [ 970.335472][T15547] __kmalloc_noprof+0xdf/0x7a0 [ 970.335497][T15547] ? kfree+0x4d/0x6c0 [ 970.335519][T15547] ? tomoyo_realpath_from_path+0xef/0x640 [ 970.335553][T15547] tomoyo_realpath_from_path+0xef/0x640 [ 970.335592][T15547] ? tomoyo_path_number_perm+0x219/0x5f0 [ 970.335630][T15547] tomoyo_path_number_perm+0x246/0x5f0 [ 970.335670][T15547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 970.335722][T15547] ? __lock_acquire+0x683/0x2cc0 [ 970.335758][T15547] ? do_raw_spin_lock+0x12b/0x2f0 [ 970.335796][T15547] ? hook_file_ioctl+0x1f3/0x5d0 [ 970.335851][T15547] ? __fget_files+0x2a/0x420 [ 970.335878][T15547] ? __fget_files+0x2a/0x420 [ 970.335899][T15547] ? __fget_files+0x3a8/0x420 [ 970.335921][T15547] ? __fget_files+0x2a/0x420 [ 970.335948][T15547] security_file_ioctl+0xc3/0x2a0 [ 970.335988][T15547] __se_sys_ioctl+0x47/0x170 [ 970.336018][T15547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.336053][T15547] do_syscall_64+0x174/0x580 [ 970.336087][T15547] ? trace_irq_disable+0x3b/0x140 [ 970.336116][T15547] ? clear_bhb_loop+0x40/0x90 [ 970.336146][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.336171][T15547] RIP: 0033:0x7f6f1664ce59 [ 970.336194][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.336215][T15547] RSP: 002b:00007f6f14864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.336240][T15547] RAX: ffffffffffffffda RBX: 00007f6f168c6180 RCX: 00007f6f1664ce59 [ 970.336259][T15547] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 970.336273][T15547] RBP: 00007f6f14864090 R08: 0000000000000000 R09: 0000000000000000 [ 970.336288][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.336302][T15547] R13: 00007f6f168c6218 R14: 00007f6f168c6180 R15: 00007ffd533a62c8 [ 970.336338][T15547] [ 970.336348][T15547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 970.693645][ T5750] usb 1-1: USB disconnect, device number 13 [ 975.701341][ T37] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 975.862860][ T37] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 975.862894][ T37] usb 1-1: config 179 has no interface number 0 [ 975.862945][ T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 975.862976][ T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 975.863009][ T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 975.863040][ T37] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 975.863072][ T37] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 975.863126][ T37] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 975.863153][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.882000][T15599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 975.882220][T15599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 976.439717][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 976.439793][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 976.439857][ T37] usb 1-1: USB disconnect, device number 14 [ 976.921922][ T5750] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 977.082679][ T5750] usb 3-1: Using ep0 maxpacket: 16 [ 977.085335][ T5750] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.085365][ T5750] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.089087][ T5750] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.089186][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.089212][ T5750] usb 3-1: Product: syz [ 977.089229][ T5750] usb 3-1: Manufacturer: syz [ 977.089246][ T5750] usb 3-1: SerialNumber: syz [ 977.209774][ T5750] usb 3-1: 0:2 : does not exist [ 977.419350][ T5750] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 977.526151][ T5750] usb 3-1: USB disconnect, device number 21 [ 978.680584][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.878665][T12101] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 983.043718][T12101] usb 4-1: unable to get BOS descriptor or descriptor too short [ 983.049940][T12101] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 983.049974][T12101] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 983.049997][T12101] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 983.050022][T12101] usb 4-1: config 13 has no interface number 0 [ 983.050073][T12101] usb 4-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 983.050113][T12101] usb 4-1: config 13 interface 50 has no altsetting 0 [ 983.122379][T12101] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 983.122415][T12101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.122438][T12101] usb 4-1: Product: syz [ 983.122455][T12101] usb 4-1: Manufacturer: syz [ 983.122470][T12101] usb 4-1: SerialNumber: syz [ 984.423004][T12101] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 984.451751][T12101] usb 4-1: USB disconnect, device number 25 [ 984.497667][T11739] usb 4-1: Failed to submit usb control message: -19 [ 984.497709][T11739] usb 4-1: unable to send the bmi data to the device: -19 [ 984.497731][T11739] usb 4-1: unable to get target info from device [ 984.497749][T11739] usb 4-1: could not get target info (-19) [ 984.497855][T11739] usb 4-1: could not probe fw (-19) [ 985.358180][ T37] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 985.537294][ T37] usb 1-1: config 11 descriptor has 1 excess byte, ignoring [ 985.537326][ T37] usb 1-1: config 11 has 0 interfaces, different from the descriptor's value: 1 [ 985.547913][ T37] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 985.548020][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.548089][ T37] usb 1-1: Product: syz [ 985.548190][ T37] usb 1-1: Manufacturer: syz [ 985.548233][ T37] usb 1-1: SerialNumber: syz [ 985.849840][T15749] FAULT_INJECTION: forcing a failure. [ 985.849840][T15749] name failslab, interval 1, probability 0, space 0, times 0 [ 985.850057][T15749] CPU: 1 UID: 0 PID: 15749 Comm: syz.2.3163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 985.850111][T15749] Tainted: [L]=SOFTLOCKUP [ 985.850120][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 985.850136][T15749] Call Trace: [ 985.850145][T15749] [ 985.850156][T15749] dump_stack_lvl+0xe8/0x150 [ 985.850192][T15749] should_fail_ex+0x467/0x600 [ 985.850238][T15749] should_failslab+0xa8/0x100 [ 985.850273][T15749] kmem_cache_alloc_noprof+0x87/0x680 [ 985.850302][T15749] ? do_getname+0x2e/0x250 [ 985.850335][T15749] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 985.850387][T15749] do_getname+0x2e/0x250 [ 985.850417][T15749] ? user_path_at+0x1e/0x160 [ 985.850445][T15749] user_path_at+0x2a/0x160 [ 985.850474][T15749] __x64_sys_pivot_root+0x106/0x1d0 [ 985.850503][T15749] ? __pfx___x64_sys_pivot_root+0x10/0x10 [ 985.850541][T15749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.850569][T15749] do_syscall_64+0x174/0x580 [ 985.850607][T15749] ? clear_bhb_loop+0x40/0x90 [ 985.850639][T15749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.850664][T15749] RIP: 0033:0x7f6f1664ce59 [ 985.850686][T15749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.850707][T15749] RSP: 002b:00007f6f14864028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 985.850732][T15749] RAX: ffffffffffffffda RBX: 00007f6f168c6180 RCX: 00007f6f1664ce59 [ 985.850750][T15749] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000340 [ 985.850766][T15749] RBP: 00007f6f14864090 R08: 0000000000000000 R09: 0000000000000000 [ 985.850781][T15749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.850796][T15749] R13: 00007f6f168c6218 R14: 00007f6f168c6180 R15: 00007ffd533a62c8 [ 985.850832][T15749] [ 985.930640][T15748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.763291][T15752] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3165'. [ 987.032259][T12101] usb 1-1: USB disconnect, device number 15 [ 988.260795][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.261825][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.905109][T15775] netlink: 'syz.4.3172': attribute type 1 has an invalid length. [ 990.425628][T15786] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3176'. [ 993.730521][T15797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.463901][ T5736] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 996.677527][ T5736] usb 5-1: Using ep0 maxpacket: 16 [ 996.680163][ T5736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.680189][ T5736] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 996.685827][ T5736] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 996.685858][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.685882][ T5736] usb 5-1: Product: syz [ 996.685899][ T5736] usb 5-1: Manufacturer: syz [ 996.685916][ T5736] usb 5-1: SerialNumber: syz [ 996.778542][ T5736] usb 5-1: 0:2 : does not exist [ 996.978393][ T5736] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 997.045365][ T5736] usb 5-1: USB disconnect, device number 70 [ 997.186593][T13306] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 997.382081][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.457872][T13306] usb 3-1: Using ep0 maxpacket: 32 [ 997.868520][T15827] comedi comedi1: 8255: I/O base address not correctly aligned [ 998.489419][T13306] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 998.489456][T13306] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 998.489485][T13306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 998.492764][T13306] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 998.492799][T13306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.492824][T13306] usb 3-1: Product: syz [ 998.492842][T13306] usb 3-1: Manufacturer: syz [ 998.492859][T13306] usb 3-1: SerialNumber: syz [ 998.499208][T13306] usb 3-1: config 0 descriptor?? [ 999.020708][T13306] gs_usb 3-1:0.0: Configuring for 158 interfaces [ 999.238887][T13306] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 999.238964][T13306] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 999.392528][T15832] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3190'. [ 999.535819][T15837] FAULT_INJECTION: forcing a failure. [ 999.535819][T15837] name failslab, interval 1, probability 0, space 0, times 0 [ 999.535862][T15837] CPU: 1 UID: 0 PID: 15837 Comm: syz.4.3191 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 999.535895][T15837] Tainted: [L]=SOFTLOCKUP [ 999.535904][T15837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.535919][T15837] Call Trace: [ 999.535935][T15837] [ 999.535946][T15837] dump_stack_lvl+0xe8/0x150 [ 999.535979][T15837] should_fail_ex+0x467/0x600 [ 999.536020][T15837] should_failslab+0xa8/0x100 [ 999.536054][T15837] __kmalloc_noprof+0xdf/0x7a0 [ 999.536080][T15837] ? kfree+0x4d/0x6c0 [ 999.536102][T15837] ? tomoyo_realpath_from_path+0xef/0x640 [ 999.536137][T15837] tomoyo_realpath_from_path+0xef/0x640 [ 999.536175][T15837] ? tomoyo_path_number_perm+0x219/0x5f0 [ 999.536211][T15837] tomoyo_path_number_perm+0x246/0x5f0 [ 999.536251][T15837] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 999.536286][T15837] ? __lock_acquire+0x683/0x2cc0 [ 999.536323][T15837] ? do_raw_spin_lock+0x12b/0x2f0 [ 999.536360][T15837] ? hook_file_ioctl+0x1f3/0x5d0 [ 999.536414][T15837] ? __fget_files+0x2a/0x420 [ 999.536440][T15837] ? __fget_files+0x2a/0x420 [ 999.536461][T15837] ? __fget_files+0x3a8/0x420 [ 999.536483][T15837] ? __fget_files+0x2a/0x420 [ 999.536510][T15837] security_file_ioctl+0xc3/0x2a0 [ 999.536549][T15837] __se_sys_ioctl+0x47/0x170 [ 999.536579][T15837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.536605][T15837] do_syscall_64+0x174/0x580 [ 999.536640][T15837] ? trace_irq_disable+0x3b/0x140 [ 999.536669][T15837] ? clear_bhb_loop+0x40/0x90 [ 999.536699][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.536723][T15837] RIP: 0033:0x7f776086ce59 [ 999.536745][T15837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.536766][T15837] RSP: 002b:00007f775eaa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.536791][T15837] RAX: ffffffffffffffda RBX: 00007f7760ae6090 RCX: 00007f776086ce59 [ 999.536808][T15837] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 999.536823][T15837] RBP: 00007f775eaa5090 R08: 0000000000000000 R09: 0000000000000000 [ 999.536838][T15837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.536852][T15837] R13: 00007f7760ae6128 R14: 00007f7760ae6090 R15: 00007ffef462a528 [ 999.536893][T15837] [ 999.536913][T15837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 999.775617][T12101] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 999.937903][T12101] usb 4-1: Using ep0 maxpacket: 16 [ 999.940226][T12101] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.940256][T12101] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 999.942799][T12101] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 999.942828][T12101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.942850][T12101] usb 4-1: Product: syz [ 999.942868][T12101] usb 4-1: Manufacturer: syz [ 999.942880][T12101] usb 4-1: SerialNumber: syz [ 1000.052225][T12101] usb 4-1: 0:2 : does not exist [ 1000.204586][T12101] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1000.371237][T12101] usb 4-1: USB disconnect, device number 26 [ 1001.069503][ T5736] usb 3-1: USB disconnect, device number 22 [ 1001.304712][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.628182][T13306] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1002.010784][T13306] usb 1-1: Using ep0 maxpacket: 32 [ 1002.369888][T13306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1002.373285][T13306] usb 1-1: config 218 has an invalid interface number: 223 but max is 0 [ 1002.373318][T13306] usb 1-1: config 218 has an invalid descriptor of length 143, skipping remainder of the config [ 1002.373343][T13306] usb 1-1: config 218 has no interface number 0 [ 1002.373394][T13306] usb 1-1: config 218 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 1002.373423][T13306] usb 1-1: config 218 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1002.373472][T13306] usb 1-1: config 218 interface 223 has no altsetting 0 [ 1002.460000][T13306] usb 1-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 1002.460038][T13306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.460066][T13306] usb 1-1: Product: syz [ 1002.460084][T13306] usb 1-1: Manufacturer: syz [ 1002.460103][T13306] usb 1-1: SerialNumber: syz [ 1002.838329][T13306] usb 1-1: USB disconnect, device number 16 [ 1004.637582][T15878] FAULT_INJECTION: forcing a failure. [ 1004.637582][T15878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.637626][T15878] CPU: 0 UID: 0 PID: 15878 Comm: syz.0.3202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1004.637662][T15878] Tainted: [L]=SOFTLOCKUP [ 1004.637673][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1004.637689][T15878] Call Trace: [ 1004.637699][T15878] [ 1004.637711][T15878] dump_stack_lvl+0xe8/0x150 [ 1004.637749][T15878] should_fail_ex+0x467/0x600 [ 1004.637793][T15878] _copy_to_user+0x31/0xb0 [ 1004.637839][T15878] simple_read_from_buffer+0xe1/0x170 [ 1004.637888][T15878] proc_fail_nth_read+0x1be/0x230 [ 1004.637921][T15878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.637970][T15878] ? rw_verify_area+0x250/0x4d0 [ 1004.638003][T15878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.638082][T15878] vfs_read+0x219/0xa90 [ 1004.638141][T15878] ? __pfx_vfs_read+0x10/0x10 [ 1004.638174][T15878] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1004.638214][T15878] ? lockdep_hardirqs_on+0x7a/0x110 [ 1004.638253][T15878] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1004.638291][T15878] ? mutex_lock_nested+0x152/0x1d0 [ 1004.638320][T15878] ? fdget_pos+0x252/0x320 [ 1004.638356][T15878] ksys_read+0x156/0x270 [ 1004.638394][T15878] ? __pfx_ksys_read+0x10/0x10 [ 1004.638437][T15878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.638468][T15878] do_syscall_64+0x174/0x580 [ 1004.638504][T15878] ? trace_irq_disable+0x3b/0x140 [ 1004.638534][T15878] ? clear_bhb_loop+0x40/0x90 [ 1004.638568][T15878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.638595][T15878] RIP: 0033:0x7ff4c35dd68e [ 1004.638620][T15878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1004.638642][T15878] RSP: 002b:00007ff4c184cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1004.638670][T15878] RAX: ffffffffffffffda RBX: 00007ff4c184d6c0 RCX: 00007ff4c35dd68e [ 1004.638690][T15878] RDX: 000000000000000f RSI: 00007ff4c184d0a0 RDI: 0000000000000007 [ 1004.638707][T15878] RBP: 00007ff4c184d090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.638723][T15878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.638738][T15878] R13: 00007ff4c3896128 R14: 00007ff4c3896090 R15: 00007ffd696d5588 [ 1004.638780][T15878] [ 1004.838149][ T6775] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1005.029244][ T6775] usb 4-1: Using ep0 maxpacket: 16 [ 1005.041109][ T6775] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.041192][ T6775] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1005.082839][ T6775] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1005.082877][ T6775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.084707][ T6775] usb 4-1: Product: syz [ 1005.084765][ T6775] usb 4-1: Manufacturer: syz [ 1005.084821][ T6775] usb 4-1: SerialNumber: syz [ 1005.227646][ T6775] usb 4-1: 0:2 : does not exist [ 1005.416488][ T6775] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1005.513733][ T6775] usb 4-1: USB disconnect, device number 27 [ 1005.679768][ T6059] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1006.197920][ T6059] usb 5-1: Using ep0 maxpacket: 32 [ 1007.923564][ T6059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.923601][ T6059] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1007.923632][ T6059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1007.926746][ T6059] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1007.926779][ T6059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.926804][ T6059] usb 5-1: Product: syz [ 1007.926822][ T6059] usb 5-1: Manufacturer: syz [ 1007.926839][ T6059] usb 5-1: SerialNumber: syz [ 1008.132727][ T6059] usb 5-1: config 0 descriptor?? [ 1008.211842][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.561910][T15906] FAULT_INJECTION: forcing a failure. [ 1008.561910][T15906] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.561959][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.3.3209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1008.561994][T15906] Tainted: [L]=SOFTLOCKUP [ 1008.562004][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1008.562020][T15906] Call Trace: [ 1008.562031][T15906] [ 1008.562042][T15906] dump_stack_lvl+0xe8/0x150 [ 1008.562079][T15906] should_fail_ex+0x467/0x600 [ 1008.562125][T15906] should_failslab+0xa8/0x100 [ 1008.562171][T15906] __kvmalloc_node_noprof+0x16a/0x900 [ 1008.562208][T15906] ? seq_read_iter+0x1eb/0xcb0 [ 1008.562242][T15906] ? mutex_lock_nested+0x152/0x1d0 [ 1008.562272][T15906] ? seq_read_iter+0xa5/0xcb0 [ 1008.562311][T15906] seq_read_iter+0x1eb/0xcb0 [ 1008.562368][T15906] seq_read+0x36a/0x490 [ 1008.562414][T15906] ? __pfx_seq_read+0x10/0x10 [ 1008.562465][T15906] ? rw_verify_area+0x250/0x4d0 [ 1008.562499][T15906] ? __pfx_seq_read+0x10/0x10 [ 1008.562533][T15906] vfs_read+0x219/0xa90 [ 1008.562580][T15906] ? __pfx_vfs_read+0x10/0x10 [ 1008.562615][T15906] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1008.562654][T15906] ? lockdep_hardirqs_on+0x7a/0x110 [ 1008.562695][T15906] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1008.562734][T15906] ? mutex_lock_nested+0x152/0x1d0 [ 1008.562762][T15906] ? fdget_pos+0x252/0x320 [ 1008.562808][T15906] ksys_read+0x156/0x270 [ 1008.562843][T15906] ? __pfx_ksys_read+0x10/0x10 [ 1008.562885][T15906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.562915][T15906] do_syscall_64+0x174/0x580 [ 1008.562954][T15906] ? clear_bhb_loop+0x40/0x90 [ 1008.562987][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.563015][T15906] RIP: 0033:0x7f8f18a3ce59 [ 1008.563040][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.563064][T15906] RSP: 002b:00007f8f16c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1008.563092][T15906] RAX: ffffffffffffffda RBX: 00007f8f18cb5fa0 RCX: 00007f8f18a3ce59 [ 1008.563112][T15906] RDX: 0000000000002020 RSI: 0000200000003380 RDI: 0000000000000004 [ 1008.563129][T15906] RBP: 00007f8f16c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.563146][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.563161][T15906] R13: 00007f8f18cb6038 R14: 00007f8f18cb5fa0 R15: 00007ffecd144c38 [ 1008.563204][T15906] [ 1008.591166][ T6059] gs_usb 5-1:0.0: Configuring for 158 interfaces [ 1009.766955][ T6059] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 1009.767024][ T6059] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 1009.940141][ T5736] usb 5-1: USB disconnect, device number 71 [ 1010.157306][T15920] FAULT_INJECTION: forcing a failure. [ 1010.157306][T15920] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.157348][T15920] CPU: 1 UID: 0 PID: 15920 Comm: syz.1.3212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1010.157383][T15920] Tainted: [L]=SOFTLOCKUP [ 1010.157393][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1010.157407][T15920] Call Trace: [ 1010.157417][T15920] [ 1010.157427][T15920] dump_stack_lvl+0xe8/0x150 [ 1010.157461][T15920] should_fail_ex+0x467/0x600 [ 1010.157500][T15920] should_failslab+0xa8/0x100 [ 1010.157532][T15920] __kmalloc_noprof+0xdf/0x7a0 [ 1010.157559][T15920] ? kfree+0x4d/0x6c0 [ 1010.157582][T15920] ? tomoyo_realpath_from_path+0xef/0x640 [ 1010.157616][T15920] tomoyo_realpath_from_path+0xef/0x640 [ 1010.157654][T15920] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1010.157692][T15920] tomoyo_path_number_perm+0x246/0x5f0 [ 1010.157733][T15920] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1010.157768][T15920] ? __lock_acquire+0x683/0x2cc0 [ 1010.157803][T15920] ? do_raw_spin_lock+0x12b/0x2f0 [ 1010.157840][T15920] ? hook_file_ioctl+0x1f3/0x5d0 [ 1010.157893][T15920] ? __fget_files+0x2a/0x420 [ 1010.157920][T15920] ? __fget_files+0x2a/0x420 [ 1010.157939][T15920] ? __fget_files+0x3a8/0x420 [ 1010.157960][T15920] ? __fget_files+0x2a/0x420 [ 1010.157987][T15920] security_file_ioctl+0xc3/0x2a0 [ 1010.158025][T15920] __se_sys_ioctl+0x47/0x170 [ 1010.158056][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.158082][T15920] do_syscall_64+0x174/0x580 [ 1010.158116][T15920] ? trace_irq_disable+0x3b/0x140 [ 1010.158143][T15920] ? clear_bhb_loop+0x40/0x90 [ 1010.158172][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.158196][T15920] RIP: 0033:0x7f04fb2fce59 [ 1010.158226][T15920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.158247][T15920] RSP: 002b:00007f04f954e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.158272][T15920] RAX: ffffffffffffffda RBX: 00007f04fb575fa0 RCX: 00007f04fb2fce59 [ 1010.158289][T15920] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1010.158303][T15920] RBP: 00007f04f954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.158317][T15920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.158331][T15920] R13: 00007f04fb576038 R14: 00007f04fb575fa0 R15: 00007fff91f34978 [ 1010.158369][T15920] [ 1010.158391][T15920] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1011.659684][ T6775] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1011.822074][ T6775] usb 3-1: not running at top speed; connect to a high speed hub [ 1011.858306][ T6775] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 1011.858342][ T6775] usb 3-1: config 0 has no interface number 0 [ 1011.858393][ T6775] usb 3-1: config 0 interface 101 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1011.858426][ T6775] usb 3-1: config 0 interface 101 altsetting 251 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1011.858459][ T6775] usb 3-1: config 0 interface 101 altsetting 251 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1011.858491][ T6775] usb 3-1: config 0 interface 101 has no altsetting 0 [ 1011.956887][ T6775] usb 3-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=de.52 [ 1011.956923][ T6775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.956947][ T6775] usb 3-1: Product: syz [ 1011.956964][ T6775] usb 3-1: Manufacturer: syz [ 1011.956980][ T6775] usb 3-1: SerialNumber: syz [ 1012.022341][ T6775] usb 3-1: config 0 descriptor?? [ 1013.712189][T15964] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3222'. [ 1014.351107][ T6775] sierra 3-1:0.101: Sierra USB modem converter detected [ 1014.699636][ T6775] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1014.771610][ T6775] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 1014.879015][ T6059] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1014.910701][ T6775] usb 3-1: USB disconnect, device number 23 [ 1015.042664][ T6059] usb 5-1: Using ep0 maxpacket: 32 [ 1015.055099][ T6059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1015.055133][ T6059] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1015.055162][ T6059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1015.087745][ T6059] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1015.087779][ T6059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.087803][ T6059] usb 5-1: Product: syz [ 1015.087820][ T6059] usb 5-1: Manufacturer: syz [ 1015.087838][ T6059] usb 5-1: SerialNumber: syz [ 1015.160253][ T6059] usb 5-1: config 0 descriptor?? [ 1016.398012][ T6059] gs_usb 5-1:0.0: Configuring for 158 interfaces [ 1016.432215][ T6775] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1016.642266][ T6059] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1016.642350][ T6059] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 1016.745995][ T6775] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1017.371803][ T6775] sierra 3-1:0.101: device disconnected [ 1017.468566][T13306] usb 5-1: USB disconnect, device number 72 [ 1019.466694][T16042] syz_tun: entered allmulticast mode [ 1019.688088][T16014] syz_tun: left allmulticast mode [ 1019.817717][ T5603] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1020.001633][ T5603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1020.002286][ T5603] usb 2-1: not running at top speed; connect to a high speed hub [ 1020.003673][ T5603] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1020.006280][ T5603] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1020.006309][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.006330][ T5603] usb 2-1: Product: syz [ 1020.006353][ T5603] usb 2-1: Manufacturer: syz [ 1020.006365][ T5603] usb 2-1: SerialNumber: syz [ 1020.324574][T16044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.330522][T16044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.529483][ T6775] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1020.697418][ T6775] usb 5-1: Using ep0 maxpacket: 32 [ 1020.711403][ T6775] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1020.711437][ T6775] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1020.711467][ T6775] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1020.746302][ T6775] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1020.746337][ T6775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.746362][ T6775] usb 5-1: Product: syz [ 1020.746379][ T6775] usb 5-1: Manufacturer: syz [ 1020.746397][ T6775] usb 5-1: SerialNumber: syz [ 1020.838024][ T6775] usb 5-1: config 0 descriptor?? [ 1021.266047][ T37] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1021.603916][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 1022.220771][T16064] vivid-000: kernel_thread() failed [ 1022.292447][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.292511][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.292624][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1022.292652][ T37] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1022.292680][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.352022][ T6775] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 1022.352089][ T6775] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 1022.400150][ T37] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1022.416804][ T37] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1022.416828][ T37] usb 4-1: Manufacturer: syz [ 1022.594304][ T37] usb 4-1: config 0 descriptor?? [ 1022.597729][ T5603] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1022.597759][ T5603] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 1022.614875][ T6775] usb 5-1: USB disconnect, device number 73 [ 1022.633660][ T5603] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1022.633691][ T5603] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 1022.672425][ T5603] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1023.260815][ T37] rc_core: IR keymap rc-hauppauge not found [ 1023.260837][ T37] Registered IR keymap rc-empty [ 1023.260986][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.308498][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.418838][ T37] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1023.450218][ T37] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 1023.566922][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.583999][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.606006][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.627778][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.660571][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.681498][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.703376][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.735702][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.758015][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.795953][ T37] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1023.854225][ T37] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1023.854257][ T37] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1023.978320][ T5603] usb 2-1: USB disconnect, device number 71 [ 1024.058840][ T37] usb 4-1: USB disconnect, device number 28 [ 1025.590103][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.191786][ T5603] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1027.462420][ T5603] usb 3-1: Using ep0 maxpacket: 16 [ 1027.983310][ T5603] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.983343][ T5603] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1027.995065][ T5603] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1027.995101][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.995125][ T5603] usb 3-1: Product: syz [ 1027.995142][ T5603] usb 3-1: Manufacturer: syz [ 1027.995160][ T5603] usb 3-1: SerialNumber: syz [ 1028.076376][ T5603] usb 3-1: 0:2 : does not exist [ 1028.314114][ T5603] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1028.443427][ T5603] usb 3-1: USB disconnect, device number 24 [ 1028.951846][T16123] comedi comedi1: 8255: I/O base address not correctly aligned [ 1029.907771][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1029.920574][ T6775] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1030.131124][ T6775] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1030.131162][ T6775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.131189][ T6775] usb 4-1: Product: syz [ 1030.131209][ T6775] usb 4-1: Manufacturer: syz [ 1030.131228][ T6775] usb 4-1: SerialNumber: syz [ 1030.200390][T16130] FAULT_INJECTION: forcing a failure. [ 1030.200390][T16130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.200435][T16130] CPU: 1 UID: 0 PID: 16130 Comm: syz.1.3268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1030.200471][T16130] Tainted: [L]=SOFTLOCKUP [ 1030.200480][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.200497][T16130] Call Trace: [ 1030.200507][T16130] [ 1030.200519][T16130] dump_stack_lvl+0xe8/0x150 [ 1030.200555][T16130] should_fail_ex+0x467/0x600 [ 1030.200598][T16130] _copy_to_user+0x31/0xb0 [ 1030.200641][T16130] simple_read_from_buffer+0xe1/0x170 [ 1030.200690][T16130] proc_fail_nth_read+0x1be/0x230 [ 1030.200722][T16130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.200770][T16130] ? rw_verify_area+0x250/0x4d0 [ 1030.200812][T16130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.200854][T16130] vfs_read+0x219/0xa90 [ 1030.200899][T16130] ? __pfx_vfs_read+0x10/0x10 [ 1030.200932][T16130] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1030.200972][T16130] ? lockdep_hardirqs_on+0x7a/0x110 [ 1030.201009][T16130] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1030.201048][T16130] ? mutex_lock_nested+0x152/0x1d0 [ 1030.201075][T16130] ? fdget_pos+0x252/0x320 [ 1030.201111][T16130] ksys_read+0x156/0x270 [ 1030.201144][T16130] ? __pfx_ksys_read+0x10/0x10 [ 1030.201184][T16130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.201214][T16130] do_syscall_64+0x174/0x580 [ 1030.201250][T16130] ? trace_irq_disable+0x3b/0x140 [ 1030.201283][T16130] ? clear_bhb_loop+0x40/0x90 [ 1030.201317][T16130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.201344][T16130] RIP: 0033:0x7f04fb2bd68e [ 1030.201370][T16130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1030.201392][T16130] RSP: 002b:00007f04f954dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1030.201419][T16130] RAX: ffffffffffffffda RBX: 00007f04f954e6c0 RCX: 00007f04fb2bd68e [ 1030.201439][T16130] RDX: 000000000000000f RSI: 00007f04f954e0a0 RDI: 0000000000000006 [ 1030.201456][T16130] RBP: 00007f04f954e090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.201472][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.201487][T16130] R13: 00007f04fb576038 R14: 00007f04fb575fa0 R15: 00007fff91f34978 [ 1030.201529][T16130] [ 1030.785867][ T6775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1030.785937][ T6775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1031.469610][ T6775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1031.469691][ T6775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1031.576619][ T6775] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1031.634367][ T6775] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1031.700163][ T6775] usb 4-1: USB disconnect, device number 29 [ 1032.120245][T16155] ================================================================== [ 1032.120264][T16155] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.120405][T16155] Write of size 464 at addr ffffc90004e59e80 by task vivid-000-vid-c/16155 [ 1032.120426][T16155] [ 1032.120475][T16155] CPU: 1 UID: 0 PID: 16155 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1032.120510][T16155] Tainted: [L]=SOFTLOCKUP [ 1032.120519][T16155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1032.120534][T16155] Call Trace: [ 1032.120544][T16155] [ 1032.120555][T16155] dump_stack_lvl+0xe8/0x150 [ 1032.120583][T16155] print_address_description+0x55/0x1e0 [ 1032.120625][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.120654][T16155] print_report+0x58/0x70 [ 1032.120677][T16155] kasan_report+0x117/0x150 [ 1032.120734][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.120768][T16155] kasan_check_range+0x264/0x2c0 [ 1032.120796][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.120826][T16155] __asan_memcpy+0x40/0x70 [ 1032.120848][T16155] tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.120921][T16155] vivid_thread_vid_cap_tick+0x115b/0x6350 [ 1032.121020][T16155] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1032.121047][T16155] ? vivid_thread_vid_cap+0x4a3/0x1210 [ 1032.121077][T16155] ? _mutex_trylock_nest_lock+0x128/0x180 [ 1032.121104][T16155] ? vivid_thread_vid_cap+0x4a3/0x1210 [ 1032.121129][T16155] vivid_thread_vid_cap+0x939/0x1210 [ 1032.121169][T16155] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1032.121236][T16155] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1032.121267][T16155] ? do_raw_spin_lock+0x12b/0x2f0 [ 1032.121300][T16155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1032.121334][T16155] ? __kthread_parkme+0x71/0x1f0 [ 1032.121363][T16155] ? __kthread_parkme+0x196/0x1f0 [ 1032.121392][T16155] kthread+0x388/0x470 [ 1032.121422][T16155] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1032.121459][T16155] ? __pfx_kthread+0x10/0x10 [ 1032.121491][T16155] ret_from_fork+0x514/0xb70 [ 1032.121536][T16155] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.121561][T16155] ? __switch_to+0xc89/0x1420 [ 1032.121598][T16155] ? __pfx_kthread+0x10/0x10 [ 1032.121629][T16155] ret_from_fork_asm+0x1a/0x30 [ 1032.121668][T16155] [ 1032.121677][T16155] [ 1032.121683][T16155] The buggy address belongs to a 9-page vmalloc region starting at 0xffffc90004e51000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1032.121763][T16155] The buggy address belongs to the physical page: [ 1032.121780][T16155] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803b43c000 pfn:0x3b438 [ 1032.121804][T16155] flags: 0x80000000000000(node=0|zone=1) [ 1032.121829][T16155] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000 [ 1032.121850][T16155] raw: ffff88803b43c000 0000000000000000 00000001ffffffff 0000000000000000 [ 1032.121863][T16155] page dumped because: kasan: bad access detected [ 1032.121879][T16155] page_owner tracks the page as allocated [ 1032.121888][T16155] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 16154, tgid 16151 (syz.1.3275), ts 1031804727609, free_ts 1031804374318 [ 1032.121926][T16155] post_alloc_hook+0x22d/0x280 [ 1032.121951][T16155] get_page_from_freelist+0x2877/0x28f0 [ 1032.121980][T16155] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1032.122009][T16155] __alloc_pages_noprof+0x10/0x100 [ 1032.122037][T16155] alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 1032.122064][T16155] alloc_pages_bulk_mempolicy_noprof+0x3f9/0x1670 [ 1032.122099][T16155] __vmalloc_node_range_noprof+0xb1d/0x1730 [ 1032.122124][T16155] vmalloc_user_noprof+0xad/0xe0 [ 1032.122148][T16155] vb2_vmalloc_alloc+0xef/0x360 [ 1032.122178][T16155] __vb2_queue_alloc+0xa0b/0x1660 [ 1032.122212][T16155] vb2_core_reqbufs+0xc3f/0x1470 [ 1032.122239][T16155] vb2_ioctl_reqbufs+0x4be/0x850 [ 1032.122268][T16155] __video_do_ioctl+0x8b2/0xc70 [ 1032.122353][T16155] video_usercopy+0x860/0x1430 [ 1032.122385][T16155] v4l2_ioctl+0x190/0x1e0 [ 1032.122415][T16155] __se_sys_ioctl+0xff/0x170 [ 1032.122441][T16155] page last free pid 16154 tgid 16151 stack trace: [ 1032.122455][T16155] __free_frozen_pages+0x1019/0x1100 [ 1032.122480][T16155] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 1032.122501][T16155] alloc_vmap_area+0xd1a/0x1420 [ 1032.122521][T16155] __get_vm_area_node+0x1f2/0x300 [ 1032.122542][T16155] __vmalloc_node_range_noprof+0x358/0x1730 [ 1032.122566][T16155] vmalloc_user_noprof+0xad/0xe0 [ 1032.122589][T16155] vb2_vmalloc_alloc+0xef/0x360 [ 1032.122621][T16155] __vb2_queue_alloc+0xa0b/0x1660 [ 1032.122649][T16155] vb2_core_reqbufs+0xc3f/0x1470 [ 1032.122675][T16155] vb2_ioctl_reqbufs+0x4be/0x850 [ 1032.122703][T16155] __video_do_ioctl+0x8b2/0xc70 [ 1032.122736][T16155] video_usercopy+0x860/0x1430 [ 1032.122767][T16155] v4l2_ioctl+0x190/0x1e0 [ 1032.122796][T16155] __se_sys_ioctl+0xff/0x170 [ 1032.122821][T16155] do_syscall_64+0x174/0x580 [ 1032.122852][T16155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.122874][T16155] [ 1032.122880][T16155] Memory state around the buggy address: [ 1032.122923][T16155] ffffc90004e59f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.122940][T16155] ffffc90004e59f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1032.122957][T16155] >ffffc90004e5a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1032.122969][T16155] ^ [ 1032.123008][T16155] ffffc90004e5a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1032.123025][T16155] ffffc90004e5a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1032.123038][T16155] ================================================================== [ 1032.123152][T16155] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1032.123175][T16155] CPU: 1 UID: 0 PID: 16155 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1032.123216][T16155] Tainted: [L]=SOFTLOCKUP [ 1032.123225][T16155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1032.123240][T16155] Call Trace: [ 1032.123250][T16155] [ 1032.123260][T16155] vpanic+0x56c/0xa60 [ 1032.123292][T16155] ? __pfx_vpanic+0x10/0x10 [ 1032.123322][T16155] ? __pfx___schedule+0x10/0x10 [ 1032.123355][T16155] panic+0xc5/0xd0 [ 1032.123383][T16155] ? __pfx_panic+0x10/0x10 [ 1032.123413][T16155] ? preempt_schedule_common+0x82/0xd0 [ 1032.123448][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.123476][T16155] check_panic_on_warn+0x89/0xb0 [ 1032.123509][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.123537][T16155] end_report+0x73/0x170 [ 1032.123565][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.123594][T16155] kasan_report+0x128/0x150 [ 1032.123622][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.123657][T16155] kasan_check_range+0x264/0x2c0 [ 1032.123685][T16155] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.123714][T16155] __asan_memcpy+0x40/0x70 [ 1032.123736][T16155] tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1032.123809][T16155] vivid_thread_vid_cap_tick+0x115b/0x6350 [ 1032.123865][T16155] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1032.123892][T16155] ? vivid_thread_vid_cap+0x4a3/0x1210 [ 1032.123922][T16155] ? _mutex_trylock_nest_lock+0x128/0x180 [ 1032.123954][T16155] ? vivid_thread_vid_cap+0x4a3/0x1210 [ 1032.123979][T16155] vivid_thread_vid_cap+0x939/0x1210 [ 1032.124019][T16155] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1032.124054][T16155] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1032.124085][T16155] ? do_raw_spin_lock+0x12b/0x2f0 [ 1032.124120][T16155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1032.124155][T16155] ? __kthread_parkme+0x71/0x1f0 [ 1032.124182][T16155] ? __kthread_parkme+0x196/0x1f0 [ 1032.124220][T16155] kthread+0x388/0x470 [ 1032.124250][T16155] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1032.124285][T16155] ? __pfx_kthread+0x10/0x10 [ 1032.124315][T16155] ret_from_fork+0x514/0xb70 [ 1032.124341][T16155] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.124366][T16155] ? __switch_to+0xc89/0x1420 [ 1032.124401][T16155] ? __pfx_kthread+0x10/0x10 [ 1032.124432][T16155] ret_from_fork_asm+0x1a/0x30 [ 1032.124470][T16155] [ 1032.125074][T16155] Kernel Offset: disabled