last executing test programs: 40m55.219348328s ago: executing program 32 (id=214): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'das08_isa\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x402, 0x2, 0x0, 0xbdd, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0xfff, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 31m6.914662785s ago: executing program 5 (id=3134): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000140), 0x4, 0x400) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 31m2.606326983s ago: executing program 5 (id=3142): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 31m2.181190807s ago: executing program 5 (id=3143): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725", 0x1a}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 30m58.502143259s ago: executing program 5 (id=3147): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000440)=0x2000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 30m54.416994545s ago: executing program 5 (id=3160): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) 30m48.796135415s ago: executing program 5 (id=3177): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x2b2b, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 30m47.215728158s ago: executing program 33 (id=3177): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x2b2b, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 29m59.170183212s ago: executing program 4 (id=3364): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 29m57.69027539s ago: executing program 4 (id=3382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0xf8, 0x3, 0x38415262, 0x1, 0x21, 0x1, 0x8, 0x7, 0x0, 0x0, 0x0, 0x2}}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) 29m57.160291619s ago: executing program 0 (id=3386): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 29m56.652431919s ago: executing program 0 (id=3388): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44a42, 0x8d) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[], 0x13) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x802, 0x1, 0xda0e}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, 0x0, 0xb, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a5f7", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd8063", 0x0, 0x2b, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c"}}}}}}}, 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) move_pages(r4, 0x5, &(0x7f0000000180)=[&(0x7f000037b000/0x2000)=nil, &(0x7f0000524000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000062000/0x2000)=nil, &(0x7f000032c000/0x4000)=nil], 0x0, &(0x7f00000001c0), 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x401, 0x4, 0x5, 0x0, 0x2, 0x2}}) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 29m55.706217492s ago: executing program 0 (id=3390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000000000005}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 29m54.645047508s ago: executing program 0 (id=3393): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 29m54.529233315s ago: executing program 4 (id=3396): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44a42, 0x8d) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[], 0x13) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x802, 0x1, 0xda0e}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, 0x0, 0xb, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a5f7", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd8063", 0x0, 0x2b, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c"}}}}}}}, 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) move_pages(r3, 0x5, &(0x7f0000000180)=[&(0x7f000037b000/0x2000)=nil, &(0x7f0000524000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000062000/0x2000)=nil, &(0x7f000032c000/0x4000)=nil], 0x0, &(0x7f00000001c0), 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x401, 0x4, 0x5, 0x0, 0x2, 0x2}}) 29m54.458519567s ago: executing program 0 (id=3397): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x15, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 29m54.114879815s ago: executing program 0 (id=3401): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) 29m53.772645337s ago: executing program 34 (id=3401): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) 29m53.507837096s ago: executing program 4 (id=3408): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 29m53.338799143s ago: executing program 4 (id=3409): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04132108c8000200c8000000c8000900c9"], 0x24) syz_open_dev$tty1(0xc, 0x4, 0x1) 29m52.856464149s ago: executing program 4 (id=3412): bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="eaffffff80000000001a0000f72dab84c3f7cffa", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000feffffff00"/20], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 29m52.456242556s ago: executing program 35 (id=3412): bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="eaffffff80000000001a0000f72dab84c3f7cffa", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000feffffff00"/20], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 26m50.26265676s ago: executing program 1 (id=4705): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000004600"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4004044) r1 = syz_usb_connect(0x2, 0x6c9, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x66, 0x98, 0x2f, 0x10, 0x2040, 0x4201, 0x9488, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b7, 0x2, 0x8, 0x5, 0x80, 0x8, "", [{{0x9, 0x4, 0xbe, 0x3, 0xb, 0xd2, 0xd9, 0x3d, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x13}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x3, 0x1e, "1905"}]}, @uac_control={{0xa, 0x24, 0x1, 0x400, 0x3c}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "108585"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, 0x4, [0x4, 0x6, 0xa, 0x2], 0xe}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x40, 0xfc}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, 0x2, [0x4, 0x8], 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x400, 0x3, 0x4, 0x6}]}], [{{0x9, 0x5, 0x3a198fc16dd31f47, 0x3, 0x3ff, 0xb, 0xfc, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x100}]}}, {{0x9, 0x5, 0x4, 0xc, 0x48, 0xc, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xfffa}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xb, 0x1, 0x1, [@generic={0xe4, 0x22, "403524bb3cb4943733beb02df301d9cc7dc7c3fcb9caaeb5c60d7ddf629b6307ba1c5b47824b640a3d02c86f358b5a3ad77a020361b17d00484af751b614b700cd86472640f9bae55abb0a495190377dc3673a6b05d2d77cc3bc9880ade900a0be2e97daf5a983c9eeffc19f8a6ec8861ebfb5a083267eeba8b8346797b491f7604d70ced94114c3aa9e195ece9fbe7df383f252fd82466f54285a98256516ad5734d53b914cc919a29c0381772138bb3fa90282f6466d5eb78fad32113f16d499174a25c9356cac969430501fc17d0ed3f4919a9579c335c772f5fa7060382e8fdd"}, @generic={0xc0, 0x4, "60e6ec239accc23c1e236f56bcd1daa83cd8a4a4c9b3b1bf7c6843fa3bf3f5f96c391614dddd55ad0c8e1ed477c6345f98924a8987066208297ca33fa561bfbefdbde8209f3a85645523b989d5792a7c7ee27574a5c731b91a8f3212187b4231d940e83bf670b79e1de731507e3f1faf764b501a5840c064130036bc045a1780106974e6e13877abbba8b4c0615931886c01693d8e596171958bbb0e4860b3cf7ec3329ba707e8aa965734a55e2aaf9aa81d67a195a94eb61f172d18e183"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xfb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x0, 0x8, 0x5, [@generic={0x30, 0x21, "ea6f33fabb33aed9d934ab0f86e875dd82b267648d711e4c787d139f8500efac34e1150163cbabaf21b6c4577164"}]}}, {{0x9, 0x5, 0x2, 0x17, 0x3ff, 0x1, 0x17, 0x2c, [@generic={0x10, 0x23, "b94c10790637a6dc595a9bc588b1"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x4, 0xb1, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x8}, @generic={0x6d, 0x0, "b9e3f9ae9f1f5910882125e90594a53fc9d8d773385876a8a4dbe45c19e35316f1d56e46a627a98b2735b3e9b6d0a447b5aaf92dfd0f3ef869c5fd4d3367ec9065209834c4c3874f85e9f930bc2846b225a7a99c9e028399be4a11bf03428d0b367b3354e79419deae917c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x0, 0x8, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6f, 0x1000}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0xfe, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf4, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x3}]}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0x0, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x42ac7226447cf717, 0xa, 0x6}]}}]}}, {{0x9, 0x4, 0x15, 0x8, 0x9, 0xe3, 0x15, 0x15, 0x8, [@generic={0x6c, 0x5, "f7e88ec1faa3ab5e178638838739ca6d123e6f9d1612123f599eddaedf61531810848871df2b241a72c3ef0f59d4dfb306ad0d70ca612b71be7ca48d01b68edf1a09b969e4f3784da58b40db58ca21f5518ca60368c0d05a551c8bf92c8dc3267a88afef241543682f66"}, @generic={0x100, 0x9, "318409fa1f0c614acf73b6c910027da2c22aec88fa7c8de88abeac7f82a41bb4561777cd74a85a66d8cbeb89dc260e48fcb9973cdb2392f3c1e4f4d855128fe4aef194d5d26257b4f4ce982367af383db8bb532bfb8239187bd0fc827706ff306c05b2c8af802b7a44c6525ffcdde8631ff0533d53b8c84187c23824abf1c5a215a142a8705dcf0fd3257f03233cd4ed8e18ef29d1c2c22f93fc50c531489227b96511e82e6444d16a32322759247e9a5f94861ba6b77f2277b42217bacac0b5606dcef90f783163995e5600fc893e2ee2c15a8131cfb973269ebafec6ccd884cfb6b6175b65dd0aabd80f1c8ea945d7759f3424e9170d7ac43595cb9046"}], [{{0x9, 0x5, 0xf, 0x3, 0x20, 0x2, 0x0, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xc}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x2, 0xd, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x40}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x7, 0x76, [@generic={0x37, 0x0, "94d055dc371ff37099c2690b3a6578aaec413cb18fcc5cc2e0352244dd2384471b9c6e1f1f855b3e3ebc8cdf15d9cca0d69e463907"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0xf9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1000}]}}, {{0x9, 0x5, 0x6, 0x7, 0x40, 0x7, 0x97, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6f, 0x7f}]}}, {{0x9, 0x5, 0x5, 0x12, 0x8, 0x6, 0x7, 0xd, [@generic={0xc9, 0x2, "cb12b1a86daed1698cc8f5964e9e8fb8d4fc5fd9e81777041388a8abeec603a1612d983b6e921a6c798464a360c809147e33601dc7173bff18171fe6251fb6c844f1843b604154116629fe4316f09d029277f6c82d449464918ee81d694d2c02c5449882e93b3428d9d5dc2d68d4733278cffd554e5be5d67d3dc865d896e56fcc57b188c6ba445548c05b6bfe073a4748faa758fde3652d9e4bbb50b3a4552bb579aafc4c742d2ec2cb3c7c9d31c8241d807241ad1768fd93bee1ec7fa38afb08fa63603e7291"}, @generic={0xc, 0x21, "7995a93308deaf276372"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0xaf, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x40}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x7, 0x74, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc5bf8b56f4854c93, 0x1, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x4, 0x64, 0x81, [@generic={0x60, 0x2a, "01258f3b7a4c70732835e76a1f3c5cbdc5c52e50d2e762e5216915866bf9c49753689b14da78d2a30173eb5de7eb33d5232b5936c762935a1af48ff962a4e1a95effbd6f23abdbb2bbf111c243daa0c8571bc8051621a1288307ccf73c02"}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x300, 0x9, 0x8, 0xa8, 0x40, 0x2}, 0x26, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f2600020a10030002000309040003100b14100408f872b69fff0f00000000000092c47486"], 0x4, [{0x28, &(0x7f0000000e80)=@string={0x28, 0x3, "40fd1ff35d6abf6501ce5ea6ceb9e73403d91587c8b9dbf1b4d1bb1892d18206a1fc1915af94"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xa6, &(0x7f0000000f00)=@string={0xa6, 0x3, "5342e33cd6f5869d6740404449da2e2b9007a28e9cb34aef5156c90258e4f95f1175730a77f5f65a67ddc71493c82d257b90a4d62776eb23931780d1df8a89973f41460cd5aea0ed7bb0c2389dc1594b8c226393f20cae49384fe9941009000558d8fa6996f9edefe259dbd268a7f6235db6c1132423260574158d9c71457eba77fea9678270c766abde2ccc91194181de727a6dca9cf963f5cf6125ca3e442c48068b34"}}, {0x73, &(0x7f0000000fc0)=@string={0x73, 0x3, "613fdc6dab5b3ef07ce28ebda4d6c3bdea3bcce463b31d286b5271f15ebe684b425356d47e6e82a24355db2bc68a1e8aebe8d95f1e69ba1803d7bc690f0fc55fd35169ac3e49c0c7355e468215a9cdb84b35091c04198b8b92d8f3a991cb883c880be721e195815ce25e4309cc1170d20d"}}]}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001300)={0x14, &(0x7f00000011c0)={0x40, 0x23, 0xe6, {0xe6, 0x5, "3218df4ff324a8c9dba68bd06e2d0ade3afff1b0195950b4cf2f5e3e4db7ee327560d9ed2e79e99f46ca45d14cc82d6bb349600534eb557a7f5bf723cfeb60d3f16007460346ea81f20aa205e5df7aafdb9ab58ca1586786867681fdfa30fc34bdb90a7e84b93cd9afaf720812fb443033d528000eb9bcebdb1fc8601b1ec7132ea932655502941c12e044371e85a1e9a2774f156ab6870c4d836bd8484f7bef63fd071ab5583d2caeb0e7ba1e159d376bea93b8276cebf7f7cd02111e5a0d5fe22db7c2d00c9b78ba9bad265e585c0ad4c5940cbee13215b04791360481ef63223101a8"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="0003e1000000e1039903cbadbf20eb70e180820dd60fb869ef7ccf8a87813c9dcdd467c199fce23d7fd3fa7218b3f72c1aca11585c068faefefb9508007d52eb7d910be88fcc9fb366f187ad23f014f47e9d6988e414e409f5a004b8d738ad9de77b0b254d8cff42959b84b86f2a78a1e18e3454e13459e5cc6d0c3caf5c7f45252eed36711ba7654613f42fe528b12e71c72efa6460e2ab9caad50c9cfcf93ef9bc2b7ead7ea8afef075412b31393263c0e08d60fcadaa6fe10b36ea4a149939ad16b27007acd8eb15421278a49ab2d7440f1853ace5386c2788af4e284ce01eadb5c86c7e69f"]}, &(0x7f0000001600)={0x44, &(0x7f0000001340)={0x20, 0x6, 0xbd, "3534029782611853be0ce0ac856dc0c527adeb3320961e00d1c684f6fdbd51a45f67c223fec6f7cdd073b6bb556ac97fc4f547045baf766733e941705c25753c50e2398c0871b58e788c963c8ee31732a5e77526b4632cd559675778baf5f8e800fd6dc2a78e43a4c8db0831fc3eaefd61a59112b0cd144843a2bdc5ff49af5d4f5f83c2bd7dcdf52f748d301d4fdee8cd11986b085c2338aa38bd2efcfdb20ccd3319776074524a6d727320779a3171aa714d5edc1760a97cc191b401"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x83}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000014c0)={0x20, 0x81, 0x3, "59c294"}, &(0x7f0000001500)=ANY=[@ANYBLOB="208202000008ffff"], &(0x7f00000004c0)=ANY=[@ANYBLOB="208303000100d5160b771cf0fe19a95569797505988ab67aa0fc3973d9e3ee355d8b050cb53e5f70cdaba23985b4d9cf3efa8da0581377fce422096928eea65b62e45afb0b81b0878ac4739f5a93c69ac4c9638dd78447673fec7947aebf2c663290c06cf4f78a90a1066f02eef105e5b4632f43df9306848a92170843f53bd428670074e5ea0cfbc10b4a12c001a641e0f4fce0f96841b536e56442e1f3c6f6bde9f4d8a1067eec7eda57d5b105389013f61fda3b164f7e6372575f426d785a14094145d796bebcae3a0cf36c6302357440dccd5b0e"], &(0x7f00000000c0)={0x20, 0x84, 0x4, "26c95488"}, &(0x7f00000015c0)={0x20, 0x85, 0x3, "01ba85"}}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xae9}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x670b}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xff}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x110}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x11}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000880) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8000, 0xef) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x4000, r5}, 0x0) 26m46.50836662s ago: executing program 1 (id=4727): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e5", 0x3}], 0x1}}], 0x1, 0x4046040) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r6, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r8, r7, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r9, 0x107, 0xb, &(0x7f0000000080)=""/169, &(0x7f0000000140)=0xa9) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x3c0, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {0x1f}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 26m45.56888962s ago: executing program 1 (id=4734): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x4, 0x0, 0x7ffd]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000001740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f0000000800)={0xec4, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x1e8, 0x111, 0x0, 0x1, {0x1e4, 0x5, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff0}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xaabf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3af}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfd26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x292}]}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x644, 0x111, 0x0, 0x1, {0x640, 0x5, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x91}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}]}]}]}, {0x47c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x26c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb86}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x164, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xda}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x640, 0x111, 0x0, 0x1, {0x63c, 0x5, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x180000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x470, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x26c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48bf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4}, 0xe7b2683d30ec3e50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000003f0009000000000000000000040000000400fd00080001"], 0x20}}, 0x4004080) 26m44.928862759s ago: executing program 1 (id=4737): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@seclabel}]}}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 26m44.636546525s ago: executing program 1 (id=4739): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x81, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x1, 0x6, 0x8}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x1], 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x6, 0xfa, 0x8, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x3, 0x2, {0x7, 0x25, 0x1, 0xc, 0xff, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xf5, 0x5, {0x7, 0x25, 0x1, 0xc, 0x3, 0xa4}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x22c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000000)=0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) setresuid(0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x5) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2, 0x0) getdents64(r7, &(0x7f0000000140)=""/204, 0xcc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 26m43.860243459s ago: executing program 1 (id=4743): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 26m43.693368478s ago: executing program 36 (id=4743): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 12m35.134197326s ago: executing program 7 (id=7852): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000004000000660800000000000018000000000000000000000000000000950000000000000095000000000000009500000000000000098e8c97d4bb4ed13187f77d5d3b2346942303abaeaca226d71d9a6d930470a6fd4adb008cb73a42fe9afa0c4ccb646eb9e15581bfa8f87debfb758deaf6291de9e4d6cfdd51af7a4997a877af545a"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002680)=[{0x0, 0x2}]}, 0x90) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet6(r3, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m34.489212502s ago: executing program 7 (id=7853): sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 12m25.684883711s ago: executing program 7 (id=7867): socket$unix(0x1, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x280600, 0x0) syz_open_dev$swradio(&(0x7f00000006c0), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = fsopen(&(0x7f0000000200)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x44, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4003, 0x8002) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r5, @ANYBLOB="80000f060a000200aaaaaaaaaa1b0000a5059598"], 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x4, 0x7, {0xffffffffffffffff}, {}, 0x8000000000000000, 0x8}) 12m25.161560345s ago: executing program 7 (id=7871): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05", 0x34}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12m24.307455615s ago: executing program 7 (id=7875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m23.948403669s ago: executing program 7 (id=7878): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000100000000000008"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 12m7.866637992s ago: executing program 37 (id=7878): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="000100000000000008"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 9.651893475s ago: executing program 2 (id=11038): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000795000/0x2000)=nil, 0x2000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28cb7688b8000007", @ANYRES16=0x0, @ANYRES64=r1, @ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="09000000010000006d0500000200000020000200", @ANYRES32, @ANYBLOB="0600"/20, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="80075a8c8c152c0e74237da117d6841f1878fdb1ac03593098d36278a510af0ff80412e7a85d9c89c603a04500000000000000079bc98fffd753544aa12ce2eb47682cd0d33d11cfcdb6b38206d66222fc936c572ec6cb05103cff2e65a5142e31e1e0"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x6}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) rmdir(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001f00010026bd7000fedbdf25fe880000000000c39600000000000101d50004d302c0bc3847ec1d50713ce200d0639d7d63354d61a7f9b86c00fe870000002561c8000004dcffb84ba20fd15dcb21956a95a0fa7717fba57cdd707375d27e88e3e78aa475ef8aa01eaca4bbd8e1462680f6ce025262c9af1fc72075597f5673cfa7", @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x240004c4) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f00000000c0)=0x6) prlimit64(r4, 0x6, &(0x7f0000000000)={0x7, 0xffffffffffffffff}, &(0x7f0000000380)) listen(r2, 0x90004) sendmsg$key(0xffffffffffffffff, 0x0, 0x24000000) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100007f107240450c8062fcd5000000010902120001fc0000010904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_io_uring_setup(0x57eb, &(0x7f0000000580)={0x0, 0x59b, 0x2, 0xfffffffb, 0xa9}, &(0x7f0000000340), &(0x7f0000000240), &(0x7f0000000300)) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x7, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000180)}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vcsu(&(0x7f0000004880), 0x1, 0x8041) 5.633345546s ago: executing program 6 (id=11053): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 4.960398041s ago: executing program 9 (id=11055): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151", 0x2d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.949922551s ago: executing program 2 (id=11056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) (fail_nth: 1) 4.810589836s ago: executing program 9 (id=11057): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000280)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) 4.632046972s ago: executing program 6 (id=11059): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000840)={&(0x7f0000000400)={{@local, 0x8}, {@my=0x0, 0x8}, 0x400, "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"}, 0x418, 0x9}) (fail_nth: 1) 4.090101709s ago: executing program 2 (id=11062): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab08, r1) (fail_nth: 1) 4.008590925s ago: executing program 6 (id=11063): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f0000006300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0xc, 0x114, 0x9}], 0x24}}], 0x1, 0x20044800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_SET_SOCK(r0, 0xab08, r3) 3.95740092s ago: executing program 3 (id=11064): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x70bd27, 0x0, {}, [{0xc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x20000000, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x54) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000003c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@release_agent={'release_agent', 0x3d, './cgroup'}}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000edff0081000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x7e, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.220917908s ago: executing program 2 (id=11067): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151", 0x2d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.160015113s ago: executing program 2 (id=11068): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xbee8bde3dd82aadc, &(0x7f0000000100)={0x9, 0xed7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000001600)={0x1, 0x40, 0x1000, &(0x7f0000000600)=""/4096}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x9, &(0x7f0000000240)={0x8, 0x246}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[0x200000000000d45, 0x800001000005, 0x10, 0x1, 0xfffc, 0x2000, 0x1000000000000007, 0xa, 0x80000001, 0x6, 0x200000000000, 0x8, 0x401, 0x4, 0x9, 0xfffffffffffffffd], 0x2000, 0x20000}) r6 = syz_clone(0x808011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(r5, &(0x7f0000002680)=[{&(0x7f00000003c0)=""/108}, {&(0x7f0000000440)=""/149}, {&(0x7f0000001640)=""/4096}, {&(0x7f0000002640)=""/42}], 0x1) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x8, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) getsockopt$inet_mptcp_buf(r1, 0x6, 0x4, 0xfffffffffffffffd, 0x0) 2.926652226s ago: executing program 6 (id=11070): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2", 0x77}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.85904397s ago: executing program 8 (id=11071): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2", 0x77}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.612379684s ago: executing program 6 (id=11072): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.59353205s ago: executing program 8 (id=11073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x10, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x63}, {0x0, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x82}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x5, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x62, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0x7, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x9}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x7e, 0x9, 0x20, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0xd, 0xf7, 0x7}}) 2.426475943s ago: executing program 8 (id=11074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7e7a7b69c7c8ffd8}, {0x85, 0x0, 0x0, 0x15}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x10ee, &(0x7f0000000640)={0x0, 0x2454, 0x800, 0x2, 0xfc}, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012"], 0xa0}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000140)={{0x60000, 0xffff1000, 0xf000, 0x5, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0xf, 0x3, 0x3, 0x7, 0x5, 0x6, 0x1, 0x44, 0xfa, 0x5}, {0xf000, 0x8000000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x2000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x19, 0x9}, {0xeeeea000, 0x41000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x2}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0xff, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x7f}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80040010, 0x0, 0x6000, 0x21, 0x5, 0xf800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) 1.655655791s ago: executing program 8 (id=11075): r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000040c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004100)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4004) r8 = socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x8000, 0x6) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000003cc0), 0x0, 0x4001c00) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x5, 0x6, 0x9}, {0x3, 0x2, 0xf, 0x4}, {0x4, 0x1, 0xb, 0x8}, {0x5, 0x3, 0x6, 0x8}, {0x0, 0x5, 0x0, 0x4}, {0x4, 0x4, 0xc, 0x4}], 0x10, 0x4}, 0x94) 1.603828982s ago: executing program 9 (id=11076): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f", 0xc5}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.602768677s ago: executing program 6 (id=11077): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f020301020909250f008101227205090581030006"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) memfd_create(0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r4, r3, 0x80000) ioctl$FIONREAD(r4, 0x541b, 0x0) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x32}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r6) keyctl$set_timeout(0xf, r6, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x341100, 0x0) 776.9521ms ago: executing program 3 (id=11078): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151", 0x2d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 740.521363ms ago: executing program 9 (id=11079): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 600.244796ms ago: executing program 3 (id=11080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}}, 0x804) 544.170886ms ago: executing program 9 (id=11081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES32=r0], 0x1c}}, 0x804) (fail_nth: 1) 446.521866ms ago: executing program 3 (id=11082): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2", 0x77}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 441.706954ms ago: executing program 8 (id=11083): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2", 0x77}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 200.480443ms ago: executing program 3 (id=11084): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c64d2, &(0x7f0000000100)={r3, 0x80000}) 109.03334ms ago: executing program 9 (id=11085): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4, {0xa, 0x4e22, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x40) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000004f80), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000005080)={0x0, 0x0, &(0x7f0000005040)={&(0x7f0000004fc0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x20000800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000000000090a010400000000000000000a0000040900010073797a31000000000900010073797a30000000000900020073797a310000000008000a40fffffffc0c000b400000000000000006140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c64d2, &(0x7f0000000100)={r4, 0x80000}) 108.047109ms ago: executing program 2 (id=11086): userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x4, 0x4, 0x2, 0x18ca0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, @value=r1, @void, @value=r1}, 0x50) syz_usbip_server_init(0x1) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24004080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 106.004435ms ago: executing program 3 (id=11087): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 0s ago: executing program 8 (id=11088): userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x4, 0x4, 0x2, 0x18ca0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, @value=r1, @void, @value=r1}, 0x50) syz_usbip_server_init(0x1) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x24004080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) kernel console output (not intermixed with test programs): lting to 1000 [ 2494.226531][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2494.246068][ T7660] FAULT_INJECTION: forcing a failure. [ 2494.246068][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.284160][ T7660] CPU: 0 UID: 0 PID: 7660 Comm: syz.9.10559 Tainted: G L syzkaller #0 PREEMPT(full) [ 2494.284193][ T7660] Tainted: [L]=SOFTLOCKUP [ 2494.284201][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2494.284212][ T7660] Call Trace: [ 2494.284219][ T7660] [ 2494.284227][ T7660] dump_stack_lvl+0x100/0x190 [ 2494.284257][ T7660] should_fail_ex.cold+0x5/0xa [ 2494.284285][ T7660] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2494.284311][ T7660] should_failslab+0xc2/0x120 [ 2494.284334][ T7660] __kmalloc_noprof+0xe0/0x850 [ 2494.284362][ T7660] ? kfree+0x1dd/0x6c0 [ 2494.284391][ T7660] tomoyo_realpath_from_path+0xb6/0x690 [ 2494.284422][ T7660] tomoyo_path_number_perm+0x23c/0x580 [ 2494.284443][ T7660] ? tomoyo_path_number_perm+0x22e/0x580 [ 2494.284466][ T7660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2494.284515][ T7660] ? find_held_lock+0x2b/0x80 [ 2494.284535][ T7660] ? __fget_files+0x215/0x3d0 [ 2494.284559][ T7660] ? hook_file_ioctl_common+0x149/0x410 [ 2494.284586][ T7660] ? __fget_files+0x215/0x3d0 [ 2494.284614][ T7660] ? __fget_files+0x21f/0x3d0 [ 2494.284642][ T7660] security_file_ioctl+0xd3/0x230 [ 2494.284667][ T7660] __x64_sys_ioctl+0xb7/0x210 [ 2494.284692][ T7660] do_syscall_64+0x10b/0xf80 [ 2494.284717][ T7660] ? clear_bhb_loop+0x40/0x90 [ 2494.284743][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.284765][ T7660] RIP: 0033:0x7f4acad9cdd9 [ 2494.284783][ T7660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2494.284803][ T7660] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2494.284824][ T7660] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2494.284836][ T7660] RDX: 0000200000000280 RSI: 00000000000089e1 RDI: 0000000000000003 [ 2494.284847][ T7660] RBP: 00007f4acbcf3090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.284860][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.284871][ T7660] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2494.284901][ T7660] [ 2494.284910][ T7660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2494.307987][ T7330] veth0_vlan: entered promiscuous mode [ 2494.768815][ T7330] veth1_vlan: entered promiscuous mode [ 2494.867866][ T7666] FAULT_INJECTION: forcing a failure. [ 2494.867866][ T7666] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2494.881265][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.2.10561 Tainted: G L syzkaller #0 PREEMPT(full) [ 2494.881300][ T7666] Tainted: [L]=SOFTLOCKUP [ 2494.881308][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2494.881320][ T7666] Call Trace: [ 2494.881330][ T7666] [ 2494.881340][ T7666] dump_stack_lvl+0x100/0x190 [ 2494.881371][ T7666] should_fail_ex.cold+0x5/0xa [ 2494.881395][ T7666] ? prepare_alloc_pages+0x16d/0x5f0 [ 2494.881423][ T7666] should_fail_alloc_page+0xeb/0x140 [ 2494.881448][ T7666] prepare_alloc_pages+0x1f0/0x5f0 [ 2494.881478][ T7666] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 2494.881514][ T7666] ? __lock_acquire+0x4a5/0x2630 [ 2494.881547][ T7666] ? __perf_event_task_sched_in+0x27a/0xa10 [ 2494.881577][ T7666] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2494.881610][ T7666] ? find_held_lock+0x2b/0x80 [ 2494.881630][ T7666] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 2494.881652][ T7666] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 2494.881674][ T7666] ? rcu_is_watching+0x12/0xc0 [ 2494.881707][ T7666] ? lockdep_hardirqs_on+0x78/0x100 [ 2494.881737][ T7666] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 2494.881760][ T7666] ? rcu_is_watching+0x12/0xc0 [ 2494.881790][ T7666] ? trace_sched_exit_tp+0x11c/0x160 [ 2494.881813][ T7666] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2494.881840][ T7666] ? policy_nodemask+0xed/0x4f0 [ 2494.881865][ T7666] alloc_pages_mpol+0x1fb/0x540 [ 2494.881889][ T7666] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2494.881912][ T7666] ? lock_acquire+0x1b1/0x370 [ 2494.881943][ T7666] alloc_pages_noprof+0x1a/0x160 [ 2494.881969][ T7666] get_free_pages_noprof+0x10/0xb0 [ 2494.881991][ T7666] vcs_read+0xba/0xc00 [ 2494.882020][ T7666] ? rcu_is_watching+0x12/0xc0 [ 2494.882051][ T7666] ? lockdep_hardirqs_on+0x78/0x100 [ 2494.882085][ T7666] ? irqentry_exit+0x246/0x790 [ 2494.882119][ T7666] ? avc_policy_seqno+0x9/0x20 [ 2494.882145][ T7666] ? selinux_file_permission+0x8f/0x6d0 [ 2494.882172][ T7666] ? __pfx_vcs_read+0x10/0x10 [ 2494.882199][ T7666] ? bpf_lsm_file_permission+0x9/0x10 [ 2494.882227][ T7666] ? security_file_permission+0x76/0x210 [ 2494.882254][ T7666] ? rw_verify_area+0xce/0x6d0 [ 2494.882285][ T7666] ? __pfx_vcs_read+0x10/0x10 [ 2494.882316][ T7666] vfs_read+0x1e4/0xb30 [ 2494.882341][ T7666] ? __pfx_vfs_read+0x10/0x10 [ 2494.882361][ T7666] ? find_held_lock+0x2b/0x80 [ 2494.882380][ T7666] ? __fget_files+0x215/0x3d0 [ 2494.882405][ T7666] ? __fget_files+0x215/0x3d0 [ 2494.882435][ T7666] ? __fget_files+0x21f/0x3d0 [ 2494.882468][ T7666] ksys_read+0x12a/0x250 [ 2494.882489][ T7666] ? __pfx_ksys_read+0x10/0x10 [ 2494.882510][ T7666] ? rcu_is_watching+0x12/0xc0 [ 2494.882539][ T7666] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 2494.882567][ T7666] ? rcu_is_watching+0x12/0xc0 [ 2494.882600][ T7666] do_syscall_64+0x10b/0xf80 [ 2494.882629][ T7666] ? clear_bhb_loop+0x40/0x90 [ 2494.882655][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.882677][ T7666] RIP: 0033:0x7f508719cdd9 [ 2494.882695][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2494.882716][ T7666] RSP: 002b:00007f5087ff9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2494.882736][ T7666] RAX: ffffffffffffffda RBX: 00007f5087416180 RCX: 00007f508719cdd9 [ 2494.882751][ T7666] RDX: 0000000000002020 RSI: 0000200000002300 RDI: 0000000000000005 [ 2494.882765][ T7666] RBP: 00007f5087ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.882778][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.882790][ T7666] R13: 00007f5087416218 R14: 00007f5087416180 R15: 00007ffc2107b298 [ 2494.882819][ T7666] [ 2495.269076][ T7330] veth0_macvtap: entered promiscuous mode [ 2495.280003][ T7330] veth1_macvtap: entered promiscuous mode [ 2495.299382][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2495.311449][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2495.875312][ T8133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.271076][ T8133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.363556][T24012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.418201][T24012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.452632][ T7681] FAULT_INJECTION: forcing a failure. [ 2496.452632][ T7681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2496.512309][ T7681] CPU: 1 UID: 0 PID: 7681 Comm: syz.6.10563 Tainted: G L syzkaller #0 PREEMPT(full) [ 2496.512338][ T7681] Tainted: [L]=SOFTLOCKUP [ 2496.512345][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2496.512357][ T7681] Call Trace: [ 2496.512364][ T7681] [ 2496.512372][ T7681] dump_stack_lvl+0x100/0x190 [ 2496.512402][ T7681] should_fail_ex.cold+0x5/0xa [ 2496.512432][ T7681] _copy_to_user+0x32/0xd0 [ 2496.512460][ T7681] simple_read_from_buffer+0xcb/0x170 [ 2496.512488][ T7681] proc_fail_nth_read+0x1af/0x230 [ 2496.512512][ T7681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2496.512536][ T7681] ? rw_verify_area+0xce/0x6d0 [ 2496.512566][ T7681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2496.512606][ T7681] vfs_read+0x1e4/0xb30 [ 2496.512631][ T7681] ? __pfx_vfs_read+0x10/0x10 [ 2496.512654][ T7681] ? __fget_files+0x215/0x3d0 [ 2496.512682][ T7681] ? __fget_files+0x21f/0x3d0 [ 2496.512712][ T7681] ksys_read+0x12a/0x250 [ 2496.512731][ T7681] ? __pfx_ksys_read+0x10/0x10 [ 2496.512755][ T7681] ? rcu_is_watching+0x12/0xc0 [ 2496.512785][ T7681] do_syscall_64+0x10b/0xf80 [ 2496.512811][ T7681] ? clear_bhb_loop+0x40/0x90 [ 2496.512833][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2496.512851][ T7681] RIP: 0033:0x7f5a8175d60e [ 2496.512868][ T7681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2496.512884][ T7681] RSP: 002b:00007f5a7f9d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2496.512901][ T7681] RAX: ffffffffffffffda RBX: 00007f5a7f9d56c0 RCX: 00007f5a8175d60e [ 2496.512913][ T7681] RDX: 000000000000000f RSI: 00007f5a7f9d50a0 RDI: 0000000000000005 [ 2496.512925][ T7681] RBP: 00007f5a7f9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2496.512936][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2496.512947][ T7681] R13: 00007f5a81a16128 R14: 00007f5a81a16090 R15: 00007ffc9b485548 [ 2496.512979][ T7681] [ 2496.802124][ T8133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2496.814396][ T8133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2497.053775][ T8133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2497.088593][ T8133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2497.359749][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10567'. [ 2498.286214][ T30] audit: type=1400 audit(1777060739.899:1312): avc: denied { attach_queue } for pid=7699 comm="syz.9.10571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2498.306842][ T7700] netlink: 'syz.9.10571': attribute type 2 has an invalid length. [ 2499.634459][ T30] audit: type=1400 audit(1777060741.163:1313): avc: denied { connect } for pid=7699 comm="syz.9.10571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2500.356148][ T30] audit: type=1326 audit(1777060741.846:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7715 comm="syz.9.10576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4acad9cdd9 code=0x0 [ 2500.382614][T14551] usb 7-1: new low-speed USB device number 60 using dummy_hcd [ 2500.460773][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2500.546134][T14551] usb 7-1: device descriptor read/64, error -71 [ 2500.613059][ T7726] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value [ 2500.777951][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 2500.788585][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2500.797773][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.806351][ T10] usb 4-1: Product: syz [ 2500.810567][ T10] usb 4-1: Manufacturer: syz [ 2500.815887][ T10] usb 4-1: SerialNumber: syz [ 2500.828249][ T10] usb 4-1: config 0 descriptor?? [ 2500.839093][ T10] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 2500.920621][T14551] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 2501.348389][ T30] audit: type=1400 audit(1777060742.763:1315): avc: denied { ioctl } for pid=7720 comm="syz.2.10578" path="socket:[154027]" dev="sockfs" ino=154027 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2501.465034][T14551] usb 7-1: device descriptor read/64, error -71 [ 2501.595543][ T10] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 2501.604090][T14551] usb usb7-port1: attempt power cycle [ 2501.621462][ T10] visor 4-1:0.0: probe with driver visor failed with error -5 [ 2501.811059][ T1228] usb 4-1: USB disconnect, device number 3 [ 2501.934796][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10582'. [ 2502.095983][T14551] usb 7-1: new low-speed USB device number 62 using dummy_hcd [ 2502.321432][T14551] usb 7-1: device descriptor read/8, error -71 [ 2502.650080][T14551] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 2502.673180][T14551] usb 7-1: device descriptor read/8, error -71 [ 2502.807646][T14551] usb usb7-port1: unable to enumerate USB device [ 2502.869753][ T30] audit: type=1400 audit(1777060744.185:1316): avc: denied { write } for pid=7742 comm="syz.2.10583" name="file0" dev="tmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2502.968605][ T30] audit: type=1400 audit(1777060744.195:1317): avc: denied { ioctl } for pid=7742 comm="syz.2.10583" path="/244/file0" dev="tmpfs" ino=1287 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2503.408019][ T7762] random: crng reseeded on system resumption [ 2503.818545][ T8133] wlan0: Trigger new scan to find an IBSS to join [ 2503.829625][ T30] audit: type=1326 audit(1777060745.093:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7760 comm="syz.3.10589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f901979cdd9 code=0x0 [ 2504.026250][ T7767] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.10590'. [ 2505.002398][ T1228] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2505.123635][ T7775] openvswitch: netlink: IPv4 tunnel dst address is zero [ 2505.408458][ T1228] usb 4-1: device descriptor read/64, error -71 [ 2505.670153][ T7782] FAULT_INJECTION: forcing a failure. [ 2505.670153][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2505.709088][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: syz.9.10594 Tainted: G L syzkaller #0 PREEMPT(full) [ 2505.709130][ T7782] Tainted: [L]=SOFTLOCKUP [ 2505.709136][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2505.709148][ T7782] Call Trace: [ 2505.709155][ T7782] [ 2505.709163][ T7782] dump_stack_lvl+0x100/0x190 [ 2505.709191][ T7782] should_fail_ex.cold+0x5/0xa [ 2505.709222][ T7782] _copy_from_user+0x2e/0xd0 [ 2505.709250][ T7782] move_addr_to_kernel+0x65/0x170 [ 2505.709277][ T7782] __sys_bind+0x11d/0x260 [ 2505.709304][ T7782] ? __pfx___sys_bind+0x10/0x10 [ 2505.709329][ T7782] ? __fget_files+0x21f/0x3d0 [ 2505.709363][ T7782] ? __pfx_ksys_write+0x10/0x10 [ 2505.709392][ T7782] __x64_sys_bind+0x72/0xb0 [ 2505.709417][ T7782] ? lockdep_hardirqs_on+0x78/0x100 [ 2505.709446][ T7782] do_syscall_64+0x10b/0xf80 [ 2505.709474][ T7782] ? clear_bhb_loop+0x40/0x90 [ 2505.709500][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.709522][ T7782] RIP: 0033:0x7f4acad9cdd9 [ 2505.709540][ T7782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2505.709560][ T7782] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2505.709581][ T7782] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2505.709595][ T7782] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000004 [ 2505.709609][ T7782] RBP: 00007f4acbcf3090 R08: 0000000000000000 R09: 0000000000000000 [ 2505.709622][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2505.709634][ T7782] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2505.709664][ T7782] [ 2505.999002][ T1228] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2506.042811][ T7785] sctp: [Deprecated]: syz.6.10597 (pid 7785) Use of int in maxseg socket option. [ 2506.042811][ T7785] Use struct sctp_assoc_value instead [ 2506.060295][ T30] audit: type=1400 audit(1777060747.161:1319): avc: denied { setopt } for pid=7784 comm="syz.6.10597" lport=49606 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2506.266985][ T1228] usb 4-1: device descriptor read/64, error -71 [ 2506.464851][ T7792] syz_tun: entered promiscuous mode [ 2506.471506][ T7792] macvtap1: entered promiscuous mode [ 2506.494458][ T7792] syz_tun: left promiscuous mode [ 2506.730234][ T1228] usb usb4-port1: attempt power cycle [ 2506.912311][ T30] audit: type=1326 audit(1777060747.975:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.8.10601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf19cdd9 code=0x0 [ 2507.160703][ T1228] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2507.193791][ T1228] usb 4-1: device descriptor read/8, error -71 [ 2507.249582][ T7813] FAULT_INJECTION: forcing a failure. [ 2507.249582][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 2507.290896][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.6.10605 Tainted: G L syzkaller #0 PREEMPT(full) [ 2507.290929][ T7813] Tainted: [L]=SOFTLOCKUP [ 2507.290937][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2507.290948][ T7813] Call Trace: [ 2507.290954][ T7813] [ 2507.290962][ T7813] dump_stack_lvl+0x100/0x190 [ 2507.290993][ T7813] should_fail_ex.cold+0x5/0xa [ 2507.291022][ T7813] should_failslab+0xc2/0x120 [ 2507.291045][ T7813] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2507.291076][ T7813] ? __alloc_skb+0x140/0x710 [ 2507.291104][ T7813] ? __alloc_skb+0x5b7/0x710 [ 2507.291135][ T7813] __alloc_skb+0x140/0x710 [ 2507.291162][ T7813] ? __alloc_skb+0x5b7/0x710 [ 2507.291189][ T7813] ? __pfx___alloc_skb+0x10/0x10 [ 2507.291226][ T7813] alloc_skb_with_frags+0xdd/0x760 [ 2507.291252][ T7813] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2507.291289][ T7813] sock_alloc_send_pskb+0x801/0x980 [ 2507.291327][ T7813] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2507.291359][ T7813] ? sock_has_perm+0x258/0x2f0 [ 2507.291391][ T7813] ? __pfx_sock_has_perm+0x10/0x10 [ 2507.291425][ T7813] hci_sock_sendmsg+0x1c7/0x2620 [ 2507.291462][ T7813] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2507.291497][ T7813] sock_write_iter+0x524/0x5a0 [ 2507.291518][ T7813] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2507.291545][ T7813] ? __pfx_sock_write_iter+0x10/0x10 [ 2507.291578][ T7813] ? bpf_lsm_file_permission+0x9/0x10 [ 2507.291608][ T7813] ? security_file_permission+0x76/0x210 [ 2507.291635][ T7813] ? rw_verify_area+0xce/0x6d0 [ 2507.291666][ T7813] vfs_write+0x6ac/0x1070 [ 2507.291688][ T7813] ? __pfx_sock_write_iter+0x10/0x10 [ 2507.291715][ T7813] ? __pfx_vfs_write+0x10/0x10 [ 2507.291734][ T7813] ? find_held_lock+0x2b/0x80 [ 2507.291773][ T7813] ksys_write+0x1f8/0x250 [ 2507.291795][ T7813] ? __pfx_ksys_write+0x10/0x10 [ 2507.291820][ T7813] ? rcu_is_watching+0x12/0xc0 [ 2507.291872][ T7813] do_syscall_64+0x10b/0xf80 [ 2507.291901][ T7813] ? clear_bhb_loop+0x40/0x90 [ 2507.291925][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2507.291946][ T7813] RIP: 0033:0x7f5a8179cdd9 [ 2507.291963][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2507.291981][ T7813] RSP: 002b:00007f5a7f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2507.292000][ T7813] RAX: ffffffffffffffda RBX: 00007f5a81a15fa0 RCX: 00007f5a8179cdd9 [ 2507.292012][ T7813] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 2507.292024][ T7813] RBP: 00007f5a7f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2507.292036][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2507.292048][ T7813] R13: 00007f5a81a16038 R14: 00007f5a81a15fa0 R15: 00007ffc9b485548 [ 2507.292074][ T7813] [ 2508.169595][ T62] wlan0: Trigger new scan to find an IBSS to join [ 2508.369520][ T7829] FAULT_INJECTION: forcing a failure. [ 2508.369520][ T7829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2508.389568][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.9.10611 Tainted: G L syzkaller #0 PREEMPT(full) [ 2508.389590][ T7829] Tainted: [L]=SOFTLOCKUP [ 2508.389595][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2508.389608][ T7829] Call Trace: [ 2508.389613][ T7829] [ 2508.389619][ T7829] dump_stack_lvl+0x100/0x190 [ 2508.389639][ T7829] should_fail_ex.cold+0x5/0xa [ 2508.389656][ T7829] _copy_from_user+0x2e/0xd0 [ 2508.389672][ T7829] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 2508.389689][ T7829] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 2508.389708][ T7829] do_sock_getsockopt+0x530/0x6e0 [ 2508.389719][ T7829] ? __lock_acquire+0x4a5/0x2630 [ 2508.389737][ T7829] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2508.389749][ T7829] ? find_held_lock+0x2b/0x80 [ 2508.389759][ T7829] ? ksys_write+0x190/0x250 [ 2508.389775][ T7829] ? find_held_lock+0x2b/0x80 [ 2508.389790][ T7829] ? __fget_files+0x21f/0x3d0 [ 2508.389807][ T7829] __sys_getsockopt+0x148/0x260 [ 2508.389832][ T7829] ? __x64_sys_getsockopt+0xbd/0x160 [ 2508.389847][ T7829] __x64_sys_getsockopt+0xbd/0x160 [ 2508.389863][ T7829] ? do_syscall_64+0x90/0xf80 [ 2508.389880][ T7829] ? lockdep_hardirqs_on+0x78/0x100 [ 2508.389897][ T7829] do_syscall_64+0x10b/0xf80 [ 2508.389912][ T7829] ? clear_bhb_loop+0x40/0x90 [ 2508.389927][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2508.389939][ T7829] RIP: 0033:0x7f4acad9cdd9 [ 2508.389949][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2508.389960][ T7829] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2508.389972][ T7829] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2508.389980][ T7829] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 2508.389991][ T7829] RBP: 00007f4acbcf3090 R08: 00002000000001c0 R09: 0000000000000000 [ 2508.389998][ T7829] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 2508.390005][ T7829] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2508.390020][ T7829] [ 2508.743288][ T7830] netlink: 'syz.3.10609': attribute type 10 has an invalid length. [ 2508.754547][ T7830] team0: Device ipvlan1 failed to register rx_handler [ 2508.889159][ T7824] ISOFS: Unable to identify CD-ROM format. [ 2508.984597][ T30] audit: type=1326 audit(1777060749.910:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.2.10614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f508719cdd9 code=0x0 [ 2509.118619][T14551] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2509.322881][T14551] usb 10-1: Using ep0 maxpacket: 32 [ 2509.370171][T14551] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.623867][T14551] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2509.667327][T26100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2509.691646][T14551] usb 10-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 2509.755670][T14551] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.806617][T14551] usb 10-1: Product: syz [ 2509.828077][T14551] usb 10-1: Manufacturer: syz [ 2509.844301][T14551] usb 10-1: SerialNumber: syz [ 2509.987836][ T7853] netlink: 'syz.6.10621': attribute type 1 has an invalid length. [ 2510.067321][T16083] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2510.074963][ T7856] bond1: (slave geneve2): making interface the new active one [ 2510.090345][ T7856] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2510.099670][T24012] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2510.113101][T24012] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2510.137590][T24012] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2510.167652][T24012] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2510.217002][T16083] usb 3-1: device descriptor read/64, error -71 [ 2510.225031][ T30] audit: type=1400 audit(1777060751.070:1322): avc: denied { append } for pid=7860 comm="syz.6.10623" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2510.306314][T14551] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2510.330601][T14551] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2510.484788][T16083] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2510.505528][ T5584] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2510.563551][T14551] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2510.576061][T14551] usb 10-1: USB disconnect, device number 28 [ 2510.644532][T16083] usb 3-1: device descriptor read/64, error -71 [ 2510.655425][ T5584] usb 7-1: device descriptor read/64, error -71 [ 2510.668521][ T6674] udevd[6674]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2510.715967][ T30] audit: type=1326 audit(1777060751.529:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7868 comm="syz.8.10625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf19cdd9 code=0x0 [ 2510.772853][T16083] usb usb3-port1: attempt power cycle [ 2510.945474][ T5584] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2511.093168][ T5584] usb 7-1: device descriptor read/64, error -71 [ 2511.135898][T16083] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2511.170808][T16083] usb 3-1: device descriptor read/8, error -71 [ 2511.226057][ T5584] usb usb7-port1: attempt power cycle [ 2511.446000][T16083] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2511.569445][T16083] usb 3-1: device descriptor read/8, error -71 [ 2511.597641][T30831] Bluetooth: hci5: command 0x0406 tx timeout [ 2511.633825][ T5584] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2511.801596][T16083] usb usb3-port1: unable to enumerate USB device [ 2511.857502][ T5584] usb 7-1: device descriptor read/8, error -71 [ 2512.129782][ T5584] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2512.281145][ T5584] usb 7-1: device descriptor read/8, error -71 [ 2512.305314][ T7900] syz_tun: entered promiscuous mode [ 2512.311541][ T7900] macvtap1: entered promiscuous mode [ 2512.529845][ T7900] syz_tun: left promiscuous mode [ 2512.592572][ T30] audit: type=1326 audit(1777060753.297:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.3.10637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f901979cdd9 code=0x0 [ 2512.641563][ T5584] usb usb7-port1: unable to enumerate USB device [ 2513.371038][ T30] audit: type=1400 audit(1777060754.027:1325): avc: denied { getopt } for pid=7910 comm="syz.9.10642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2514.592110][ T5584] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2514.673480][ T7941] overlay: Unknown parameter 'userxattr:uuid' [ 2514.705012][ T30] audit: type=1400 audit(1777060755.235:1326): avc: denied { mounton } for pid=7935 comm="syz.3.10649" path="/13/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 2514.995045][ T5584] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 2515.014793][ T5584] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 2515.035320][ T7946] FAULT_INJECTION: forcing a failure. [ 2515.035320][ T7946] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.038286][ T5584] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2515.086030][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.9.10651 Tainted: G L syzkaller #0 PREEMPT(full) [ 2515.086065][ T7946] Tainted: [L]=SOFTLOCKUP [ 2515.086073][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2515.086086][ T7946] Call Trace: [ 2515.086093][ T7946] [ 2515.086103][ T7946] dump_stack_lvl+0x100/0x190 [ 2515.086133][ T7946] should_fail_ex.cold+0x5/0xa [ 2515.086161][ T7946] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2515.086183][ T7946] should_failslab+0xc2/0x120 [ 2515.086206][ T7946] __kmalloc_noprof+0xe0/0x850 [ 2515.086234][ T7946] ? kfree+0x1dd/0x6c0 [ 2515.086264][ T7946] tomoyo_realpath_from_path+0xb6/0x690 [ 2515.086300][ T7946] tomoyo_path_number_perm+0x23c/0x580 [ 2515.086321][ T7946] ? tomoyo_path_number_perm+0x22e/0x580 [ 2515.086342][ T7946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2515.086385][ T7946] ? find_held_lock+0x2b/0x80 [ 2515.086404][ T7946] ? __fget_files+0x215/0x3d0 [ 2515.086425][ T7946] ? hook_file_ioctl_common+0x149/0x410 [ 2515.086449][ T7946] ? __fget_files+0x215/0x3d0 [ 2515.086484][ T7946] ? __fget_files+0x21f/0x3d0 [ 2515.086510][ T7946] security_file_ioctl+0xd3/0x230 [ 2515.086533][ T7946] __x64_sys_ioctl+0xb7/0x210 [ 2515.086554][ T7946] do_syscall_64+0x10b/0xf80 [ 2515.086582][ T7946] ? clear_bhb_loop+0x40/0x90 [ 2515.086607][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2515.086629][ T7946] RIP: 0033:0x7f4acad9cdd9 [ 2515.086649][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2515.086670][ T7946] RSP: 002b:00007f4acbcb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2515.086691][ T7946] RAX: ffffffffffffffda RBX: 00007f4acb016180 RCX: 00007f4acad9cdd9 [ 2515.086705][ T7946] RDX: 00002000000000c0 RSI: 00000000c00c6f3e RDI: 0000000000000004 [ 2515.086717][ T7946] RBP: 00007f4acbcb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2515.086731][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2515.086744][ T7946] R13: 00007f4acb016218 R14: 00007f4acb016180 R15: 00007ffcc227f098 [ 2515.086775][ T7946] [ 2515.086922][ T7946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2515.093595][ T5584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2515.544066][ T5584] usb 3-1: Product: syz [ 2515.548397][ T5584] usb 3-1: Manufacturer: syz [ 2515.554026][ T5584] usb 3-1: SerialNumber: syz [ 2515.600124][ T5584] usb 3-1: config 0 descriptor?? [ 2515.654461][ T7950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58709 sclass=netlink_route_socket pid=7950 comm=syz.6.10652 [ 2515.908073][ T5584] mos7840 3-1:0.0: required endpoints missing [ 2516.095513][ T5584] usb 3-1: USB disconnect, device number 27 [ 2517.562015][ T7974] FAULT_INJECTION: forcing a failure. [ 2517.562015][ T7974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2517.590654][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.6.10659 Tainted: G L syzkaller #0 PREEMPT(full) [ 2517.590687][ T7974] Tainted: [L]=SOFTLOCKUP [ 2517.590693][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2517.590705][ T7974] Call Trace: [ 2517.590712][ T7974] [ 2517.590720][ T7974] dump_stack_lvl+0x100/0x190 [ 2517.590748][ T7974] should_fail_ex.cold+0x5/0xa [ 2517.590774][ T7974] _copy_from_user+0x2e/0xd0 [ 2517.590799][ T7974] copy_msghdr_from_user+0x9f/0x4f0 [ 2517.590825][ T7974] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2517.590861][ T7974] ___sys_sendmsg+0x106/0x1e0 [ 2517.590886][ T7974] ? __pfx____sys_sendmsg+0x10/0x10 [ 2517.590940][ T7974] __sys_sendmsg+0x170/0x220 [ 2517.590970][ T7974] ? __pfx___sys_sendmsg+0x10/0x10 [ 2517.591012][ T7974] ? rcu_is_watching+0x12/0xc0 [ 2517.591035][ T7974] do_syscall_64+0x10b/0xf80 [ 2517.591052][ T7974] ? clear_bhb_loop+0x40/0x90 [ 2517.591066][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2517.591078][ T7974] RIP: 0033:0x7f5a8179cdd9 [ 2517.591089][ T7974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2517.591100][ T7974] RSP: 002b:00007f5a7f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2517.591112][ T7974] RAX: ffffffffffffffda RBX: 00007f5a81a15fa0 RCX: 00007f5a8179cdd9 [ 2517.591119][ T7974] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 2517.591126][ T7974] RBP: 00007f5a7f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2517.591145][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2517.591152][ T7974] R13: 00007f5a81a16038 R14: 00007f5a81a15fa0 R15: 00007ffc9b485548 [ 2517.591167][ T7974] [ 2517.593526][ T7975] netlink: 68 bytes leftover after parsing attributes in process `syz.8.10658'. [ 2517.782720][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10658'. [ 2518.304046][ T7982] FAULT_INJECTION: forcing a failure. [ 2518.304046][ T7982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2518.345926][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: syz.2.10662 Tainted: G L syzkaller #0 PREEMPT(full) [ 2518.345958][ T7982] Tainted: [L]=SOFTLOCKUP [ 2518.345965][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2518.345977][ T7982] Call Trace: [ 2518.345984][ T7982] [ 2518.345992][ T7982] dump_stack_lvl+0x100/0x190 [ 2518.346021][ T7982] should_fail_ex.cold+0x5/0xa [ 2518.346051][ T7982] _copy_from_user+0x2e/0xd0 [ 2518.346078][ T7982] copy_msghdr_from_user+0x9f/0x4f0 [ 2518.346107][ T7982] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2518.346146][ T7982] ___sys_sendmsg+0x106/0x1e0 [ 2518.346173][ T7982] ? __pfx____sys_sendmsg+0x10/0x10 [ 2518.346233][ T7982] __sys_sendmsg+0x170/0x220 [ 2518.346265][ T7982] ? __pfx___sys_sendmsg+0x10/0x10 [ 2518.346307][ T7982] ? rcu_is_watching+0x12/0xc0 [ 2518.346342][ T7982] do_syscall_64+0x10b/0xf80 [ 2518.346370][ T7982] ? clear_bhb_loop+0x40/0x90 [ 2518.346396][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2518.346417][ T7982] RIP: 0033:0x7f508719cdd9 [ 2518.346435][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2518.346456][ T7982] RSP: 002b:00007f508803b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2518.346476][ T7982] RAX: ffffffffffffffda RBX: 00007f5087415fa0 RCX: 00007f508719cdd9 [ 2518.346491][ T7982] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2518.346505][ T7982] RBP: 00007f508803b090 R08: 0000000000000000 R09: 0000000000000000 [ 2518.346518][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2518.346536][ T7982] R13: 00007f5087416038 R14: 00007f5087415fa0 R15: 00007ffc2107b298 [ 2518.346563][ T7982] [ 2519.490751][ T30] audit: type=1326 audit(1777060759.745:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.3.10672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f901979cdd9 code=0x0 [ 2522.507636][ T8036] FAULT_INJECTION: forcing a failure. [ 2522.507636][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.528436][ T8036] CPU: 1 UID: 0 PID: 8036 Comm: syz.6.10679 Tainted: G L syzkaller #0 PREEMPT(full) [ 2522.528471][ T8036] Tainted: [L]=SOFTLOCKUP [ 2522.528478][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2522.528493][ T8036] Call Trace: [ 2522.528499][ T8036] [ 2522.528507][ T8036] dump_stack_lvl+0x100/0x190 [ 2522.528536][ T8036] should_fail_ex.cold+0x5/0xa [ 2522.528564][ T8036] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2522.528588][ T8036] should_failslab+0xc2/0x120 [ 2522.528610][ T8036] __kmalloc_noprof+0xe0/0x850 [ 2522.528637][ T8036] ? kfree+0x1dd/0x6c0 [ 2522.528665][ T8036] tomoyo_realpath_from_path+0xb6/0x690 [ 2522.528695][ T8036] tomoyo_path_number_perm+0x23c/0x580 [ 2522.528714][ T8036] ? tomoyo_path_number_perm+0x22e/0x580 [ 2522.528735][ T8036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2522.528780][ T8036] ? find_held_lock+0x2b/0x80 [ 2522.528797][ T8036] ? __fget_files+0x215/0x3d0 [ 2522.528818][ T8036] ? hook_file_ioctl_common+0x149/0x410 [ 2522.528842][ T8036] ? __fget_files+0x215/0x3d0 [ 2522.528871][ T8036] ? __fget_files+0x21f/0x3d0 [ 2522.528900][ T8036] security_file_ioctl+0xd3/0x230 [ 2522.528925][ T8036] __x64_sys_ioctl+0xb7/0x210 [ 2522.528959][ T8036] do_syscall_64+0x10b/0xf80 [ 2522.528988][ T8036] ? clear_bhb_loop+0x40/0x90 [ 2522.529014][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.529037][ T8036] RIP: 0033:0x7f5a8179cdd9 [ 2522.529055][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2522.529076][ T8036] RSP: 002b:00007f5a7f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2522.529096][ T8036] RAX: ffffffffffffffda RBX: 00007f5a81a15fa0 RCX: 00007f5a8179cdd9 [ 2522.529111][ T8036] RDX: 0000000000000000 RSI: 0000000000005521 RDI: 0000000000000003 [ 2522.529124][ T8036] RBP: 00007f5a7f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2522.529137][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2522.529149][ T8036] R13: 00007f5a81a16038 R14: 00007f5a81a15fa0 R15: 00007ffc9b485548 [ 2522.529179][ T8036] [ 2522.529232][ T8036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2522.948696][ T8044] xt_hashlimit: size too large, truncated to 1048576 [ 2523.603493][ T8057] nvme_fabrics: missing parameter 'transport=%s' [ 2523.645232][ T8057] nvme_fabrics: missing parameter 'nqn=%s' [ 2523.929415][ T8066] lo speed is unknown, defaulting to 1000 [ 2523.940263][ T8066] lo speed is unknown, defaulting to 1000 [ 2524.240497][ T8076] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10692'. [ 2524.280398][ T8073] syz_tun: entered promiscuous mode [ 2524.285851][ T8073] macvtap1: entered promiscuous mode [ 2524.295264][ T8073] syz_tun: left promiscuous mode [ 2524.893908][ T5584] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2525.212387][ T5584] usb 3-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config [ 2525.234095][ T5584] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2525.243598][ T5584] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2525.253473][ T5584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.265640][ T5584] usb 3-1: config 0 descriptor?? [ 2525.337775][ T5890] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 2525.497810][ T5890] usb 7-1: device descriptor read/64, error -71 [ 2525.851151][ T5890] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 2526.077640][ T5890] usb 7-1: device descriptor read/64, error -71 [ 2526.205678][ T5890] usb usb7-port1: attempt power cycle [ 2526.469766][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10711'. [ 2526.499036][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10711'. [ 2526.520515][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10711'. [ 2526.547042][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10711'. [ 2526.599162][ T5890] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 2526.638452][ T8125] macsec1: entered promiscuous mode [ 2526.663164][ T5890] usb 7-1: device descriptor read/8, error -71 [ 2526.674499][ T8125] macsec1: entered allmulticast mode [ 2527.081359][ T8137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input26 [ 2527.140548][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2527.153320][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2527.316040][ T5890] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 2527.433864][ T5890] usb 7-1: device descriptor read/8, error -71 [ 2527.571510][ T5890] usb usb7-port1: unable to enumerate USB device [ 2527.635155][ T8148] fuse: Unknown parameter 'ÿ00000000000000000000003' [ 2527.730216][ T8152] xt_hashlimit: size too large, truncated to 1048576 [ 2528.233856][ T30] audit: type=1326 audit(1777060767.933:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.6.10719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a8179cdd9 code=0x0 [ 2528.676110][T25737] usb 3-1: USB disconnect, device number 28 [ 2529.171611][ T8187] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2529.171651][ T8187] overlayfs: overlapping lowerdir path [ 2529.237920][T16083] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2529.431975][T16083] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2529.447474][T16083] usb 4-1: config 0 has no interface number 0 [ 2529.485203][T16083] usb 4-1: config 0 interface 50 has no altsetting 0 [ 2529.507369][T16083] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=c4.0e [ 2529.524650][T16083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2529.545269][T16083] usb 4-1: Product: syz [ 2529.550400][T16083] usb 4-1: Manufacturer: syz [ 2529.552823][ T30] audit: type=1326 audit(1777060769.159:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8194 comm="syz.8.10732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf19cdd9 code=0x0 [ 2529.558440][T16083] usb 4-1: SerialNumber: syz [ 2529.618749][T16083] usb 4-1: config 0 descriptor?? [ 2529.676268][T25737] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 2529.766623][ T8202] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 2529.838300][T25737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2529.855779][T25737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.871798][ T8202] netlink: 'syz.8.10735': attribute type 4 has an invalid length. [ 2529.893402][T25737] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2529.936671][ T8202] SELinux: security_context_str_to_sid (/dev/usbmon#) failed with errno=-22 [ 2529.971756][T25737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.995510][T25737] usb 7-1: config 0 descriptor?? [ 2530.004112][T16083] usbserial_generic 4-1:0.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2530.071667][ T8208] CIFS: VFS: UNC: path must begin with // or \\ [ 2530.077979][ T8208] Malformed UNC in devname [ 2530.077979][ T8208] [ 2530.084818][ T8208] CIFS: VFS: Malformed UNC in devname [ 2530.184748][T16083] usbserial_generic 4-1:0.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2530.442227][T16083] usbserial_generic 4-1:0.50: device has no bulk endpoints [ 2530.461784][T16083] safe_serial 4-1:0.50: safe_serial converter detected [ 2530.475555][T16083] safe_serial 4-1:0.50: probe with driver safe_serial failed with error -22 [ 2530.499211][T16083] usb 4-1: USB disconnect, device number 8 [ 2530.659180][T25737] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 2530.681700][T25737] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 2530.779731][ T8218] fuse: fd is not a fuse device [ 2530.803172][T25737] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 2530.814322][T25737] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 2530.827666][T25737] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 2530.835440][T25737] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 2530.842731][T25737] isku 0003:1E7D:319C.0019: unknown main item tag 0x0 [ 2530.863678][T25737] isku 0003:1E7D:319C.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 2530.885998][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2530.930863][ T8221] FAULT_INJECTION: forcing a failure. [ 2530.930863][ T8221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2530.939711][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2530.995500][T25737] isku 0003:1E7D:319C.0019: couldn't init struct isku_device [ 2531.005532][ T8221] CPU: 1 UID: 0 PID: 8221 Comm: syz.2.10741 Tainted: G L syzkaller #0 PREEMPT(full) [ 2531.005566][ T8221] Tainted: [L]=SOFTLOCKUP [ 2531.005573][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2531.005585][ T8221] Call Trace: [ 2531.005593][ T8221] [ 2531.005601][ T8221] dump_stack_lvl+0x100/0x190 [ 2531.005633][ T8221] should_fail_ex.cold+0x5/0xa [ 2531.005669][ T8221] _copy_to_user+0x32/0xd0 [ 2531.005698][ T8221] simple_read_from_buffer+0xcb/0x170 [ 2531.005727][ T8221] proc_fail_nth_read+0x1af/0x230 [ 2531.005751][ T8221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2531.005776][ T8221] ? rw_verify_area+0xce/0x6d0 [ 2531.005807][ T8221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2531.005829][ T8221] vfs_read+0x1e4/0xb30 [ 2531.005856][ T8221] ? __pfx_vfs_read+0x10/0x10 [ 2531.005877][ T8221] ? __fget_files+0x215/0x3d0 [ 2531.005909][ T8221] ? __fget_files+0x21f/0x3d0 [ 2531.005942][ T8221] ksys_read+0x12a/0x250 [ 2531.005964][ T8221] ? __pfx_ksys_read+0x10/0x10 [ 2531.005988][ T8221] ? rcu_is_watching+0x12/0xc0 [ 2531.006023][ T8221] do_syscall_64+0x10b/0xf80 [ 2531.006052][ T8221] ? clear_bhb_loop+0x40/0x90 [ 2531.006077][ T8221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2531.006099][ T8221] RIP: 0033:0x7f508715d60e [ 2531.006118][ T8221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2531.006138][ T8221] RSP: 002b:00007f508803afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2531.006157][ T8221] RAX: ffffffffffffffda RBX: 00007f508803b6c0 RCX: 00007f508715d60e [ 2531.006172][ T8221] RDX: 000000000000000f RSI: 00007f508803b0a0 RDI: 0000000000000003 [ 2531.006184][ T8221] RBP: 00007f508803b090 R08: 0000000000000000 R09: 0000000000000000 [ 2531.006197][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2531.006210][ T8221] R13: 00007f5087416038 R14: 00007f5087415fa0 R15: 00007ffc2107b298 [ 2531.006240][ T8221] [ 2531.242560][T25737] isku 0003:1E7D:319C.0019: couldn't install keyboard [ 2531.259768][T25737] isku 0003:1E7D:319C.0019: probe with driver isku failed with error -71 [ 2531.281322][T25737] usb 7-1: USB disconnect, device number 72 [ 2532.533701][ T30] audit: type=1800 audit(1777060771.181:1330): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.10745" name="file0" dev="overlay" ino=1410 res=0 errno=0 [ 2532.932192][ T8250] FAULT_INJECTION: forcing a failure. [ 2532.932192][ T8250] name failslab, interval 1, probability 0, space 0, times 0 [ 2532.945475][ T8250] CPU: 1 UID: 0 PID: 8250 Comm: syz.9.10748 Tainted: G L syzkaller #0 PREEMPT(full) [ 2532.945508][ T8250] Tainted: [L]=SOFTLOCKUP [ 2532.945516][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2532.945529][ T8250] Call Trace: [ 2532.945539][ T8250] [ 2532.945548][ T8250] dump_stack_lvl+0x100/0x190 [ 2532.945579][ T8250] should_fail_ex.cold+0x5/0xa [ 2532.945610][ T8250] should_failslab+0xc2/0x120 [ 2532.945634][ T8250] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 2532.945664][ T8250] ? __d_alloc+0x34/0xa40 [ 2532.945699][ T8250] __d_alloc+0x34/0xa40 [ 2532.945725][ T8250] ? mark_held_locks+0x40/0x70 [ 2532.945753][ T8250] d_alloc_parallel+0x111/0x14e0 [ 2532.945777][ T8250] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 2532.945809][ T8250] ? rcu_is_watching+0x12/0xc0 [ 2532.945846][ T8250] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2532.945869][ T8250] ? __d_lookup+0x266/0x4a0 [ 2532.945888][ T8250] ? lockdep_init_map_type+0x5c/0x250 [ 2532.945915][ T8250] ? lockdep_init_map_type+0x5c/0x250 [ 2532.945947][ T8250] proc_fill_cache+0x30a/0x490 [ 2532.945973][ T8250] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 2532.946001][ T8250] ? __pfx_proc_fill_cache+0x10/0x10 [ 2532.946026][ T8250] ? irqentry_exit+0x246/0x790 [ 2532.946075][ T8250] ? filldir64+0x4df/0x640 [ 2532.946104][ T8250] proc_pident_readdir+0x1bc/0x530 [ 2532.946137][ T8250] iterate_dir+0x296/0xae0 [ 2532.946165][ T8250] __x64_sys_getdents64+0x13b/0x2c0 [ 2532.946190][ T8250] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 2532.946215][ T8250] ? __pfx_filldir64+0x10/0x10 [ 2532.946254][ T8250] do_syscall_64+0x10b/0xf80 [ 2532.946282][ T8250] ? clear_bhb_loop+0x40/0x90 [ 2532.946309][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2532.946331][ T8250] RIP: 0033:0x7f4acad9cdd9 [ 2532.946349][ T8250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2532.946370][ T8250] RSP: 002b:00007f4acbcb1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 2532.946391][ T8250] RAX: ffffffffffffffda RBX: 00007f4acb016180 RCX: 00007f4acad9cdd9 [ 2532.946405][ T8250] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000005 [ 2532.946419][ T8250] RBP: 00007f4acbcb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2532.946432][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2532.946445][ T8250] R13: 00007f4acb016218 R14: 00007f4acb016180 R15: 00007ffcc227f098 [ 2532.946476][ T8250] [ 2533.479481][ T8255] fuse: Unknown parameter 'grou00000000000000000000' [ 2533.906068][ T8261] IPv6: NLM_F_CREATE should be specified when creating new route [ 2534.418386][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10759'. [ 2534.885716][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10763'. [ 2535.169658][ T5583] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2535.238669][ T8291] FAULT_INJECTION: forcing a failure. [ 2535.238669][ T8291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2535.256384][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.3.10767 Tainted: G L syzkaller #0 PREEMPT(full) [ 2535.256417][ T8291] Tainted: [L]=SOFTLOCKUP [ 2535.256425][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2535.256436][ T8291] Call Trace: [ 2535.256442][ T8291] [ 2535.256450][ T8291] dump_stack_lvl+0x100/0x190 [ 2535.256480][ T8291] should_fail_ex.cold+0x5/0xa [ 2535.256505][ T8291] ? prepare_alloc_pages+0x16d/0x5f0 [ 2535.256531][ T8291] should_fail_alloc_page+0xeb/0x140 [ 2535.256556][ T8291] prepare_alloc_pages+0x1f0/0x5f0 [ 2535.256580][ T8291] ? look_up_lock_class+0x64/0x120 [ 2535.256613][ T8291] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 2535.256650][ T8291] ? __lock_acquire+0x4a5/0x2630 [ 2535.256685][ T8291] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2535.256722][ T8291] ? __pfx___might_resched+0x10/0x10 [ 2535.256765][ T8291] ? up_write+0x28c/0x4f0 [ 2535.256792][ T8291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2535.256819][ T8291] ? policy_nodemask+0xed/0x4f0 [ 2535.256844][ T8291] alloc_pages_mpol+0x1fb/0x540 [ 2535.256868][ T8291] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2535.256898][ T8291] ? __pfx_filemap_map_pages+0x10/0x10 [ 2535.256925][ T8291] alloc_pages_noprof+0x1a/0x160 [ 2535.256951][ T8291] pte_alloc_one+0x1c/0x3d0 [ 2535.256982][ T8291] __do_fault+0x26c/0x440 [ 2535.257005][ T8291] do_fault+0x2db/0x1750 [ 2535.257027][ T8291] ? __lock_acquire+0x4a5/0x2630 [ 2535.257053][ T8291] __handle_mm_fault+0x187d/0x2a00 [ 2535.257089][ T8291] ? __pfx___handle_mm_fault+0x10/0x10 [ 2535.257114][ T8291] ? find_held_lock+0x2b/0x80 [ 2535.257132][ T8291] ? mtree_load+0x311/0xa90 [ 2535.257165][ T8291] ? mtree_load+0x311/0xa90 [ 2535.257215][ T8291] handle_mm_fault+0x36d/0xa20 [ 2535.257248][ T8291] __get_user_pages+0x1178/0x32a0 [ 2535.257284][ T8291] ? __pfx___get_user_pages+0x10/0x10 [ 2535.257315][ T8291] faultin_page_range+0x1f1/0x9e0 [ 2535.257345][ T8291] madvise_do_behavior+0x354/0x510 [ 2535.257374][ T8291] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2535.257416][ T8291] do_madvise+0x195/0x240 [ 2535.257440][ T8291] ? __pfx_do_madvise+0x10/0x10 [ 2535.257463][ T8291] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 2535.257491][ T8291] ? kernel_write+0x6a3/0x6c0 [ 2535.257533][ T8291] ? ksys_write+0x1ac/0x250 [ 2535.257554][ T8291] ? __pfx_ksys_write+0x10/0x10 [ 2535.257581][ T8291] __x64_sys_madvise+0xa9/0x110 [ 2535.257605][ T8291] ? lockdep_hardirqs_on+0x78/0x100 [ 2535.257634][ T8291] do_syscall_64+0x10b/0xf80 [ 2535.257661][ T8291] ? clear_bhb_loop+0x40/0x90 [ 2535.257686][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2535.257708][ T8291] RIP: 0033:0x7f901979cdd9 [ 2535.257726][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2535.257746][ T8291] RSP: 002b:00007f901a5dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2535.257766][ T8291] RAX: ffffffffffffffda RBX: 00007f9019a15fa0 RCX: 00007f901979cdd9 [ 2535.257780][ T8291] RDX: 0000000000000017 RSI: 0000000000600000 RDI: 0000200000000000 [ 2535.257793][ T8291] RBP: 00007f901a5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 2535.257804][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2535.257815][ T8291] R13: 00007f9019a16038 R14: 00007f9019a15fa0 R15: 00007ffeec7d1d18 [ 2535.257842][ T8291] [ 2535.695029][ T8292] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10765'. [ 2535.704244][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10765'. [ 2535.718471][ T8292] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10765'. [ 2535.727682][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10765'. [ 2535.751879][ T8292] /dev/nullb0: Can't open blockdev [ 2535.769403][ T8292] netlink: 830 bytes leftover after parsing attributes in process `syz.9.10765'. [ 2536.026460][T16083] bond_slave_0: entered promiscuous mode [ 2536.032205][T16083] bond_slave_1: entered promiscuous mode [ 2536.193828][ T8298] fuse: Unknown parameter 'grou00000000000000000000' [ 2536.200936][ T5583] usb 3-1: Using ep0 maxpacket: 8 [ 2536.219960][ T5583] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2536.260945][ T5583] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2536.291291][ T5583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.314694][ T5583] usb 3-1: config 0 descriptor?? [ 2536.342678][ T5583] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2536.806885][ T8321] FAULT_INJECTION: forcing a failure. [ 2536.806885][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2536.820233][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.6.10777 Tainted: G L syzkaller #0 PREEMPT(full) [ 2536.820274][ T8321] Tainted: [L]=SOFTLOCKUP [ 2536.820282][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2536.820294][ T8321] Call Trace: [ 2536.820301][ T8321] [ 2536.820309][ T8321] dump_stack_lvl+0x100/0x190 [ 2536.820339][ T8321] should_fail_ex.cold+0x5/0xa [ 2536.820368][ T8321] _copy_from_user+0x2e/0xd0 [ 2536.820396][ T8321] copy_msghdr_from_user+0x9f/0x4f0 [ 2536.820423][ T8321] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2536.820463][ T8321] ___sys_sendmsg+0x106/0x1e0 [ 2536.820489][ T8321] ? __pfx____sys_sendmsg+0x10/0x10 [ 2536.820548][ T8321] __sys_sendmsg+0x170/0x220 [ 2536.820578][ T8321] ? __pfx___sys_sendmsg+0x10/0x10 [ 2536.820631][ T8321] ? rcu_is_watching+0x12/0xc0 [ 2536.820665][ T8321] do_syscall_64+0x10b/0xf80 [ 2536.820693][ T8321] ? clear_bhb_loop+0x40/0x90 [ 2536.820718][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2536.820740][ T8321] RIP: 0033:0x7f5a8179cdd9 [ 2536.820758][ T8321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2536.820778][ T8321] RSP: 002b:00007f5a7f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2536.820799][ T8321] RAX: ffffffffffffffda RBX: 00007f5a81a15fa0 RCX: 00007f5a8179cdd9 [ 2536.820813][ T8321] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 2536.820827][ T8321] RBP: 00007f5a7f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2536.820840][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2536.820853][ T8321] R13: 00007f5a81a16038 R14: 00007f5a81a15fa0 R15: 00007ffc9b485548 [ 2536.820882][ T8321] [ 2537.449820][ T8328] FAULT_INJECTION: forcing a failure. [ 2537.449820][ T8328] name failslab, interval 1, probability 0, space 0, times 0 [ 2537.503527][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.3.10779 Tainted: G L syzkaller #0 PREEMPT(full) [ 2537.503561][ T8328] Tainted: [L]=SOFTLOCKUP [ 2537.503569][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2537.503581][ T8328] Call Trace: [ 2537.503589][ T8328] [ 2537.503597][ T8328] dump_stack_lvl+0x100/0x190 [ 2537.503628][ T8328] should_fail_ex.cold+0x5/0xa [ 2537.503659][ T8328] should_failslab+0xc2/0x120 [ 2537.503682][ T8328] __kvmalloc_node_noprof+0xfa/0xa00 [ 2537.503711][ T8328] ? traverse.part.0.constprop.0+0x397/0x650 [ 2537.503735][ T8328] ? kernel_text_address+0x8d/0x100 [ 2537.503768][ T8328] traverse.part.0.constprop.0+0x397/0x650 [ 2537.503803][ T8328] seq_read_iter+0x93f/0x1270 [ 2537.503831][ T8328] ? _kstrtoull+0x13c/0x1f0 [ 2537.503868][ T8328] seq_read+0x33b/0x4c0 [ 2537.503900][ T8328] ? __pfx_seq_read+0x10/0x10 [ 2537.503925][ T8328] ? __lock_acquire+0x4a5/0x2630 [ 2537.503960][ T8328] ? import_ubuf+0x1b6/0x220 [ 2537.503990][ T8328] ? selinux_file_permission+0x8f/0x6d0 [ 2537.504020][ T8328] ? __pfx_seq_read+0x10/0x10 [ 2537.504044][ T8328] proc_reg_read+0x240/0x330 [ 2537.504073][ T8328] ? __pfx_proc_reg_read+0x10/0x10 [ 2537.504099][ T8328] vfs_readv+0x5d8/0x8d0 [ 2537.504128][ T8328] ? __pfx_vfs_readv+0x10/0x10 [ 2537.504149][ T8328] ? find_held_lock+0x2b/0x80 [ 2537.504187][ T8328] ? __fget_files+0x21f/0x3d0 [ 2537.504220][ T8328] ? do_preadv+0x1ac/0x270 [ 2537.504238][ T8328] do_preadv+0x1ac/0x270 [ 2537.504259][ T8328] ? __pfx_do_preadv+0x10/0x10 [ 2537.504282][ T8328] ? rcu_is_watching+0x12/0xc0 [ 2537.504316][ T8328] do_syscall_64+0x10b/0xf80 [ 2537.504344][ T8328] ? clear_bhb_loop+0x40/0x90 [ 2537.504370][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2537.504392][ T8328] RIP: 0033:0x7f901979cdd9 [ 2537.504410][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2537.504430][ T8328] RSP: 002b:00007f901a59a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2537.504450][ T8328] RAX: ffffffffffffffda RBX: 00007f9019a16180 RCX: 00007f901979cdd9 [ 2537.504464][ T8328] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000005 [ 2537.504477][ T8328] RBP: 00007f901a59a090 R08: 0000000000000000 R09: 0000000000000000 [ 2537.504490][ T8328] R10: 000000000001006c R11: 0000000000000246 R12: 0000000000000001 [ 2537.504502][ T8328] R13: 00007f9019a16218 R14: 00007f9019a16180 R15: 00007ffeec7d1d18 [ 2537.504533][ T8328] [ 2538.659687][ T8342] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10782'. [ 2538.668943][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10782'. [ 2538.683902][ T8342] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10782'. [ 2539.709083][ T1228] usb 3-1: USB disconnect, device number 29 [ 2540.051689][ T8368] fuse: fd is not a fuse device [ 2540.544588][ T8384] __nla_validate_parse: 2 callbacks suppressed [ 2540.544629][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10790'. [ 2541.164853][ T8395] fuse: fd is not a fuse device [ 2541.582828][ T8404] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10796'. [ 2541.605727][T25737] bond_slave_0: entered promiscuous mode [ 2541.611447][T25737] bond_slave_1: entered promiscuous mode [ 2542.089754][ T8416] fuse: fd is not a fuse device [ 2542.218814][ T8419] fuse: Unknown parameter 'group_i00000000000000000000' [ 2542.786421][ T8432] CIFS: VFS: UNC: path must begin with // or \\ [ 2542.792744][ T8432] Malformed UNC in devname [ 2542.792744][ T8432] [ 2542.799556][ T8432] CIFS: VFS: Malformed UNC in devname [ 2543.151835][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10808'. [ 2543.975891][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10807'. [ 2544.258581][ T8444] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8444 comm=syz.6.10808 [ 2544.545581][ T8462] fuse: Unknown parameter 'group_i00000000000000000000' [ 2545.396230][ T8466] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10815'. [ 2545.524743][ T8468] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 2545.586287][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10818'. [ 2545.698705][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2545.855673][ T8472] team0: Port device team_slave_0 removed [ 2545.981689][ T8482] FAULT_INJECTION: forcing a failure. [ 2545.981689][ T8482] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.994784][ T8482] CPU: 0 UID: 0 PID: 8482 Comm: syz.6.10820 Tainted: G L syzkaller #0 PREEMPT(full) [ 2545.994817][ T8482] Tainted: [L]=SOFTLOCKUP [ 2545.994825][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2545.994837][ T8482] Call Trace: [ 2545.994848][ T8482] [ 2545.994857][ T8482] dump_stack_lvl+0x100/0x190 [ 2545.994887][ T8482] should_fail_ex.cold+0x5/0xa [ 2545.994912][ T8482] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2545.994936][ T8482] should_failslab+0xc2/0x120 [ 2545.994956][ T8482] __kmalloc_noprof+0xe0/0x850 [ 2545.994981][ T8482] ? kfree+0x1dd/0x6c0 [ 2545.995008][ T8482] tomoyo_realpath_from_path+0xb6/0x690 [ 2545.995037][ T8482] tomoyo_path_number_perm+0x23c/0x580 [ 2545.995056][ T8482] ? tomoyo_path_number_perm+0x22e/0x580 [ 2545.995076][ T8482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2545.995095][ T8482] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 2545.995115][ T8482] ? rcu_is_watching+0x12/0xc0 [ 2545.995165][ T8482] ? find_held_lock+0x2b/0x80 [ 2545.995182][ T8482] ? __fget_files+0x215/0x3d0 [ 2545.995203][ T8482] ? hook_file_ioctl_common+0x149/0x410 [ 2545.995227][ T8482] ? __fget_files+0x215/0x3d0 [ 2545.995253][ T8482] ? __fget_files+0x21f/0x3d0 [ 2545.995279][ T8482] security_file_ioctl+0xd3/0x230 [ 2545.995302][ T8482] __x64_sys_ioctl+0xb7/0x210 [ 2545.995323][ T8482] do_syscall_64+0x10b/0xf80 [ 2545.995353][ T8482] ? clear_bhb_loop+0x40/0x90 [ 2545.995376][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2545.995396][ T8482] RIP: 0033:0x7f5a8179cdd9 [ 2545.995411][ T8482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2545.995429][ T8482] RSP: 002b:00007f5a7f9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2545.995448][ T8482] RAX: ffffffffffffffda RBX: 00007f5a81a16180 RCX: 00007f5a8179cdd9 [ 2545.995460][ T8482] RDX: 0000200000000080 RSI: 0000000000005412 RDI: 0000000000000005 [ 2545.995472][ T8482] RBP: 00007f5a7f9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2545.995484][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2545.995495][ T8482] R13: 00007f5a81a16218 R14: 00007f5a81a16180 R15: 00007ffc9b485548 [ 2545.995522][ T8482] [ 2545.995553][ T8482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2546.881161][ T8489] FAULT_INJECTION: forcing a failure. [ 2546.881161][ T8489] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.931777][ T8489] CPU: 1 UID: 0 PID: 8489 Comm: syz.2.10824 Tainted: G L syzkaller #0 PREEMPT(full) [ 2546.931809][ T8489] Tainted: [L]=SOFTLOCKUP [ 2546.931817][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2546.931829][ T8489] Call Trace: [ 2546.931836][ T8489] [ 2546.931845][ T8489] dump_stack_lvl+0x100/0x190 [ 2546.931876][ T8489] should_fail_ex.cold+0x5/0xa [ 2546.931904][ T8489] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2546.931930][ T8489] should_failslab+0xc2/0x120 [ 2546.931953][ T8489] __kmalloc_noprof+0xe0/0x850 [ 2546.931981][ T8489] ? kfree+0x1dd/0x6c0 [ 2546.932011][ T8489] tomoyo_realpath_from_path+0xb6/0x690 [ 2546.932044][ T8489] tomoyo_path_number_perm+0x23c/0x580 [ 2546.932068][ T8489] ? tomoyo_path_number_perm+0x22e/0x580 [ 2546.932092][ T8489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2546.932144][ T8489] ? find_held_lock+0x2b/0x80 [ 2546.932164][ T8489] ? __fget_files+0x215/0x3d0 [ 2546.932187][ T8489] ? hook_file_ioctl_common+0x149/0x410 [ 2546.932214][ T8489] ? __fget_files+0x215/0x3d0 [ 2546.932244][ T8489] ? __fget_files+0x21f/0x3d0 [ 2546.932273][ T8489] security_file_ioctl+0xd3/0x230 [ 2546.932306][ T8489] __x64_sys_ioctl+0xb7/0x210 [ 2546.932330][ T8489] do_syscall_64+0x10b/0xf80 [ 2546.932359][ T8489] ? clear_bhb_loop+0x40/0x90 [ 2546.932385][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2546.932407][ T8489] RIP: 0033:0x7f508719cdd9 [ 2546.932424][ T8489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2546.932444][ T8489] RSP: 002b:00007f508803b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2546.932464][ T8489] RAX: ffffffffffffffda RBX: 00007f5087415fa0 RCX: 00007f508719cdd9 [ 2546.932479][ T8489] RDX: 0000200000000640 RSI: 0000000080106408 RDI: 0000000000000003 [ 2546.932492][ T8489] RBP: 00007f508803b090 R08: 0000000000000000 R09: 0000000000000000 [ 2546.932504][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2546.932516][ T8489] R13: 00007f5087416038 R14: 00007f5087415fa0 R15: 00007ffc2107b298 [ 2546.932546][ T8489] [ 2546.932564][ T8489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2547.407586][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10825'. [ 2548.016775][ T8507] fuse: Unknown parameter 'group_id00000000000000000000' [ 2548.426438][ T8520] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10831'. [ 2548.984206][ T8518] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 2549.461872][ T8538] FAULT_INJECTION: forcing a failure. [ 2549.461872][ T8538] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.548777][ T8538] CPU: 1 UID: 0 PID: 8538 Comm: syz.2.10837 Tainted: G L syzkaller #0 PREEMPT(full) [ 2549.548811][ T8538] Tainted: [L]=SOFTLOCKUP [ 2549.548819][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2549.548832][ T8538] Call Trace: [ 2549.548839][ T8538] [ 2549.548848][ T8538] dump_stack_lvl+0x100/0x190 [ 2549.548879][ T8538] should_fail_ex.cold+0x5/0xa [ 2549.548909][ T8538] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2549.548935][ T8538] should_failslab+0xc2/0x120 [ 2549.548976][ T8538] __kmalloc_noprof+0xe0/0x850 [ 2549.549004][ T8538] ? kfree+0x1dd/0x6c0 [ 2549.549035][ T8538] tomoyo_realpath_from_path+0xb6/0x690 [ 2549.549068][ T8538] tomoyo_path_number_perm+0x23c/0x580 [ 2549.549090][ T8538] ? tomoyo_path_number_perm+0x22e/0x580 [ 2549.549114][ T8538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2549.549166][ T8538] ? find_held_lock+0x2b/0x80 [ 2549.549186][ T8538] ? __fget_files+0x215/0x3d0 [ 2549.549210][ T8538] ? hook_file_ioctl_common+0x149/0x410 [ 2549.549237][ T8538] ? __fget_files+0x215/0x3d0 [ 2549.549267][ T8538] ? __fget_files+0x21f/0x3d0 [ 2549.549297][ T8538] security_file_ioctl+0xd3/0x230 [ 2549.549322][ T8538] __x64_sys_ioctl+0xb7/0x210 [ 2549.549347][ T8538] do_syscall_64+0x10b/0xf80 [ 2549.549376][ T8538] ? clear_bhb_loop+0x40/0x90 [ 2549.549408][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2549.549430][ T8538] RIP: 0033:0x7f508719cdd9 [ 2549.549447][ T8538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2549.549469][ T8538] RSP: 002b:00007f508803b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2549.549488][ T8538] RAX: ffffffffffffffda RBX: 00007f5087415fa0 RCX: 00007f508719cdd9 [ 2549.549503][ T8538] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 2549.549517][ T8538] RBP: 00007f508803b090 R08: 0000000000000000 R09: 0000000000000000 [ 2549.549530][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2549.549542][ T8538] R13: 00007f5087416038 R14: 00007f5087415fa0 R15: 00007ffc2107b298 [ 2549.549573][ T8538] [ 2549.549582][ T8538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2550.098481][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10841'. [ 2550.922785][ T8559] fuse: Unknown parameter 'group_id00000000000000000000' [ 2551.333895][ T8570] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10845'. [ 2551.610684][ T8577] CIFS: VFS: UNC: path must begin with // or \\ [ 2551.617150][ T8577] Malformed UNC in devname [ 2551.617150][ T8577] [ 2551.624022][ T8577] CIFS: VFS: Malformed UNC in devname [ 2551.789919][ T8579] FAULT_INJECTION: forcing a failure. [ 2551.789919][ T8579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2551.940882][ T8579] CPU: 1 UID: 0 PID: 8579 Comm: syz.2.10849 Tainted: G L syzkaller #0 PREEMPT(full) [ 2551.940912][ T8579] Tainted: [L]=SOFTLOCKUP [ 2551.940919][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2551.940929][ T8579] Call Trace: [ 2551.940935][ T8579] [ 2551.940942][ T8579] dump_stack_lvl+0x100/0x190 [ 2551.940969][ T8579] should_fail_ex.cold+0x5/0xa [ 2551.941003][ T8579] _copy_from_user+0x2e/0xd0 [ 2551.941026][ T8579] __sys_bpf+0x243/0x4b90 [ 2551.941057][ T8579] ? __pfx___sys_bpf+0x10/0x10 [ 2551.941080][ T8579] ? proc_fail_nth_write+0x9f/0x220 [ 2551.941098][ T8579] ? find_held_lock+0x2b/0x80 [ 2551.941120][ T8579] ? find_held_lock+0x2b/0x80 [ 2551.941136][ T8579] ? ksys_write+0x190/0x250 [ 2551.941153][ T8579] ? ksys_write+0x190/0x250 [ 2551.941175][ T8579] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 2551.941200][ T8579] ? kernel_write+0x6a3/0x6c0 [ 2551.941217][ T8579] ? __fget_files+0x215/0x3d0 [ 2551.941252][ T8579] ? fput+0x79/0x100 [ 2551.941273][ T8579] ? ksys_write+0x1ac/0x250 [ 2551.941291][ T8579] ? __pfx_ksys_write+0x10/0x10 [ 2551.941314][ T8579] __x64_sys_bpf+0x7b/0xc0 [ 2551.941330][ T8579] ? lockdep_hardirqs_on+0x78/0x100 [ 2551.941354][ T8579] do_syscall_64+0x10b/0xf80 [ 2551.941377][ T8579] ? clear_bhb_loop+0x40/0x90 [ 2551.941399][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2551.941417][ T8579] RIP: 0033:0x7f508719cdd9 [ 2551.941432][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2551.941449][ T8579] RSP: 002b:00007f508803b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2551.941466][ T8579] RAX: ffffffffffffffda RBX: 00007f5087415fa0 RCX: 00007f508719cdd9 [ 2551.941478][ T8579] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 0000000000000000 [ 2551.941489][ T8579] RBP: 00007f508803b090 R08: 0000000000000000 R09: 0000000000000000 [ 2551.941499][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2551.941509][ T8579] R13: 00007f5087416038 R14: 00007f5087415fa0 R15: 00007ffc2107b298 [ 2551.941535][ T8579] [ 2552.859227][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10856'. [ 2553.459022][ T30] audit: type=1326 audit(1777060791.525:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.10854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f508719cdd9 code=0x0 [ 2553.703012][ T8610] fuse: Unknown parameter 'group_id00000000000000000000' [ 2553.947740][ T8614] netlink: 830 bytes leftover after parsing attributes in process `syz.8.10861'. [ 2553.959733][ T5891] bond_slave_0: entered promiscuous mode [ 2553.965512][ T5891] bond_slave_1: entered promiscuous mode [ 2555.726149][ T30] audit: type=1326 audit(1777060793.649:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="syz.8.10870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf19cdd9 code=0x0 [ 2555.731977][ T8643] fuse: Bad value for 'user_id' [ 2555.757870][ T8643] fuse: Bad value for 'user_id' [ 2555.851332][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10869'. [ 2556.806688][ T8664] CIFS: VFS: UNC: path must begin with // or \\ [ 2556.813490][ T8664] Malformed UNC in devname [ 2556.813490][ T8664] [ 2556.820148][ T8664] CIFS: VFS: Malformed UNC in devname [ 2557.448772][ T8660] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2557.455753][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2557.619897][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 2557.659230][ T8678] netlink: 830 bytes leftover after parsing attributes in process `syz.9.10880'. [ 2558.093963][ T8663] vhci_hcd: connection closed [ 2558.094205][ T4888] vhci_hcd vhci_hcd.2: stop threads [ 2558.133537][ T4888] vhci_hcd vhci_hcd.2: release socket [ 2558.144003][ T4888] vhci_hcd vhci_hcd.2: disconnect device [ 2558.554972][ T8689] fuse: fd is not a fuse device [ 2558.642323][ T30] audit: type=1326 audit(1777060796.382:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8691 comm="syz.3.10886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f901979cdd9 code=0x0 [ 2559.008544][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10889'. [ 2559.520685][ T8708] lo speed is unknown, defaulting to 1000 [ 2559.537810][ T8708] lo speed is unknown, defaulting to 1000 [ 2560.160981][ T8717] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10895'. [ 2560.321917][ T8733] CIFS: VFS: UNC: path must begin with // or \\ [ 2560.333766][ T8733] Malformed UNC in devname [ 2560.333766][ T8733] [ 2560.340612][ T8733] CIFS: VFS: Malformed UNC in devname [ 2561.139764][ T30] audit: type=1326 audit(1777060798.721:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.9.10901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4acad9cdd9 code=0x0 [ 2561.258253][ T30] audit: type=1400 audit(1777060798.833:1335): avc: denied { audit_read } for pid=8746 comm="syz.6.10904" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2561.921320][ T30] audit: type=1400 audit(1777060799.451:1336): avc: denied { append } for pid=8756 comm="syz.2.10906" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2562.147789][ T8749] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2562.150340][ T8767] netlink: 'syz.8.10909': attribute type 1 has an invalid length. [ 2562.163846][ T8749] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2562.170392][ T8749] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2562.178468][ T8766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8766 comm=syz.8.10909 [ 2562.181154][ T8749] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2562.202635][ T8749] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2562.211662][ T8749] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2562.226520][ T8749] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2562.241169][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2562.249543][ T8749] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2562.260557][ T8749] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2562.282945][ T8749] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2562.673205][ T8788] netlink: 830 bytes leftover after parsing attributes in process `syz.8.10910'. [ 2563.156914][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10915'. [ 2563.572052][ T8778] FAULT_INJECTION: forcing a failure. [ 2563.572052][ T8778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2563.612907][ T8778] CPU: 0 UID: 0 PID: 8778 Comm: syz.3.10911 Tainted: G L syzkaller #0 PREEMPT(full) [ 2563.612940][ T8778] Tainted: [L]=SOFTLOCKUP [ 2563.612948][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2563.612960][ T8778] Call Trace: [ 2563.612967][ T8778] [ 2563.612976][ T8778] dump_stack_lvl+0x100/0x190 [ 2563.613007][ T8778] should_fail_ex.cold+0x5/0xa [ 2563.613037][ T8778] _copy_from_user+0x2e/0xd0 [ 2563.613065][ T8778] copy_msghdr_from_user+0x9f/0x4f0 [ 2563.613092][ T8778] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2563.613132][ T8778] ___sys_sendmsg+0x106/0x1e0 [ 2563.613159][ T8778] ? __pfx____sys_sendmsg+0x10/0x10 [ 2563.613219][ T8778] __sys_sendmsg+0x170/0x220 [ 2563.613251][ T8778] ? __pfx___sys_sendmsg+0x10/0x10 [ 2563.613294][ T8778] ? rcu_is_watching+0x12/0xc0 [ 2563.613328][ T8778] do_syscall_64+0x10b/0xf80 [ 2563.613358][ T8778] ? clear_bhb_loop+0x40/0x90 [ 2563.613383][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2563.613406][ T8778] RIP: 0033:0x7f901979cdd9 [ 2563.613429][ T8778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2563.613450][ T8778] RSP: 002b:00007f901a5dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2563.613471][ T8778] RAX: ffffffffffffffda RBX: 00007f9019a15fa0 RCX: 00007f901979cdd9 [ 2563.613485][ T8778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2563.613498][ T8778] RBP: 00007f901a5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 2563.613511][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2563.613523][ T8778] R13: 00007f9019a16038 R14: 00007f9019a15fa0 R15: 00007ffeec7d1d18 [ 2563.613553][ T8778] [ 2563.614234][ T30] audit: type=1326 audit(1777060801.033:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8798 comm="syz.9.10917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4acad9cdd9 code=0x0 [ 2563.832934][ T8807] FAULT_INJECTION: forcing a failure. [ 2563.832934][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 2563.865394][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.9.10920 Tainted: G L syzkaller #0 PREEMPT(full) [ 2563.865428][ T8807] Tainted: [L]=SOFTLOCKUP [ 2563.865435][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2563.865448][ T8807] Call Trace: [ 2563.865455][ T8807] [ 2563.865464][ T8807] dump_stack_lvl+0x100/0x190 [ 2563.865494][ T8807] should_fail_ex.cold+0x5/0xa [ 2563.865524][ T8807] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2563.865548][ T8807] should_failslab+0xc2/0x120 [ 2563.865571][ T8807] __kmalloc_noprof+0xe0/0x850 [ 2563.865598][ T8807] ? kfree+0x1dd/0x6c0 [ 2563.865628][ T8807] tomoyo_realpath_from_path+0xb6/0x690 [ 2563.865661][ T8807] tomoyo_path_number_perm+0x23c/0x580 [ 2563.865682][ T8807] ? tomoyo_path_number_perm+0x22e/0x580 [ 2563.865706][ T8807] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2563.865759][ T8807] ? find_held_lock+0x2b/0x80 [ 2563.865780][ T8807] ? __fget_files+0x215/0x3d0 [ 2563.865804][ T8807] ? hook_file_ioctl_common+0x149/0x410 [ 2563.865832][ T8807] ? __fget_files+0x215/0x3d0 [ 2563.865862][ T8807] ? __fget_files+0x21f/0x3d0 [ 2563.865892][ T8807] security_file_ioctl+0xd3/0x230 [ 2563.865917][ T8807] __x64_sys_ioctl+0xb7/0x210 [ 2563.865942][ T8807] do_syscall_64+0x10b/0xf80 [ 2563.865970][ T8807] ? clear_bhb_loop+0x40/0x90 [ 2563.865995][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2563.866017][ T8807] RIP: 0033:0x7f4acad9cdd9 [ 2563.866035][ T8807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2563.866054][ T8807] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2563.866074][ T8807] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2563.866088][ T8807] RDX: 0000000000000000 RSI: 0000000080885659 RDI: 0000000000000003 [ 2563.866099][ T8807] RBP: 00007f4acbcf3090 R08: 0000000000000000 R09: 0000000000000000 [ 2563.866111][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2563.866122][ T8807] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2563.866153][ T8807] [ 2563.866163][ T8807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2563.930892][ T8809] CIFS: VFS: UNC: path must begin with // or \\ [ 2563.989307][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 2563.993960][ T8809] Malformed UNC in devname [ 2563.993960][ T8809] [ 2563.993976][ T8809] CIFS: VFS: Malformed UNC in devname [ 2564.196127][ T8813] trusted_key: encrypted_key: insufficient parameters specified [ 2564.330975][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 2564.330983][ T8810] Bluetooth: hci1: command 0x0c1a tx timeout [ 2564.417153][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 2564.419489][ T8810] Bluetooth: hci2: command 0x0c1a tx timeout [ 2564.900519][ T6702] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2564.915046][ T6702] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.855413][ T8842] fuse: fd is not a fuse device [ 2565.864993][ T6702] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2565.902179][ T8846] fuse: Bad value for 'fd' [ 2565.937273][ T6702] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2566.080130][ T30] audit: type=1326 audit(1777060803.344:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.9.10931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4acad9cdd9 code=0x0 [ 2566.117799][ T8837] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10926'. [ 2566.570939][ T8810] Bluetooth: hci5: command 0x0406 tx timeout [ 2567.354656][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10934'. [ 2567.363862][ T8810] Bluetooth: hci2: command 0x0c1a tx timeout [ 2567.369970][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 2567.553951][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10928'. [ 2567.557648][ T6702] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2567.578371][ T6702] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2567.851926][ T8871] FAULT_INJECTION: forcing a failure. [ 2567.851926][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 2567.888755][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.9.10939 Tainted: G L syzkaller #0 PREEMPT(full) [ 2567.888791][ T8871] Tainted: [L]=SOFTLOCKUP [ 2567.888798][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2567.888811][ T8871] Call Trace: [ 2567.888818][ T8871] [ 2567.888827][ T8871] dump_stack_lvl+0x100/0x190 [ 2567.888858][ T8871] should_fail_ex.cold+0x5/0xa [ 2567.888889][ T8871] should_failslab+0xc2/0x120 [ 2567.888912][ T8871] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2567.888943][ T8871] ? __alloc_skb+0x140/0x710 [ 2567.888971][ T8871] ? __alloc_skb+0x5b7/0x710 [ 2567.889004][ T8871] __alloc_skb+0x140/0x710 [ 2567.889030][ T8871] ? __alloc_skb+0x5b7/0x710 [ 2567.889059][ T8871] ? __pfx___alloc_skb+0x10/0x10 [ 2567.889096][ T8871] alloc_skb_with_frags+0xdd/0x760 [ 2567.889128][ T8871] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2567.889161][ T8871] sock_alloc_send_pskb+0x801/0x980 [ 2567.889202][ T8871] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2567.889233][ T8871] ? sock_has_perm+0x258/0x2f0 [ 2567.889259][ T8871] ? __pfx_sock_has_perm+0x10/0x10 [ 2567.889289][ T8871] hci_sock_sendmsg+0x1c7/0x2620 [ 2567.889323][ T8871] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2567.889362][ T8871] sock_write_iter+0x524/0x5a0 [ 2567.889386][ T8871] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2567.889417][ T8871] ? __pfx_sock_write_iter+0x10/0x10 [ 2567.889451][ T8871] ? bpf_lsm_file_permission+0x9/0x10 [ 2567.889482][ T8871] ? security_file_permission+0x76/0x210 [ 2567.889509][ T8871] ? rw_verify_area+0xce/0x6d0 [ 2567.889544][ T8871] vfs_write+0x6ac/0x1070 [ 2567.889567][ T8871] ? __pfx_sock_write_iter+0x10/0x10 [ 2567.889594][ T8871] ? __pfx_vfs_write+0x10/0x10 [ 2567.889614][ T8871] ? find_held_lock+0x2b/0x80 [ 2567.889654][ T8871] ksys_write+0x1f8/0x250 [ 2567.889677][ T8871] ? __pfx_ksys_write+0x10/0x10 [ 2567.889701][ T8871] ? rcu_is_watching+0x12/0xc0 [ 2567.889735][ T8871] do_syscall_64+0x10b/0xf80 [ 2567.889763][ T8871] ? clear_bhb_loop+0x40/0x90 [ 2567.889790][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2567.889812][ T8871] RIP: 0033:0x7f4acad9cdd9 [ 2567.889830][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2567.889850][ T8871] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2567.889871][ T8871] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2567.889884][ T8871] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 2567.889898][ T8871] RBP: 00007f4acbcf3090 R08: 0000000000000000 R09: 0000000000000000 [ 2567.889911][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2567.889923][ T8871] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2567.889952][ T8871] [ 2568.196046][ T6702] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2568.210828][ T6702] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2568.391416][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10937'. [ 2568.829374][ T8880] fuse: Bad value for 'fd' [ 2569.047925][ T30] audit: type=1326 audit(1777060806.123:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.8.10944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf19cdd9 code=0x0 [ 2569.359213][ T5584] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2569.559368][ T8810] Bluetooth: hci0: command 0x0c1a tx timeout [ 2569.565579][ T8810] Bluetooth: hci2: command 0x0c1a tx timeout [ 2569.599675][ T5584] usb 7-1: Using ep0 maxpacket: 32 [ 2569.642731][ T5584] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2569.644488][ T8899] FAULT_INJECTION: forcing a failure. [ 2569.644488][ T8899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2569.665161][ T8899] CPU: 1 UID: 0 PID: 8899 Comm: syz.9.10948 Tainted: G L syzkaller #0 PREEMPT(full) [ 2569.665194][ T8899] Tainted: [L]=SOFTLOCKUP [ 2569.665202][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2569.665214][ T8899] Call Trace: [ 2569.665222][ T8899] [ 2569.665230][ T8899] dump_stack_lvl+0x100/0x190 [ 2569.665260][ T8899] should_fail_ex.cold+0x5/0xa [ 2569.665290][ T8899] _copy_from_user+0x2e/0xd0 [ 2569.665322][ T8899] copy_msghdr_from_user+0x9f/0x4f0 [ 2569.665350][ T8899] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2569.665391][ T8899] ___sys_sendmsg+0x106/0x1e0 [ 2569.665417][ T8899] ? __pfx____sys_sendmsg+0x10/0x10 [ 2569.665480][ T8899] __sys_sendmsg+0x170/0x220 [ 2569.665511][ T8899] ? __pfx___sys_sendmsg+0x10/0x10 [ 2569.665555][ T8899] ? rcu_is_watching+0x12/0xc0 [ 2569.665589][ T8899] do_syscall_64+0x10b/0xf80 [ 2569.665619][ T8899] ? clear_bhb_loop+0x40/0x90 [ 2569.665646][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2569.665667][ T8899] RIP: 0033:0x7f4acad9cdd9 [ 2569.665685][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2569.665705][ T8899] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2569.665725][ T8899] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2569.665739][ T8899] RDX: 0000000000000000 RSI: 0000200000003900 RDI: 0000000000000003 [ 2569.665752][ T8899] RBP: 00007f4acbcf3090 R08: 0000000000000000 R09: 0000000000000000 [ 2569.665764][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2569.665777][ T8899] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2569.665803][ T8899] [ 2569.675603][ T5584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2569.859255][ T5584] usb 7-1: Product: syz [ 2569.863764][ T5584] usb 7-1: Manufacturer: syz [ 2569.878457][ T5584] usb 7-1: SerialNumber: syz [ 2569.889541][ T5584] usb 7-1: config 0 descriptor?? [ 2569.898546][ T5584] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2569.911090][ T5584] dvb-usb: bulk message failed: -22 (4/0) [ 2569.971328][ T6702] bridge_slave_1: left allmulticast mode [ 2569.989593][ T6702] bridge_slave_1: left promiscuous mode [ 2570.004209][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 2570.061330][ T5584] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2570.071700][ T5584] dvb-usb: bulk message failed: -22 (5/0) [ 2570.077476][ T5584] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2570.185505][ T6702] bridge_slave_0: left allmulticast mode [ 2570.191484][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 2570.203136][ T5584] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2570.234171][ T5584] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2570.516089][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10950'. [ 2571.261251][ T5584] usb 7-1: media controller created [ 2571.282967][ T5584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2571.313631][ T5584] usb 7-1: selecting invalid altsetting 3 [ 2571.321277][ T5584] ttusb2: set interface to alts=3 failed [ 2571.406883][ T5584] DVB: Unable to find symbol tda10086_attach() [ 2571.413261][ T5584] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2571.422290][ T5584] dvb-usb: bulk message failed: -22 (4/0) [ 2571.428247][ T5584] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2571.440138][ T5584] dvb-usb: bulk message failed: -22 (5/0) [ 2571.445917][ T5584] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2571.457149][ T5584] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2571.494850][ T5584] usb 7-1: USB disconnect, device number 73 [ 2571.530484][ T5584] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2571.540823][ T6702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2571.558121][ T6702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2571.573903][ T6702] bond0 (unregistering): Released all slaves [ 2571.768874][ T6702] tipc: Left network mode [ 2571.928159][ T8928] fuse: Bad value for 'fd' [ 2572.151259][ T30] audit: type=1326 audit(1777060809.024:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8933 comm="syz.2.10958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f508719cdd9 code=0x0 [ 2572.347468][ T8942] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 2572.354017][ T8942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2572.361812][ T8942] vhci_hcd vhci_hcd.0: Device attached [ 2572.796151][ T5891] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 2573.437264][ T8943] vhci_hcd: connection reset by peer [ 2573.645496][T26101] vhci_hcd vhci_hcd.9: stop threads [ 2573.890215][T26101] vhci_hcd vhci_hcd.9: release socket [ 2574.058190][T26101] vhci_hcd vhci_hcd.9: disconnect device [ 2574.401891][ T8951] xt_hashlimit: size too large, truncated to 1048576 [ 2575.024171][ T8970] CIFS: VFS: UNC: path must begin with // or \\ [ 2575.030887][ T8970] Malformed UNC in devname [ 2575.030887][ T8970] [ 2575.037523][ T8970] CIFS: VFS: Malformed UNC in devname [ 2575.489002][ T6702] hsr_slave_0: left promiscuous mode [ 2575.530175][ T6702] hsr_slave_1: left promiscuous mode [ 2575.595323][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2575.605117][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2575.965014][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2576.091244][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2576.498772][ T6702] veth1_macvtap: left promiscuous mode [ 2576.537193][ T6702] veth0_macvtap: left promiscuous mode [ 2576.567083][ T6702] veth1_vlan: left promiscuous mode [ 2576.580777][ T6702] veth0_vlan: left promiscuous mode [ 2577.262897][ T6702] team0 (unregistering): Port device team_slave_1 removed [ 2577.317240][ T6702] team0 (unregistering): Port device team_slave_0 removed [ 2577.498594][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10968'. [ 2577.748219][ T9000] fuse: Bad value for 'fd' [ 2577.842247][ T30] audit: type=1326 audit(1777060814.349:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.3.10971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f901979cdd9 code=0x0 [ 2577.891907][ T8983] netlink: 830 bytes leftover after parsing attributes in process `syz.8.10965'. [ 2577.964593][ T5490] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2578.404578][ T9015] ptrace attach of "./syz-executor exec"[3621] was attempted by "./syz-executor exec"[9015] [ 2578.837936][ T5891] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2579.569654][ T5832] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 2579.850554][T27377] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2579.926264][ T5832] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2579.945218][ T5832] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 2579.967376][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2580.000067][ T5832] usb 3-1: Product: syz [ 2580.030500][ T5832] usb 3-1: Manufacturer: syz [ 2580.038274][ T5832] usb 3-1: SerialNumber: syz [ 2580.048480][ T6702] IPVS: stop unused estimator thread 0... [ 2580.050961][ T9039] fuse: Bad value for 'fd' [ 2580.243995][ T9046] FAULT_INJECTION: forcing a failure. [ 2580.243995][ T9046] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.256984][ T9046] CPU: 0 UID: 0 PID: 9046 Comm: syz.9.10982 Tainted: G L syzkaller #0 PREEMPT(full) [ 2580.257017][ T9046] Tainted: [L]=SOFTLOCKUP [ 2580.257024][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2580.257035][ T9046] Call Trace: [ 2580.257041][ T9046] [ 2580.257048][ T9046] dump_stack_lvl+0x100/0x190 [ 2580.257078][ T9046] should_fail_ex.cold+0x5/0xa [ 2580.257106][ T9046] should_failslab+0xc2/0x120 [ 2580.257135][ T9046] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2580.257164][ T9046] ? do_getname+0x35/0x390 [ 2580.257198][ T9046] do_getname+0x35/0x390 [ 2580.257230][ T9046] do_sys_openat2+0xc5/0x1e0 [ 2580.257259][ T9046] ? __pfx_do_sys_openat2+0x10/0x10 [ 2580.257289][ T9046] ? rcu_is_watching+0x12/0xc0 [ 2580.257318][ T9046] ? irqentry_exit+0x246/0x790 [ 2580.257345][ T9046] ? lockdep_hardirqs_on+0x78/0x100 [ 2580.257376][ T9046] __x64_sys_openat+0x12d/0x210 [ 2580.257405][ T9046] ? __pfx___x64_sys_openat+0x10/0x10 [ 2580.257442][ T9046] do_syscall_64+0x10b/0xf80 [ 2580.257469][ T9046] ? clear_bhb_loop+0x40/0x90 [ 2580.257496][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2580.257517][ T9046] RIP: 0033:0x7f4acad5d60e [ 2580.257536][ T9046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2580.257556][ T9046] RSP: 002b:00007f4acbcd1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2580.257575][ T9046] RAX: ffffffffffffffda RBX: 00007f4acbcd26c0 RCX: 00007f4acad5d60e [ 2580.257590][ T9046] RDX: 0000000000000002 RSI: 00007f4acbcd1f90 RDI: ffffffffffffff9c [ 2580.257602][ T9046] RBP: 00007f4acbcd2090 R08: 0000000000000000 R09: 0000000000000000 [ 2580.257613][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2580.257624][ T9046] R13: 00007f4acb016128 R14: 00007f4acb016090 R15: 00007ffcc227f098 [ 2580.257649][ T9046] [ 2580.335781][ T5832] usb 3-1: selecting invalid altsetting 1 [ 2580.574870][ T9049] CIFS: VFS: UNC: path must begin with // or \\ [ 2580.581150][ T9049] Malformed UNC in devname [ 2580.581150][ T9049] [ 2580.587872][ T9049] CIFS: VFS: Malformed UNC in devname [ 2580.988358][ T5832] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 2580.988450][ T5832] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 2581.329121][ T30] audit: type=1326 audit(1777060817.606:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9061 comm="syz.3.10986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f901979cdd9 code=0x0 [ 2581.353873][ T9070] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10985'. [ 2581.955717][ T5490] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2583.549740][ T5583] usb 3-1: USB disconnect, device number 30 [ 2583.779841][ T5584] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2584.058434][ T5584] usb 10-1: Using ep0 maxpacket: 16 [ 2584.077570][ T5584] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2584.093471][ T5584] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2584.696102][ T5584] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2584.705487][ T5584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.714287][ T5584] usb 10-1: Product: syz [ 2584.718936][ T5584] usb 10-1: Manufacturer: syz [ 2584.789597][ T9125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2584.796153][ T9125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2584.924703][ T9125] vhci_hcd vhci_hcd.0: Device attached [ 2585.222337][ T9126] vhci_hcd: connection closed [ 2585.376532][T10279] vhci_hcd vhci_hcd.3: stop threads [ 2585.459310][ T8916] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 2585.546490][T10279] vhci_hcd vhci_hcd.3: release socket [ 2585.646903][T10279] vhci_hcd vhci_hcd.3: disconnect device [ 2585.741033][ T5584] usb 10-1: SerialNumber: syz [ 2585.781472][ T5584] usb 10-1: config 0 descriptor?? [ 2585.794383][ T5584] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2585.810527][ T5584] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 2586.427003][ T30] audit: type=1326 audit(1777060822.388:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.6.11002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a8179cdd9 code=0x0 [ 2586.440511][ T9090] overlayfs: missing 'lowerdir' [ 2586.805483][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11003'. [ 2587.194155][ T5584] em28xx 10-1:0.0: chip ID is em2874 [ 2587.196624][ T5490] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2587.252863][T14547] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2587.456196][T14547] usb 4-1: Using ep0 maxpacket: 16 [ 2587.515821][T14547] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2587.663110][T14547] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2587.837273][T14547] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2587.954778][T14547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.605654][T14547] usb 4-1: Product: syz [ 2588.615465][T14547] usb 4-1: Manufacturer: syz [ 2588.622809][T14547] usb 4-1: SerialNumber: syz [ 2588.642405][T14547] usb 4-1: config 0 descriptor?? [ 2588.788816][T14547] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2588.984637][T14547] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2589.036594][ T5583] usb 10-1: USB disconnect, device number 29 [ 2589.062298][ T5583] em28xx 10-1:0.0: Disconnecting em28xx [ 2589.181795][ T5583] em28xx 10-1:0.0: Freeing device [ 2589.560269][T14547] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2589.724122][T14547] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2589.936410][ T30] audit: type=1326 audit(1777060825.672:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.6.11015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a8179cdd9 code=0x0 [ 2589.988382][T14547] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 2589.993656][ T9192] fuse: Bad value for 'fd' [ 2589.999965][T14547] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 2590.010711][T14547] em28xx 4-1:0.0: No AC97 audio processor [ 2590.317152][T14547] usb 4-1: USB disconnect, device number 9 [ 2590.353616][T14547] em28xx 4-1:0.0: Disconnecting em28xx [ 2590.913135][ T5490] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2590.933549][T14547] em28xx 4-1:0.0: Freeing device [ 2590.992607][ T8916] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2591.021567][ T9210] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2591.028130][ T9210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2591.035962][ T9210] vhci_hcd vhci_hcd.0: Device attached [ 2591.451771][ T9215] netlink: 830 bytes leftover after parsing attributes in process `syz.8.11025'. [ 2591.529756][ T9220] fuse: Invalid rootmode [ 2591.600658][ T9222] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 2591.607219][ T9222] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2591.642632][ T9222] vhci_hcd vhci_hcd.0: Device attached [ 2591.838701][ T9211] vhci_hcd: connection closed [ 2591.858506][ T8133] vhci_hcd vhci_hcd.2: stop threads [ 2592.003191][ T8133] vhci_hcd vhci_hcd.2: release socket [ 2592.123055][ T5583] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 2592.147756][ T8133] vhci_hcd vhci_hcd.2: disconnect device [ 2592.839146][ T9229] netlink: 830 bytes leftover after parsing attributes in process `syz.8.11026'. [ 2593.382454][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11030'. [ 2593.402003][ T30] audit: type=1326 audit(1777060828.873:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9234 comm="syz.8.11029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf19cdd9 code=0x0 [ 2593.630671][ T9223] vhci_hcd: connection reset by peer [ 2593.645265][ T6702] vhci_hcd vhci_hcd.9: stop threads [ 2593.653138][ T6702] vhci_hcd vhci_hcd.9: release socket [ 2593.673107][ T6702] vhci_hcd vhci_hcd.9: disconnect device [ 2593.762210][ T5584] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2593.961067][ T5584] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2593.971368][ T5584] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2594.015398][ T5584] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 2594.045023][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.058112][ T5584] usb 4-1: Product: syz [ 2594.065609][ T5584] usb 4-1: Manufacturer: syz [ 2594.074672][ T5584] usb 4-1: SerialNumber: syz [ 2594.116317][ T5584] usb 4-1: 0:1 : does not exist [ 2594.761329][ T30] audit: type=1400 audit(1777060830.183:1346): avc: denied { nlmsg_read } for pid=9268 comm="syz.2.11038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2595.278509][ T5832] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 2595.308610][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 2595.318759][ T30] audit: type=1400 audit(1777060830.660:1347): avc: denied { read } for pid=9266 comm="syz.6.11039" name="cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 2595.448793][ T5832] usb 3-1: device descriptor read/64, error -32 [ 2595.694467][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11041'. [ 2595.748322][ T5832] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 2595.798927][ T9283] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 2595.805480][ T9283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2595.813662][ T9283] vhci_hcd vhci_hcd.0: Device attached [ 2596.413920][ T9284] vhci_hcd: connection closed [ 2596.414525][ T6702] vhci_hcd vhci_hcd.9: stop threads [ 2596.440436][ T6702] vhci_hcd vhci_hcd.9: release socket [ 2596.445338][ T5832] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 2596.460440][ T6702] vhci_hcd vhci_hcd.9: disconnect device [ 2596.480748][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.536098][ T5832] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 2596.629671][ T5584] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 2596.655131][ T5584] usb 4-1: unit 0 not found! [ 2596.774365][ T5584] usb 4-1: USB disconnect, device number 10 [ 2596.807926][ T9300] netlink: 830 bytes leftover after parsing attributes in process `syz.6.11047'. [ 2596.936690][ T9302] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2596.943249][ T9302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2596.951315][ T9302] vhci_hcd vhci_hcd.0: Device attached [ 2597.350996][ T8916] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 2597.458529][ T6679] udevd[6679]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2597.479047][ T5832] gspca_sn9c20x: Write register 1001 failed -110 [ 2597.579516][ T5832] gspca_sn9c20x: Device initialization failed [ 2597.701137][ T5832] gspca_sn9c20x 3-1:252.0: probe with driver gspca_sn9c20x failed with error -110 [ 2597.746208][ T5583] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2597.798808][ T9303] vhci_hcd: connection reset by peer [ 2597.924354][ T8133] vhci_hcd vhci_hcd.3: stop threads [ 2598.044208][ T8133] vhci_hcd vhci_hcd.3: release socket [ 2598.155256][ T8133] vhci_hcd vhci_hcd.3: disconnect device [ 2599.054744][T24270] usb 3-1: USB disconnect, device number 32 [ 2599.337166][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11054'. [ 2599.425825][ T9330] FAULT_INJECTION: forcing a failure. [ 2599.425825][ T9330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2599.485979][ T9339] FAULT_INJECTION: forcing a failure. [ 2599.485979][ T9339] name failslab, interval 1, probability 0, space 0, times 0 [ 2599.487333][ T9330] CPU: 0 UID: 0 PID: 9330 Comm: syz.2.11056 Tainted: G L syzkaller #0 PREEMPT(full) [ 2599.487362][ T9330] Tainted: [L]=SOFTLOCKUP [ 2599.487370][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2599.487382][ T9330] Call Trace: [ 2599.487389][ T9330] [ 2599.487397][ T9330] dump_stack_lvl+0x100/0x190 [ 2599.487427][ T9330] should_fail_ex.cold+0x5/0xa [ 2599.487456][ T9330] _copy_from_user+0x2e/0xd0 [ 2599.487482][ T9330] move_addr_to_kernel+0x65/0x170 [ 2599.487509][ T9330] __sys_bind+0x11d/0x260 [ 2599.487535][ T9330] ? __pfx___sys_bind+0x10/0x10 [ 2599.487558][ T9330] ? __fget_files+0x21f/0x3d0 [ 2599.487591][ T9330] ? __pfx_ksys_write+0x10/0x10 [ 2599.487619][ T9330] __x64_sys_bind+0x72/0xb0 [ 2599.487642][ T9330] ? lockdep_hardirqs_on+0x78/0x100 [ 2599.487671][ T9330] do_syscall_64+0x10b/0xf80 [ 2599.487697][ T9330] ? clear_bhb_loop+0x40/0x90 [ 2599.487721][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2599.487742][ T9330] RIP: 0033:0x7f508719cdd9 [ 2599.487759][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2599.487779][ T9330] RSP: 002b:00007f508803b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2599.487800][ T9330] RAX: ffffffffffffffda RBX: 00007f5087415fa0 RCX: 00007f508719cdd9 [ 2599.487814][ T9330] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 2599.487830][ T9330] RBP: 00007f508803b090 R08: 0000000000000000 R09: 0000000000000000 [ 2599.487842][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2599.487854][ T9330] R13: 00007f5087416038 R14: 00007f5087415fa0 R15: 00007ffc2107b298 [ 2599.487882][ T9330] [ 2599.584193][T14551] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2599.714021][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: syz.6.11059 Tainted: G L syzkaller #0 PREEMPT(full) [ 2599.714057][ T9339] Tainted: [L]=SOFTLOCKUP [ 2599.714065][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2599.714076][ T9339] Call Trace: [ 2599.714084][ T9339] [ 2599.714092][ T9339] dump_stack_lvl+0x100/0x190 [ 2599.714122][ T9339] should_fail_ex.cold+0x5/0xa [ 2599.714151][ T9339] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2599.714177][ T9339] should_failslab+0xc2/0x120 [ 2599.714198][ T9339] __kmalloc_noprof+0xe0/0x850 [ 2599.714226][ T9339] ? kfree+0x1dd/0x6c0 [ 2599.714256][ T9339] tomoyo_realpath_from_path+0xb6/0x690 [ 2599.714288][ T9339] tomoyo_path_number_perm+0x23c/0x580 [ 2599.714308][ T9339] ? tomoyo_path_number_perm+0x22e/0x580 [ 2599.714329][ T9339] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2599.714375][ T9339] ? find_held_lock+0x2b/0x80 [ 2599.714395][ T9339] ? __fget_files+0x215/0x3d0 [ 2599.714418][ T9339] ? hook_file_ioctl_common+0x149/0x410 [ 2599.714444][ T9339] ? __fget_files+0x215/0x3d0 [ 2599.714474][ T9339] ? __fget_files+0x21f/0x3d0 [ 2599.714503][ T9339] security_file_ioctl+0xd3/0x230 [ 2599.714528][ T9339] __x64_sys_ioctl+0xb7/0x210 [ 2599.714552][ T9339] do_syscall_64+0x10b/0xf80 [ 2599.714581][ T9339] ? clear_bhb_loop+0x40/0x90 [ 2599.714607][ T9339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2599.714630][ T9339] RIP: 0033:0x7f5a8179cdd9 [ 2599.714647][ T9339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2599.714667][ T9339] RSP: 002b:00007f5a7f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2599.714687][ T9339] RAX: ffffffffffffffda RBX: 00007f5a81a15fa0 RCX: 00007f5a8179cdd9 [ 2599.714701][ T9339] RDX: 0000200000000840 RSI: 00000000000007ab RDI: 0000000000000003 [ 2599.714714][ T9339] RBP: 00007f5a7f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2599.714726][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2599.714738][ T9339] R13: 00007f5a81a16038 R14: 00007f5a81a15fa0 R15: 00007ffc9b485548 [ 2599.714765][ T9339] [ 2599.716396][ T9339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2599.755425][T14551] usb 10-1: Using ep0 maxpacket: 16 [ 2599.972458][T14551] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2599.983401][T14551] usb 10-1: config 0 has no interface number 0 [ 2599.991481][T14551] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2600.108794][T14551] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2600.121782][T14551] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2600.133779][T14551] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2600.147729][T14551] usb 10-1: Product: syz [ 2600.161978][ T9351] block nbd6: NBD_DISCONNECT [ 2600.182299][T14551] usb 10-1: SerialNumber: syz [ 2600.201580][ T9351] block nbd6: Send disconnect failed -32 [ 2600.210608][ T9350] FAULT_INJECTION: forcing a failure. [ 2600.210608][ T9350] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.215329][T14551] usb 10-1: config 0 descriptor?? [ 2600.256593][T14551] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 2600.278447][T14551] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input27 [ 2600.402902][ T9350] CPU: 0 UID: 0 PID: 9350 Comm: syz.2.11062 Tainted: G L syzkaller #0 PREEMPT(full) [ 2600.402939][ T9350] Tainted: [L]=SOFTLOCKUP [ 2600.402947][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2600.402958][ T9350] Call Trace: [ 2600.402965][ T9350] [ 2600.402971][ T9350] dump_stack_lvl+0x100/0x190 [ 2600.402989][ T9350] should_fail_ex.cold+0x5/0xa [ 2600.403006][ T9350] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2600.403021][ T9350] should_failslab+0xc2/0x120 [ 2600.403034][ T9350] __kmalloc_noprof+0xe0/0x850 [ 2600.403051][ T9350] ? kfree+0x1dd/0x6c0 [ 2600.403067][ T9350] tomoyo_realpath_from_path+0xb6/0x690 [ 2600.403085][ T9350] tomoyo_path_number_perm+0x23c/0x580 [ 2600.403097][ T9350] ? tomoyo_path_number_perm+0x22e/0x580 [ 2600.403109][ T9350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2600.403137][ T9350] ? find_held_lock+0x2b/0x80 [ 2600.403148][ T9350] ? __fget_files+0x215/0x3d0 [ 2600.403162][ T9350] ? hook_file_ioctl_common+0x149/0x410 [ 2600.403178][ T9350] ? __fget_files+0x215/0x3d0 [ 2600.403193][ T9350] ? __fget_files+0x21f/0x3d0 [ 2600.403210][ T9350] security_file_ioctl+0xd3/0x230 [ 2600.403224][ T9350] __x64_sys_ioctl+0xb7/0x210 [ 2600.403238][ T9350] do_syscall_64+0x10b/0xf80 [ 2600.403255][ T9350] ? clear_bhb_loop+0x40/0x90 [ 2600.403269][ T9350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2600.403281][ T9350] RIP: 0033:0x7f508719cdd9 [ 2600.403292][ T9350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2600.403302][ T9350] RSP: 002b:00007f508803b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2600.403314][ T9350] RAX: ffffffffffffffda RBX: 00007f5087415fa0 RCX: 00007f508719cdd9 [ 2600.403321][ T9350] RDX: 0000000000000005 RSI: 000000000000ab08 RDI: 0000000000000003 [ 2600.403328][ T9350] RBP: 00007f508803b090 R08: 0000000000000000 R09: 0000000000000000 [ 2600.403335][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2600.403342][ T9350] R13: 00007f5087416038 R14: 00007f5087415fa0 R15: 00007ffc2107b298 [ 2600.403357][ T9350] [ 2600.403377][ T9350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2600.639494][ T9350] block nbd2: NBD_DISCONNECT [ 2600.649427][ T9348] block nbd2: Disconnected due to user request. [ 2600.656008][ T9348] block nbd2: shutting down sockets [ 2600.913233][ T30] audit: type=1400 audit(1777060835.947:1348): avc: denied { read } for pid=9369 comm="syz.2.11068" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2600.930407][ T9346] block nbd6: Disconnected due to user request. [ 2600.949309][ T9368] netlink: 830 bytes leftover after parsing attributes in process `syz.3.11064'. [ 2600.959187][ T30] audit: type=1400 audit(1777060835.966:1349): avc: denied { open } for pid=9369 comm="syz.2.11068" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2600.988012][ T9346] block nbd6: shutting down sockets [ 2601.620975][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2601.621417][T24270] usb 10-1: USB disconnect, device number 30 [ 2601.628057][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2601.754825][T24270] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2602.485468][ T30] audit: type=1400 audit(1777060837.416:1350): avc: denied { ioctl } for pid=9369 comm="syz.2.11068" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xae82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2602.768570][ T5583] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2603.038012][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11075'. [ 2603.127776][ T8916] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2603.148396][ T5583] usb 7-1: Using ep0 maxpacket: 16 [ 2603.221313][ T9388] ptrace attach of ""[9392] was attempted by "./syz-executor exec"[9388] [ 2603.230819][ T5583] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2603.264437][ T5583] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.302274][ T5583] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 2603.329131][ T5583] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2603.353623][ T5583] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2603.369780][ T5583] usb 7-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 2603.379822][ T5583] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.390665][ T5583] usb 7-1: Product: syz [ 2603.395523][ T5583] usb 7-1: Manufacturer: syz [ 2603.400866][ T5583] usb 7-1: SerialNumber: syz [ 2603.423539][ T9390] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2603.564346][ T9406] FAULT_INJECTION: forcing a failure. [ 2603.564346][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2603.629858][ T9406] CPU: 1 UID: 0 PID: 9406 Comm: syz.9.11081 Tainted: G L syzkaller #0 PREEMPT(full) [ 2603.629893][ T9406] Tainted: [L]=SOFTLOCKUP [ 2603.629900][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2603.629913][ T9406] Call Trace: [ 2603.629920][ T9406] [ 2603.629929][ T9406] dump_stack_lvl+0x100/0x190 [ 2603.629960][ T9406] should_fail_ex.cold+0x5/0xa [ 2603.629990][ T9406] _copy_from_user+0x2e/0xd0 [ 2603.630017][ T9406] copy_msghdr_from_user+0x9f/0x4f0 [ 2603.630045][ T9406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2603.630085][ T9406] ___sys_sendmsg+0x106/0x1e0 [ 2603.630111][ T9406] ? __pfx____sys_sendmsg+0x10/0x10 [ 2603.630173][ T9406] __sys_sendmsg+0x170/0x220 [ 2603.630204][ T9406] ? __pfx___sys_sendmsg+0x10/0x10 [ 2603.630247][ T9406] ? rcu_is_watching+0x12/0xc0 [ 2603.630281][ T9406] do_syscall_64+0x10b/0xf80 [ 2603.630307][ T9406] ? clear_bhb_loop+0x40/0x90 [ 2603.630332][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2603.630353][ T9406] RIP: 0033:0x7f4acad9cdd9 [ 2603.630370][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2603.630389][ T9406] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2603.630408][ T9406] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2603.630422][ T9406] RDX: 0000000000000804 RSI: 0000200000000000 RDI: 0000000000000003 [ 2603.630435][ T9406] RBP: 00007f4acbcf3090 R08: 0000000000000000 R09: 0000000000000000 [ 2603.630446][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2603.630458][ T9406] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2603.630493][ T9406] [ 2603.674322][ T5583] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input28 [ 2604.773514][ T9422] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2604.780077][ T9422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2604.787800][ T9422] vhci_hcd vhci_hcd.0: Device attached [ 2604.980082][ T9426] vhci_hcd: connection closed [ 2605.092383][ T6702] vhci_hcd vhci_hcd.2: stop threads [ 2605.268367][ T6702] vhci_hcd vhci_hcd.2: release socket [ 2605.378155][ T6702] vhci_hcd vhci_hcd.2: disconnect device [ 2605.917720][ T9440] CIFS: VFS: UNC: path must begin with // or \\ [ 2605.924240][ T9440] Malformed UNC in devname [ 2605.924240][ T9440] [ 2605.930992][ T9440] CIFS: VFS: Malformed UNC in devname [ 2606.338079][ T9443] FAULT_INJECTION: forcing a failure. [ 2606.338079][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2606.402053][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.9.11092 Tainted: G L syzkaller #0 PREEMPT(full) [ 2606.402086][ T9443] Tainted: [L]=SOFTLOCKUP [ 2606.402093][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2606.402105][ T9443] Call Trace: [ 2606.402112][ T9443] [ 2606.402121][ T9443] dump_stack_lvl+0x100/0x190 [ 2606.402152][ T9443] should_fail_ex.cold+0x5/0xa [ 2606.402185][ T9443] _copy_from_user+0x2e/0xd0 [ 2606.402213][ T9443] copy_msghdr_from_user+0x9f/0x4f0 [ 2606.402240][ T9443] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2606.402280][ T9443] ___sys_sendmsg+0x106/0x1e0 [ 2606.402307][ T9443] ? __pfx____sys_sendmsg+0x10/0x10 [ 2606.402368][ T9443] __sys_sendmsg+0x170/0x220 [ 2606.402400][ T9443] ? __pfx___sys_sendmsg+0x10/0x10 [ 2606.402444][ T9443] ? rcu_is_watching+0x12/0xc0 [ 2606.402478][ T9443] do_syscall_64+0x10b/0xf80 [ 2606.402514][ T9443] ? clear_bhb_loop+0x40/0x90 [ 2606.402541][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2606.402563][ T9443] RIP: 0033:0x7f4acad9cdd9 [ 2606.402582][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2606.402602][ T9443] RSP: 002b:00007f4acbcf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2606.402623][ T9443] RAX: ffffffffffffffda RBX: 00007f4acb015fa0 RCX: 00007f4acad9cdd9 [ 2606.402637][ T9443] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2606.402650][ T9443] RBP: 00007f4acbcf3090 R08: 0000000000000000 R09: 0000000000000000 [ 2606.402663][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2606.402674][ T9443] R13: 00007f4acb016038 R14: 00007f4acb015fa0 R15: 00007ffcc227f098 [ 2606.402704][ T9443] [ 2606.752156][ T9453] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11093'. [ 2606.875745][ T9453] netlink: 'syz.3.11093': attribute type 10 has an invalid length. [ 2606.959384][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11093'. [ 2607.047339][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2607.144515][ T30] audit: type=1400 audit(1777060841.768:1351): avc: denied { write } for pid=9448 comm="syz.3.11093" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2607.262703][ T9453] batadv0: entered promiscuous mode [ 2607.358938][ T9453] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2607.393070][ T9460] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11091'. [ 2607.511399][ T9456] team0: Device macvlan2 is already an upper device of the team interface [ 2608.089778][ T5583] bcm5974 7-1:1.0: could not read from device [ 2608.109047][ T5180] bcm5974 7-1:1.0: could not read from device [ 2608.130233][ T5583] input: failed to attach handler mousedev to device input28, error: -5 [ 2608.171422][ T5180] bcm5974 7-1:1.0: could not read from device [ 2608.193415][ T5583] usb 7-1: USB disconnect, device number 74 [ 2608.208569][ T5180] bcm5974 7-1:1.0: could not read from device [ 2613.332174][T27377] bridge_slave_1: left allmulticast mode [ 2613.337905][T27377] bridge_slave_1: left promiscuous mode [ 2613.343588][T27377] bridge0: port 2(bridge_slave_1) entered disabled state [ 2613.352449][T27377] bridge_slave_0: left allmulticast mode [ 2613.358245][T27377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2613.564127][T27377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2613.574616][T27377] bond_slave_0: left allmulticast mode [ 2613.581693][T27377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2613.591088][T27377] bond_slave_1: left allmulticast mode [ 2613.598842][T27377] bond0 (unregistering): Released all slaves [ 2614.005861][ T4888] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2614.294248][T27377] hsr_slave_0: left promiscuous mode [ 2614.300191][T27377] hsr_slave_1: left promiscuous mode [ 2614.305929][T27377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2614.315787][T27377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2614.325072][T27377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2614.332532][T27377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2614.343396][T27377] veth1_macvtap: left promiscuous mode [ 2614.348970][T27377] veth0_macvtap: left promiscuous mode [ 2614.355543][T27377] veth1_vlan: left promiscuous mode [ 2614.360788][T27377] veth0_vlan: left promiscuous mode [ 2614.570656][T27377] team0 (unregistering): Port device team_slave_1 removed [ 2615.015553][T27377] IPVS: stop unused estimator thread 0... [ 2647.511280][ T4888] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2681.706452][ T6702] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2715.913024][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2726.160678][ T31] INFO: task kworker/1:5:25737 blocked for more than 143 seconds. [ 2726.168690][ T31] Tainted: G L syzkaller #0 [ 2726.175271][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2726.184079][ T31] task:kworker/1:5 state:D stack:22664 pid:25737 tgid:25737 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2726.196263][ T31] Workqueue: usb_hub_wq hub_event [ 2726.201635][ T31] Call Trace: [ 2726.205065][ T31] [ 2726.208015][ T31] __schedule+0x10e9/0x6820 [ 2726.212513][ T31] ? __pfx___schedule+0x10/0x10 [ 2726.217436][ T31] ? find_held_lock+0x2b/0x80 [ 2726.222139][ T31] ? schedule+0x2bf/0x390 [ 2726.226680][ T31] schedule+0xdd/0x390 [ 2726.230777][ T31] schedule_preempt_disabled+0x13/0x30 [ 2726.236356][ T31] __mutex_lock+0xced/0x1b10 [ 2726.240972][ T31] ? hub_event+0x2bfb/0x4af0 [ 2726.245562][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2726.253474][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 2726.259439][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2726.265505][ T31] ? hub_ext_port_status+0x3e4/0x600 [ 2726.270892][ T31] ? hub_event+0x2bfb/0x4af0 [ 2726.275504][ T31] hub_event+0x2bfb/0x4af0 [ 2726.280118][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 2726.285346][ T31] ? __pfx_hub_event+0x10/0x10 [ 2726.290268][ T31] ? interval_tree_iter_next+0x150/0x2e0 [ 2726.295945][ T31] ? rcu_is_watching+0x12/0xc0 [ 2726.300820][ T31] process_one_work+0xa0e/0x1980 [ 2726.306045][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2726.311567][ T31] ? __pfx_hub_event+0x10/0x10 [ 2726.316352][ T31] worker_thread+0x5ef/0xe50 [ 2726.321024][ T31] ? kthread+0x13a/0x450 [ 2726.325486][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2726.330602][ T31] kthread+0x370/0x450 [ 2726.335336][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.339989][ T31] ret_from_fork+0x72b/0xd50 [ 2726.344674][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2726.349818][ T31] ? rcu_is_watching+0x12/0xc0 [ 2726.354667][ T31] ? __switch_to+0x800/0x1100 [ 2726.359385][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.364093][ T31] ret_from_fork_asm+0x1a/0x30 [ 2726.368886][ T31] [ 2726.371974][ T31] [ 2726.371974][ T31] Showing all locks held in the system: [ 2726.379966][ T31] 1 lock held by khungtaskd/31: [ 2726.384911][ T31] #0: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2726.394806][ T31] 2 locks held by getty/5581: [ 2726.399585][ T31] #0: ffff88803a6390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2726.409440][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 2726.419999][ T31] 4 locks held by kworker/u8:11/6702: [ 2726.425417][ T31] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 2726.435461][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2d69/0x6820 [ 2726.444281][ T31] #2: ffff8880abd80780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x570 [ 2726.454456][ T31] #3: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xdc/0x420 [ 2726.464855][ T31] 5 locks held by kworker/1:1/16803: [ 2726.470222][ T31] #0: ffff888023296540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 2726.481105][ T31] #1: ffffc90003607d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 2726.492580][ T31] #2: ffff88802d18e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 2726.501514][ T31] #3: ffff88802d1db568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 2726.511516][ T31] #4: ffff88802d04c460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 2726.521289][ T31] 5 locks held by kworker/1:5/25737: [ 2726.527010][ T31] #0: ffff888023296540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 2726.537933][ T31] #1: ffffc90005677d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 2726.549273][ T31] #2: ffff88802d0dc1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 2726.558251][ T31] #3: ffff88802d179568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 2726.568279][ T31] #4: ffff88802d04c460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 2726.578089][ T31] [ 2726.580440][ T31] ============================================= [ 2726.580440][ T31] [ 2726.589679][ T31] NMI backtrace for cpu 1 [ 2726.589703][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2726.589732][ T31] Tainted: [L]=SOFTLOCKUP [ 2726.589740][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2726.589752][ T31] Call Trace: [ 2726.589759][ T31] [ 2726.589769][ T31] dump_stack_lvl+0x100/0x190 [ 2726.589798][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2726.589826][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2726.589853][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2726.589881][ T31] sys_info+0x141/0x190 [ 2726.589901][ T31] watchdog+0xcb1/0x1030 [ 2726.589931][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2726.589960][ T31] ? __pfx_watchdog+0x10/0x10 [ 2726.589985][ T31] ? __kthread_parkme+0x18c/0x230 [ 2726.590010][ T31] ? kthread+0x13a/0x450 [ 2726.590032][ T31] ? __pfx_watchdog+0x10/0x10 [ 2726.590054][ T31] kthread+0x370/0x450 [ 2726.590076][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.590102][ T31] ret_from_fork+0x72b/0xd50 [ 2726.590135][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2726.590161][ T31] ? __switch_to+0x800/0x1100 [ 2726.590189][ T31] ? __pfx_kthread+0x10/0x10 [ 2726.590212][ T31] ret_from_fork_asm+0x1a/0x30 [ 2726.590254][ T31] [ 2726.590262][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2726.722515][ C0] NMI backtrace for cpu 0 [ 2726.722540][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2726.722567][ C0] Tainted: [L]=SOFTLOCKUP [ 2726.722574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2726.722586][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2726.722619][ C0] Code: 26 86 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 90 10 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2726.722637][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 2726.722653][ C0] RAX: 000000000527ded3 RBX: ffffffff8e4955c0 RCX: ffffffff8b9b0045 [ 2726.722666][ C0] RDX: 0000000000000000 RSI: ffffffff8df5a6ec RDI: ffffffff8c1c1d80 [ 2726.722682][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 2726.722694][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 2726.722706][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90dc2450 [ 2726.722719][ C0] FS: 0000000000000000(0000) GS:ffff8881242da000(0000) knlGS:0000000000000000 [ 2726.722737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2726.722750][ C0] CR2: 00005610ec76c168 CR3: 000000000e596000 CR4: 00000000003526f0 [ 2726.722763][ C0] Call Trace: [ 2726.722770][ C0] [ 2726.722777][ C0] default_idle+0x9/0x10 [ 2726.722794][ C0] default_idle_call+0x6c/0xb0 [ 2726.722811][ C0] do_idle+0x464/0x590 [ 2726.722831][ C0] ? __pfx_do_idle+0x10/0x10 [ 2726.722847][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 2726.722870][ C0] cpu_startup_entry+0x4f/0x60 [ 2726.722888][ C0] rest_init+0x251/0x260 [ 2726.722906][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2726.722928][ C0] start_kernel+0x484/0x490 [ 2726.722947][ C0] x86_64_start_reservations+0x24/0x30 [ 2726.722968][ C0] x86_64_start_kernel+0x12b/0x130 [ 2726.722987][ C0] common_startup_64+0x13e/0x148 [ 2726.723021][ C0] [ 2726.917078][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2726.923942][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2726.934629][ T31] Tainted: [L]=SOFTLOCKUP [ 2726.938931][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2726.948985][ T31] Call Trace: [ 2726.952253][ T31] [ 2726.955172][ T31] dump_stack_lvl+0x100/0x190 [ 2726.959834][ T31] vpanic+0x552/0x970 [ 2726.963808][ T31] ? __pfx_vpanic+0x10/0x10 [ 2726.968314][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2726.974473][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2726.980632][ T31] panic+0xd1/0xe0 [ 2726.984360][ T31] ? __pfx_panic+0x10/0x10 [ 2726.988768][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2726.995174][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2727.001322][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2727.007475][ T31] ? watchdog.cold+0x1ec/0x234 [ 2727.012264][ T31] ? watchdog+0xcc1/0x1030 [ 2727.016672][ T31] watchdog.cold+0x1fd/0x234 [ 2727.021260][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2727.027070][ T31] ? __pfx_watchdog+0x10/0x10 [ 2727.031744][ T31] ? __kthread_parkme+0x18c/0x230 [ 2727.036771][ T31] ? kthread+0x13a/0x450 [ 2727.041004][ T31] ? __pfx_watchdog+0x10/0x10 [ 2727.045701][ T31] kthread+0x370/0x450 [ 2727.049762][ T31] ? __pfx_kthread+0x10/0x10 [ 2727.054346][ T31] ret_from_fork+0x72b/0xd50 [ 2727.058933][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2727.064041][ T31] ? __switch_to+0x800/0x1100 [ 2727.068717][ T31] ? __pfx_kthread+0x10/0x10 [ 2727.073306][ T31] ret_from_fork_asm+0x1a/0x30 [ 2727.078258][ T31] [ 2727.081817][ T31] Kernel Offset: disabled [ 2727.086134][ T31] Rebooting in 86400 seconds..