last executing test programs: 16m57.423199108s ago: executing program 3 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24008096) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (fail_nth: 3) 16m56.515068987s ago: executing program 3 (id=293): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x4527, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000180)=0x31) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) io_submit(0x0, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x18, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x1, 0xdab, 0x0, 0x0, 0x1000, 0x1, 0xffffffffffffffff, 0x0, 0x11}}}, &(0x7f00000000c0)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, 0x0, 0x0, 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r4 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="850000002f000000620a00ff140000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000ed239c3f7caf2f0737a9f2149d7d047ec429def7f3e80da4da05f7f84809f22b6223c7f8682afa70a8435dc1913dbc91b741210588aaeed5759e570c23fbde699cf233b76159db85b5134eead7669f5beff9a57ce0971a408401000000696759eb4b8859b2765f30be61"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'xWXx'}]}, 0xfffffd81) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x2}) 16m54.987311502s ago: executing program 3 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x54}, 0x4044005) r3 = fsmount(r2, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x6, @broadcast}, 0x2, {0x2, 0x4e23, @empty}, 'macvlan0\x00'}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x3e, '\x00', @data=0x8, 0x8}, {0x29, '\x00', @buffer={"0000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e8300", 0x20}, 0x1c}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0xfc5c7b4f, &(0x7f0000000180)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 16m53.178616205s ago: executing program 3 (id=301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xfffe, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) 16m52.867240969s ago: executing program 3 (id=304): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) (fail_nth: 2) 16m52.279474347s ago: executing program 3 (id=306): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x524, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8c02, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000a80)={"a26cad907e4b17d867c8ee80af5342958a6bd8eda21b9cff51e0fe2524cda247ba1c5839a11a07adba5681dda588ceab85d9c2178b2d573675fb9d3e95944f093bee01a84049816118d17efce70ea5bfecf8f82b687724633292c6b67fde15529f4d4c08e6f8e7370536cad0d05ab044b39180d480d4ee90011f86623a1124175bfa1a16b97c840de2ff012cf03ff7aac5d17964a6a5c302e1e532c9ec7d93d0b08b73f40f8b0809be9f7b2a18ab4ec42e56ae4129b8f5eb273d4e221630904d1300b50d64a5ed4637cf0446222da409aaf18c4494e6ab24715dd888dfab8688fa115d57a925f0eeb0fd3ec5e08f67864534908093abd9b5d025742fa57dacacf7250360fb7e62b7257f7f53441ecae96f56cdb6ab718a9a664bf398df82939dc7f2bc441d3bbe6c60fe3d47e10ecdaae86d052dc98c17b5040b667ac8e238a4eea8c143b7ce46c74717daf071c8b73d33bdb0edac8972b9c8fbb2ba53fd708bfafbc8d5907e5dc291baf10b0890c6cd0af8c1da54073fd86b5ad5b753279613d7ba6083a8061f8a85c20fcc584eeff3e2fbabf5a8aaf02b36b5d9e43237e28188776cfbd5c4b9a04ba516d86405b2b45d4d087a54c0224a1a4f1532555ed4b09ae9876a54bb701ec9a7bd64c9eaa8ed1ee57563542f9c1cf215c72e0986ac68e18a53ae16dc5eaf5481f44d4a36e216ebd0c82e14270967ac05746ed85d8523b4920c0d0ad45e8867a4be97b2422d5de0c170409b16a0bcce5216bfdfd1ed7c8468bb6dc5c87046d1ca9a3650aa5855554bbcd284f63daaa5daf4d55ac8f8a0f1567ba66ebb1437e1132f2227403a057b1406178c27f64837d33e929f879a5aaae14d2e38c461da81b77c620e9592faf6d2e86bf02c7eafa28fdf15d8abd880ea623262f55bb4f92eec377a4021d21bec9ad1ecb0003c95862201a560a7582ae2e3a4ec3e290b08fdb5b1c1f3d8f7ce7a80a2d572f927ec33115b95b779585202a956ef733bf82780e520e68d05a288411bbe073e434b723d500af775ee0204e839fc2ee0d83c7f1cf441b86d013171395beff954d9df3f95864ae1cade0692a15ec4d7b91d30c806282f8d192721b37a63d335c600c085c6b5c6d5c84290415e96ced4e6885dd78bd29939ed83db986e11ac505471ede1a3aa527ae1d7325366b3a365f774e5eea7e3a0d465c24f3dd582d60e514771e45d5643d4a0d4ed312a7e740295efdf1bc7b72683b069710ab07797f8a0c35ec826754f5be4a23359edb21606a7af98deade0d7c123a555c0edef8ffbef0c11b8049567ff5c79c6c1c4adde89baf7c883ac6112736d18e58be792d05075b1e2d304b06f05be6363f1c943553354d0bbb8a6251c64267d47624ac383aaf6b2136382559d730d24197a42a29e670e5eced1354d1c624664e1e4ff932ea4d8d1047335f5d874ef4f82ba"}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0x4004834) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$lan78xx(0x4, 0x58, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) semget$private(0x0, 0x2, 0x8) 16m37.016802487s ago: executing program 32 (id=306): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x524, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8c02, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000a80)={"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"}) close_range(r1, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0x4004834) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$lan78xx(0x4, 0x58, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) semget$private(0x0, 0x2, 0x8) 11m20.131061521s ago: executing program 0 (id=1649): syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0}) 11m17.024413468s ago: executing program 0 (id=1672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m15.956020044s ago: executing program 0 (id=1676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x54}, 0x4044005) r3 = fsmount(r2, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x6, @broadcast}, 0x2, {0x2, 0x4e23, @empty}, 'macvlan0\x00'}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0xfc5c7b4f, &(0x7f0000000180)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 11m14.153419303s ago: executing program 0 (id=1683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 11m14.04151326s ago: executing program 0 (id=1684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c48"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856", 0x57}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea", 0x26}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb5", 0x1f}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, r3, 0x49b2570c7b83b4a5, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_open_dev$vcsa(&(0x7f0000000280), 0x3ff, 0x689c1e0c043b1181) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 3) 11m12.659672801s ago: executing program 0 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080003000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g'], 0x20}}, 0x0) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000010101020000000000000000020000092000018006000340000400001400018008000100ac14fcffffffffffffff14bb0c0019800800020018"], 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r10, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) open(0x0, 0x108843, 0x98) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r11, 0x560c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 10m57.43906563s ago: executing program 33 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080003000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g'], 0x20}}, 0x0) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r9 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000010101020000000000000000020000092000018006000340000400001400018008000100ac14fcffffffffffffff14bb0c0019800800020018"], 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r10, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) open(0x0, 0x108843, 0x98) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r11, 0x560c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 7m48.126772828s ago: executing program 1 (id=2444): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/209, 0xd1}], 0x5, &(0x7f0000001d00)=""/156, 0x9c}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000001e00)=""/98, 0x62}, {&(0x7f0000001e80)=""/114, 0x72}, {&(0x7f0000001f00)=""/170, 0xaa}, {&(0x7f0000001fc0)=""/7, 0x7}, {&(0x7f0000002000)=""/6, 0x6}], 0x6, &(0x7f0000000740)=""/101, 0x65}, 0x3ff}, {{&(0x7f0000002140)=@nfc, 0x80, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/81, 0x51}, {&(0x7f0000002240)=""/58, 0x3a}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000002380)=""/128, 0x80}], 0x4, &(0x7f0000002440)=""/92, 0x5c}, 0x6}, {{&(0x7f00000024c0)=@tipc=@id, 0x80, &(0x7f0000002880)=[{&(0x7f0000002540)=""/84, 0x54}, {&(0x7f00000025c0)=""/149, 0x95}, {&(0x7f0000002680)=""/214, 0xd6}, {&(0x7f0000002780)=""/245, 0xf5}], 0x4, &(0x7f00000028c0)=""/6, 0x6}, 0x7c23}, {{&(0x7f0000002900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002980)=""/103, 0x67}, {&(0x7f0000002a00)=""/233, 0xe9}, {&(0x7f0000002b00)=""/232, 0xe8}], 0x3, &(0x7f0000002c40)=""/105, 0x69}, 0x1}], 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="0000fba64ebe50b71cc2005c6e3e32c3e15136ed3282bda8c63bda00002e1a3766055fd6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000800000ab000000000000000000f7ff0000", @ANYRES32=0x0, @ANYBLOB='c1\x00'/20, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \t'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) clock_adjtime(0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x102) fcntl$setlease(r6, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x1}, 0x6) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd, 0x0, 0x8}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 7m46.626807729s ago: executing program 1 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 7m46.28541242s ago: executing program 1 (id=2452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="76cd0000040000000000000000000000850000002c000000380100002020732500000000002020207b1af8ff00000000bfa10000000000000701ffecf8ffffffb702000008000000b70300000000000085000000170000009522b119a58cde33a7866f05a2a775032170254e78cabc1fb0f9713995478237101a8cbed3abe8077441cfcb225b2ef99682da83862a59226be40f35e4df3d994e05ef843a0ca7edbe441c3c4b38e3a8ab6e614657a3c7ccfecec75fd75edd7cad60510883b2f0981b6d0e3efd7c33dece3cefedbe4880a03f014b3d821c8aa64e376b1a32127839b9a4a165ad16cdaf2d974394428b"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff0300610d2eff1b7233d891fb", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 7m46.058925875s ago: executing program 1 (id=2455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020400048018000480"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 7m45.77449271s ago: executing program 1 (id=2458): io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x34, r2, 0x1, 0xfffffffd, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd49920d352510fc2}, 0x4000040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fdatasync(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x84) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) write$6lowpan_control(r4, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r4, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x26020480) 7m44.57506403s ago: executing program 1 (id=2459): r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (fail_nth: 3) close_range(r0, 0xffffffffffffffff, 0x0) 7m29.406883945s ago: executing program 34 (id=2459): r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (fail_nth: 3) close_range(r0, 0xffffffffffffffff, 0x0) 11.139745604s ago: executing program 2 (id=4772): symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') lsetxattr$smack_xattr_label(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)='security.SMACK64MMAP\x00', &(0x7f0000001d40)={':[\\&*)-)+-!'}, 0xc, 0x1) 9.915023151s ago: executing program 2 (id=4775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x1034, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x390, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x7, 0x7, 0xfff3, 0x7fff, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x6}, {0x6, 0x6}, {0x1}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x3}, {0x4, 0xe}, {0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x8}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x5}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x3}, {0x5, 0x8}, {0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5da, 0x7fff, 0x6ce, 0x4, 0x8, 0xfffc, 0xb]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x1}, {0x0, 0x4}, {}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x0, 0x1}, {}, {0x3, 0x8}, {0x7, 0x4}, {0x7}, {0x3, 0x7}, {0x1, 0x9}, {0x3, 0xa}, {0x1}, {0x3, 0x9}, {0x2, 0x2}, {}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x6}, {0x1, 0x7}, {}, {0x2, 0x2}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x7, 0xa}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x1}, {0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xf4a, 0xa0f, 0x1ff, 0x40, 0x6, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xe, 0x3, 0x7, 0x2, 0x401, 0x7b7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffff, 0x80, 0xeb, 0x8e, 0x8, 0x3ff, 0x1c0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x7, 0x7f, 0x9, 0x9, 0x200]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x6}, {0x2, 0x3}, {0x1}, {0x5, 0x8}, {0x4, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0x4}, {0x4, 0x8}, {0x5, 0x7}, {}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x4}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x7, 0x6}, {0x5, 0x5}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x3}, {0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x2, 0x3, 0x0, 0x0, 0x9, 0x7, 0x100]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x36, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x9, 0x5, 0x0, 0x7, 0xff, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x31, 0x4b99, 0x2, 0xb, 0x8, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xad, 0xa082, 0x8, 0x4, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x100, 0x3, 0x8000, 0x81, 0x5, 0x10]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x7c351f84aae3c414, 0x0, 0x1, 0x1b, 0x7f, 0x16, 0x12b2be513dd0766a, 0x6c, 0x6c, 0x4, 0x24, 0x30, 0x4, 0x2, 0x9, 0x48, 0x9, 0x6c, 0xb82489e3ac1c1fa3, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0xa}, {0x3, 0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0xe}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x3}, {0x5, 0x9}, {0x4, 0x4}, {0x3, 0x7}, {0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x4, 0x4}, {0x4, 0x5}, {0x4, 0x8}, {0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x1}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x5}, {0x6}, {0x5, 0xa}, {0x2, 0x6}, {0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1b3d, 0x3de4, 0x3, 0x401, 0x64, 0x200, 0xf]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x2}, {0x3, 0xa}, {0x5, 0x2}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x9}, {0x7, 0x8}, {0x6, 0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}]}]}, @NL80211_ATTR_TID_CONFIG={0x56c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa25}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x50}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x3}, {0x7, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x2}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x7, 0xa}, {0x2}, {}, {0x4, 0x8}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10d6, 0xd82, 0x3, 0x800, 0x6, 0x10, 0xfffc, 0xd6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x5485, 0xdce, 0x9, 0x5, 0x1, 0xb0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x3}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {0x6}, {0x7, 0x6}, {0x7, 0x7}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x1}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x5, 0x4}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x6}, {0x5}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x8}, {0x7, 0x7}, {0x7, 0x2}, {0x7}, {0x6, 0x1}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x3}, {0x5}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x5}, {0x7, 0x4}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x3}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x4, 0x5}, {0x3, 0x9}, {0x7, 0x4}, {0x2, 0x9}, {}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x99443dc6355b7b0b, 0x36, 0xc, 0x6c, 0x24, 0xc, 0x0, 0x9, 0x36, 0x16, 0x36, 0x24, 0x6, 0x60, 0x6, 0x19, 0x4, 0x4]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x6, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x7}, {0x4, 0x1}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x2b, 0xb, 0x60, 0x18]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x5}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x4, 0x30, 0x3, 0x6, 0xb, 0x60, 0x16, 0xc, 0x3, 0x1, 0x3]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa, 0x1, 0x2, 0xe, 0x1, 0x2, 0x57]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x9, 0x24, 0x16, 0x2]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x1b, 0x6, 0x0, 0xb, 0x9, 0x18, 0x3, 0x50, 0x12, 0x12, 0x1, 0x24, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0xa}, {0x3, 0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0x7}, {0x3, 0x6}, {0x4}, {0x0, 0x4}, {0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x3}, {0x5, 0x1}, {0x6, 0x4}, {0x3, 0x7}, {0x1}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x3}, {0x7, 0x7}, {0x7, 0x1}, {0x1, 0x7}, {0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0xa}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0xd}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x1, 0x5f, 0x2, 0x6, 0x4, 0xc, 0x6, 0xc, 0x16, 0x48]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7fff, 0x9, 0x0, 0x69f, 0x8000, 0x8, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x4, 0x643, 0x99e, 0x2, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8f8, 0x7, 0xff80, 0x7, 0x3, 0x2, 0x6]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6e, 0x9, 0x200, 0xfffa, 0xe362, 0x400, 0xc, 0xe161]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x8000, 0xe5, 0x2, 0x8, 0x62, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x95, 0x7fff, 0x0, 0x9, 0x4, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0xffff, 0xe, 0x1, 0x6, 0x6, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x100, 0x2, 0xab9, 0x2cef, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x48, 0x30, 0x2, 0x1, 0x4, 0xc, 0x24, 0x2, 0xc, 0x1, 0x1b, 0x5, 0x16, 0xc, 0x1, 0x2, 0xc, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x800, 0x0, 0xe8ae, 0xf, 0x400, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x3, 0x1, 0x7, 0xbf, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x1, 0x2, 0x100, 0x8, 0xb, 0x8]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x9, 0x81, 0x7, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3ff, 0xfffe, 0xff8f, 0x4, 0x3ff, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x9, 0x8, 0xce, 0xffff, 0x8, 0xff, 0xfffb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x2, 0x1, 0x4, 0x9b35, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x9, 0x24, 0x24, 0x1, 0x60, 0xc, 0x24, 0x9, 0x4, 0x3, 0x36, 0x4, 0x30, 0x60, 0x60, 0x78, 0x6c, 0x9]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7fff, 0x0, 0x3, 0x0, 0x9, 0x3, 0xfffe]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff, 0x8, 0x401, 0x80, 0x0, 0x3, 0x39f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7f, 0x1, 0x240, 0x3, 0x8, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0x3, 0x53d, 0xf3, 0x8, 0x4, 0x61]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x1, 0x12, 0x1b, 0x36, 0x30, 0x48, 0x60, 0x60, 0x4, 0x16, 0xc, 0x30, 0x1a, 0x4, 0x6c, 0x48, 0x1, 0x6, 0x6c, 0x12]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x12, 0x9, 0x1, 0x1, 0x1, 0x6c, 0x60, 0x5, 0x48, 0x18, 0x1, 0x0, 0x9, 0x18, 0x5, 0xb, 0x16, 0x5, 0x48, 0x18, 0x6, 0xc, 0x4, 0x5, 0x4, 0x3, 0x18, 0x5]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x829}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x2b8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xff4b, 0x5, 0x7, 0x4, 0x6e10, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x18, 0x6, 0x3, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x8000, 0x6, 0xe7, 0x281, 0x5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1, 0xa, 0x3, 0x5, 0x5, 0x5, 0xd3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x8, 0x0, 0x3, 0x0, 0x652, 0x2, 0xf0ad]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x62, 0x4, 0x24, 0x2, 0xc, 0x5, 0x1b, 0x12, 0x12, 0x18, 0x3d, 0x0, 0x36, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xedda693cd96f11e9}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x18, 0xb, 0x1, 0xb, 0x24, 0x1, 0x9, 0x6, 0x4, 0x2ba43ee1eb00a75c, 0x4, 0x2, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x4, 0x401, 0x8, 0xc, 0x200, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x7, 0xf, 0xfff, 0x5, 0x800, 0xa]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x7f, 0x5, 0x4, 0x1, 0x7f, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x5, 0x6, 0x16, 0x5, 0xc, 0x6c, 0x1, 0x24, 0xe, 0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x2, 0x4, 0x3, 0x92e, 0x8000, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x36, 0x16, 0x6c, 0x48, 0x3, 0x30, 0x6, 0x16, 0xc]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x9, 0x8, 0x100, 0x401, 0x5, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7f1, 0x9, 0x5, 0x5, 0x7b23, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x4, 0x1b, 0x16, 0x30, 0x48, 0x2, 0x1, 0x60, 0xb, 0x5, 0x30, 0x9, 0x6a, 0xb, 0x6c, 0x24, 0x36, 0x36, 0x1b, 0x48, 0x48]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x40, 0x9, 0x101, 0xc165, 0x1b6, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x8, 0x4, 0x7, 0x6, 0x644, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x46c, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x9}, {0x2, 0x8}, {0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x5}, {0x2, 0x7}, {0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x7, 0x9}, {0x4, 0x8}, {0x7, 0x4}, {0x4, 0x8}, {0x4, 0x4}, {0x4, 0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x9}, {0x2, 0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x1}, {0x1}, {0x7, 0x7}, {0x6, 0x6}, {0x7, 0x4}, {0x3, 0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x1f}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0xb, 0x2, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0xa}, {0x4}, {}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x1}, {0x4, 0x4}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x6}, {0x6, 0x2}, {0x0, 0xa}, {0x7}, {}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x61, 0x36, 0x16, 0x6c, 0x434b49b37c141756, 0x6, 0x48, 0x36, 0x36, 0x0, 0x4, 0x9, 0x9, 0x16, 0x1b, 0x4, 0x9, 0x0, 0x48, 0x6, 0x5, 0x3]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x5, 0x1b, 0x1, 0x1b, 0x60, 0xb, 0x12, 0x3, 0x30, 0x9, 0xb, 0x18, 0x1, 0x48, 0x60, 0xb, 0x9, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x4, 0x21b, 0xd, 0xc1d, 0x100, 0x32f0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x9, 0x914, 0x7, 0x5, 0x7121, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x77d, 0x8, 0xc, 0x1, 0x5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe0, 0x8, 0x0, 0x8, 0x3, 0x44c2, 0x40, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x27}]}, {0x32c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x72}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x2, 0x0, 0x7, 0xd63, 0x154a, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x1ff, 0xb17d, 0x6, 0x6, 0x0, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x81, 0x72, 0x8, 0x47, 0x5, 0xd4, 0x3]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7}, {0x6}, {0x0, 0x6}, {0x7, 0x8}, {}, {0x6, 0x5}, {0x3, 0x2}, {0x6, 0x7}, {0x6, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {}, {0x2, 0x7}, {0x4, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x12, 0x3, 0x3, 0x60, 0x48, 0x6, 0x1, 0xb, 0x60, 0x9, 0x5, 0x2, 0xb, 0x60, 0x2, 0x18, 0x6c, 0x6c, 0x9, 0x0, 0x5, 0x1b, 0x6c, 0x3, 0x16, 0x4, 0x18, 0xc, 0x4, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf95, 0xfffc, 0x7, 0x0, 0x1e4, 0x2, 0x81, 0x5]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x19c8, 0x3, 0x6, 0xd, 0x4, 0x4, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x7, 0x7, 0xc8d5, 0xd, 0x4, 0x80, 0x41]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x2, 0x1, 0x36, 0x30, 0x2, 0xb, 0x4, 0x16, 0x5, 0x18, 0x6, 0x2, 0xb]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x5}, {0x5}, {0x6, 0x6}, {0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x5}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x6}, {0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x2, 0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x7}, {0x6, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x0, 0x16, 0x48, 0x18, 0x4, 0x5, 0x6c, 0xc, 0x4, 0x29, 0xb, 0x5, 0x1, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x5, 0x5, 0x1000, 0x8, 0x3, 0xb674]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x6, 0x6, 0x5, 0x0, 0xed2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0xa}, {0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x3}, {0x4, 0x4}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x4, 0x800, 0x9, 0x4, 0x5f9b, 0x40, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x24, 0x7f, 0x4, 0x1, 0x8, 0x7, 0x5, 0x3d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x6, 0x80, 0x0, 0x3, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x7, 0xe, 0x8000, 0xb, 0xf9c5, 0x7, 0x9e00]}}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x2, 0xa}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x4}, {0x5, 0x4}, {0x5, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x9}, {0x6, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0xa}, {0x6}, {0x6}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x1}, {0x3, 0x7}, {0x3, 0xa}, {0x2, 0x6}, {0x6, 0x7}, {0x6, 0xa}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x5}, {0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x2, 0xa}, {0x7, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x3, 0x7}, {0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x862b, 0xcd4, 0x2, 0x7, 0x5, 0x7fff, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x4, 0x6c, 0x30, 0x79, 0xc, 0x16, 0x0, 0x3, 0x36, 0x3, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x24, 0x5, 0x60, 0xc, 0x18, 0x16, 0x16, 0xc, 0x48, 0x1b, 0x12, 0x60, 0x5, 0x36, 0x6, 0x5, 0x1, 0x9, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1e, 0x9, 0x1334, 0x6, 0x7, 0x2, 0x2]}}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4fe0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x800}]}]}]}, 0x1034}, 0x1, 0x0, 0x0, 0x40000}, 0x811) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESOCT], 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) shutdown(r4, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) shutdown(r4, 0x1) syz_clone3(&(0x7f0000001580)={0x100000000, &(0x7f00000012c0)=0xffffffffffffffff, &(0x7f0000001300), &(0x7f0000001340), {0x9}, &(0x7f0000001380)=""/231, 0xe7, &(0x7f0000001480)=""/191, &(0x7f0000001540)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) close_range(r4, r5, 0x0) 9.121721371s ago: executing program 4 (id=4782): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) unshare(0x20060400) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) (fail_nth: 3) 8.419194334s ago: executing program 4 (id=4785): prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() r1 = getpid() r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000001c40)={0x8, 0x800, 0x7ff, 0x1000, &(0x7f0000000b00)=""/4096, 0x98, &(0x7f0000001b00)=""/152, 0x70, &(0x7f0000001bc0)=""/112}) sendmmsg$unix(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x800}}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r8, 0xc0805841, &(0x7f0000000040)={0x41180000, 0x4, 0x2, 0x2, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000240)={@empty, 0x0, 0x2, 0x0, 0x5, 0x73, 0x2}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x80084) 8.405988105s ago: executing program 6 (id=4786): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x8800, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bf1ffffffffff00ff00000000000400000000007d834915e40747d366168d9562cca7d223d6ccac97c408ea185d055663ba84d29b52d5571e54868fa639bc2eb283ff2e1c8b304744f882a9858d4ce226ce324552749edf1023ace671b787ef65add118a37ade1b9298cc291183b9316a033fe78e049876142c9f83d7a1e1a99ce12bb1d6de5407f63cc0e79709d211b5df5ef58a1acaa3d65273c03f8dea7553f062fe76609c7133abbd0210ed6725ccaef2d64d6d75865a35f9545a7d48f34ea01de56387f40c813f78698c27697e133b9821607a5cfbf54055", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x25) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x2640) r2 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r2, 0x0, 0x0, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r3], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6.88519941s ago: executing program 2 (id=4790): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @host, 0x0, 0x2, 0x5e, 0x1000000000000005, 0x30, 0x2, 0xffbffffc}) 6.880184879s ago: executing program 5 (id=4791): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xa2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) (fail_nth: 3) 6.719123547s ago: executing program 7 (id=4792): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0x1d, r0, 0x3, {0x2, 0xf0, 0x6ed69ca2616366e6}}, 0x18, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x240c08d5}, 0x4048004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000280), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x1, 0x0, r5, 0x4ce}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000580)={0x28, 0x4, r5, 0x0, &(0x7f0000673000/0x3000)=nil, 0x3000, 0x6}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900f8ff1400000884a3dc4894ad0b756ba52dd93809b11e76b7d31086d276eacfdce0900a689dd7697a3a3a0b9c1d1b4e631d54c05da562cd85b84fb0080ca2e4494cc7a66dcd6b430880f18dedbd75d7d9d68da6fa57252df7478625dc63f2c6b1e4c007722f95d123cba79255b20d10f812f44ab8b1bad3aba72c16286fefea657729faccbd0d2a7a12cf751afd4d9fb8d8dc3d3854827af092fe5fc0ddc97fe2183678281635576fc6bd2ebd94d9e1a4cd375d06b36eba1c684edb1471cc936e99c1d1a8b88a9b0b09302b2cd9881d07486f7ab131b55fdfc4b5cfc90bb57663b6f2333b5ee874f06859c51745ef9c456d65bb7d0d00"/259, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6.592130532s ago: executing program 5 (id=4793): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 6.496279093s ago: executing program 5 (id=4794): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0), 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000001000), 0xa36793b7d6d8eb41, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x41021, &(0x7f0000000280)=ANY=[]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000fc0)={'vxcan1\x00', @local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) prlimit64(r1, 0x2, &(0x7f0000001040)={0x7fffffff}, &(0x7f0000001080)) socket(0x11, 0x3, 0x0) 6.446159807s ago: executing program 2 (id=4795): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @sk_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x100000}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x1) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) bind$packet(r9, &(0x7f00000000c0)={0x11, 0x8, r2, 0x1, 0xa}, 0x14) r10 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r10, 0x9) syz_open_dev$admmidi(&(0x7f0000000000), 0xf84, 0x80000) r11 = socket(0x2a, 0x80802, 0x6) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) 5.375695182s ago: executing program 7 (id=4796): r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x2264da698a9eb67e, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000200)={0x80000001, 0xfff, 0xf, 0x9, 0x59, "d10900080000000000ffff0900000000000f00", 0x800, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x5, @remote}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x5, 0x84, 0x9, 0x5, 0x100000}, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e) ioctl$BLKPG(r2, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xa, @remote, 0x1}, 0x1c) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b20399f2ab5becc8519c53d3416e28d9a96bb4113a3a7b105ac35f870f4984fbeb7c10fc1de4ffac92d1e5f751dc4aaf43c2d7800e745491c2c9b064e4faee777a242778c45b40a48f92c37492f628f93824a"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) socket$inet6(0xa, 0x801, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x2264da698a9eb67e, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000200)={0x80000001, 0xfff, 0xf, 0x9, 0x59, "d10900080000000000ffff0900000000000f00", 0x800, 0x3}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x5, @remote}, 0x1c) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x5, 0x84, 0x9, 0x5, 0x100000}, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x17e) (async) ioctl$BLKPG(r2, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xa, @remote, 0x1}, 0x1c) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b20399f2ab5becc8519c53d3416e28d9a96bb4113a3a7b105ac35f870f4984fbeb7c10fc1de4ffac92d1e5f751dc4aaf43c2d7800e745491c2c9b064e4faee777a242778c45b40a48f92c37492f628f93824a"], 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) 4.855270813s ago: executing program 6 (id=4797): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x2}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x800003}, {0x8, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) 4.619491673s ago: executing program 2 (id=4798): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x10, 0xc01) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) writev(r3, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f00000004c0)}, {0x0}], 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b00010062726964676500004800028005001900"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6(0xa, 0x1, 0x0) 4.420673872s ago: executing program 5 (id=4799): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_auto}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="66b8010000000f01d90f300f01c46626ab9a0c003f00f30f1efb66b9710b00000f322e0f68190f01c4660f38405e07", 0x2f}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.986742563s ago: executing program 4 (id=4800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x9, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x80, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000180)={0x910, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x1, 0x9, 0x800, 0xec2, 0x8, 0x7, 0xd29]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xd19, 0x9, 0x4, 0xc, 0xc, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0xa}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x16, 0x7, 0x7, 0x36, 0x12, 0xc, 0x36, 0x12, 0x6c, 0xb, 0x1b, 0x2, 0x36, 0x12, 0xb, 0xb, 0x1, 0x1b, 0x1b, 0x60, 0x2]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x6}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0xa}, {0x6, 0x1}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0xb, 0x6c, 0x3, 0x1b, 0x1b, 0x3, 0xb, 0xc, 0x1, 0x60, 0x30, 0x6, 0x12, 0x0, 0x1b, 0x5, 0x5, 0x30, 0x30, 0x6, 0x2]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x1}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x4, 0x5}, {0x6, 0x7}, {0x7, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x3, 0x8}, {0x3}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x8}, {0x5, 0x2}, {0x2, 0x7}, {0x4, 0x6}, {0x5, 0x8}, {0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x1}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x18, 0xc, 0x1b, 0x2, 0x5, 0x2, 0x48, 0x48, 0x60, 0x36, 0x2, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x4, 0x3}, {0x5, 0x1}, {0x0, 0x4}, {0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x2}, {0x6, 0x7}, {0x7, 0x6}, {0x0, 0x4}, {}, {0x4, 0x7}, {0x5, 0x3}, {0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {0x2, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x1e}, {0x7, 0x2}, {0x2, 0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x7}, {0x4, 0xa}, {0x3, 0x9}, {0x3}, {0x6, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x485, 0x7ff, 0x7, 0x0, 0x5, 0x2d03]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x9}, {0x2, 0x7}, {0x6, 0x2}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x1}, {0x7}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x2, 0x6}, {}, {0x3, 0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x5}, {0x3, 0x8}, {}, {0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x5}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {}, {0x1, 0x7}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x1}, {0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x4, 0x800, 0x9646, 0x9, 0x4, 0x3ff]}}]}]}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x16, 0xc, 0xb, 0x2, 0x18, 0x6c, 0xc, 0x48, 0x60, 0x1b, 0x36, 0x3, 0x16, 0x3, 0x1b, 0x60]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x5, 0x60, 0xc, 0x4, 0x3, 0x6c, 0x12, 0x12, 0x9, 0x24, 0x6c, 0x12, 0x10, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x16, 0x4, 0x16, 0x36, 0x4, 0x5, 0x5]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x5, 0x0, 0xffff, 0xe664, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xc, 0x2, 0x1, 0x5, 0x8, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8a, 0x40, 0x6, 0x6, 0x2800, 0x7, 0x6, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x7, 0x57, 0x7, 0x1a, 0x200, 0x3]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x5}, {0x3, 0xa}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x6, 0x1}, {0x6, 0x6}, {0x4}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x2}, {0x6, 0x4}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x8}, {0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x5, 0x6, 0x2, 0x2, 0x12, 0x24, 0x2fa4fde29ed64dd2, 0xc, 0xc, 0x18, 0xb, 0x36, 0x9, 0x48, 0x24, 0x5, 0x5, 0x6c, 0x36, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff01, 0x7, 0x1ff, 0x5, 0x6, 0x0, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x4, 0x0, 0x4, 0x11d, 0x401, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x14}]}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x131, 0x7f, [@perr={0x84, 0xe2, {0x5c, 0xe, [{{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x42}, {{}, @broadcast, 0x7, @void, 0x11}, {{}, @device_b, 0x9, @void, 0xa}, {{0x0, 0x1}, @device_a, 0xe46, @value=@broadcast, 0x35}, {{}, @device_b, 0x90c4, @void, 0xa}, {{}, @device_b, 0x0, @void, 0x13}, {{}, @broadcast, 0x4, @void, 0x30}, {{}, @broadcast, 0x0, @void, 0xa}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x4}, {{}, @device_b, 0x428e023, @void, 0x3}, {{0x0, 0x1}, @device_a, 0xd06, @value, 0x41}, {{0x0, 0x1}, @device_b, 0xb, @value=@device_b, 0xe}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x37}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x23}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xae, 0x9}}, @random={0xa, 0x41, "3dfb248619630d33ebb7d762656f3151748870e53c01f6f82d6233a8e7206520d366e430f1cb7b292aa8edb2b1780521f9d0566222adaa273a461774dbaadbba62"}]}, @NL80211_ATTR_BEACON_HEAD={0x66, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @random="30c058888682", {0x4}}, 0x9, @default, 0x4008, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x5}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x8, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x76}}, @void, [{0xdd, 0x19, "8c27ddf26f2be37300a8a717d3eef6c67f1e0ac47c20e53aeb"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x194, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xc9, 0x2, "1749a253b98118a6233fef0cca4118be3120df2e9425fb8415368ecdb7fe5cef708f8ce5929976065e5b3a4a4b3aaf249043169533f54d592d7bb029250836ed6788fcfd8eab8291f0b3cc576adecf1cca228747e4f7d5c4a32ee23492d6e50e9ff5b804232ad0a24a52b65fef11dcb25f732d22b794fff62ec8c685456debc8dea3742eef5406f48d3827955fe963acc88bb9aafc1b0a8b2099de8f5c5f1504b35caa8f37aea425c50465cc4cdcbbaedf63e7cdec34617e2142e57d27ddc81e5abe1f09fd"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb7, 0x3, "3758c79b2442075f91af4bc1488ef6de0676f758ea94bc316f60096f2a88813642afd0a75c2349ad1d766c9f0bc4c0d58a4d00f8e712e5ecc40ac4bb2dbdacda19ae5016c4bbce8a9e025fdba044cb894cd29eaa9a8442c8e29c4017809d2169c3c022aa09fc6f2644fb515396320e8bbd88475e363df3504980eaccb0bf9dad019dae781c29687ff42bf1de2b791019ed2bd0c3ff0d969eb0718de588761c34032e622d47304c9fe03f6a42447df42d70c187"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x13a, 0x80, [@random_vendor={0xdd, 0x99, "2d9662979e1c513e3a4c79216412809c2c19ea87fd25d691cc5e57d436c1a43bd91ac217c4d100820a4139da3e9614d03cd873093b97223d928d45aa43ab531a0b05f319e0237c65cb83a2f6894f9a8d6b4994644bd5fd48e36540e33ca41656bedb68407d2fa46ffc5b20d319a96e2a1166bf61dd62e3eba36d682f1d6ef0215da0af40bc2124a3ea14bd521b151b8262cc67d2e1af8d6c65"}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x7, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x401, 0x3, 0x5c}}, @dsss={0x3, 0x1, 0xb2}, @mesh_chsw={0x76, 0x6, {0x1, 0x10, 0x32, 0x8000}}, @random_vendor={0xdd, 0x72, "a55a975ec76cc72e9f6f0caae6ff4f1da97c96f216e2692eaeb33bf88e3b21d2eeaa28f578dc1f14b6c4479e569b4d47e5ce58d0f7b1d307be1fac82dcaee04da2f8909e16cacbb5db0a2c0fffe297be9e16fc2d088565613253e8659f41c7f4249bfa7a220de8cb0c30195fc53622c2362c"}]}, @NL80211_ATTR_BEACON_TAIL={0xb9, 0xf, [@tim={0x5, 0x8c, {0xf, 0x1e, 0x4, "6365ff41ef08e36d32e0f2c4c9126e06171efdd632ea1eb7f4e670a3d734333cd21a940c55bfc77b16bc13d42f79ac36d9632cc67a35ebe8931004c31d4fa41e2f5ef06abe9851e4ddcdf4b4ef81d8de1338e8cf6073eeedaf1c27c8aa0dab944d0dfe012d83ce4ca2ae2b74c7c009a7e90593669ae280db93643e68764bfb8f73f0db07d04c758a41"}}, @perr={0x84, 0x2, {0x6}}, @measure_req={0x26, 0x19, {0x2, 0x4, 0x9, "693fbf87c1b32d156a3af5d14c84784cc89d5c1f1206"}}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x535}]}, 0x910}, 0x1, 0x0, 0x0, 0x15}, 0x20000045) 2.885639927s ago: executing program 4 (id=4801): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6465636f6465732069b9be"], 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1be, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) unshare(0xe060400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x36e5456f) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) unshare(0x460f0580) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, r7, 0x0, r5}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf5}, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x3}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x5, 0x0, @opaque="e9"}}}}}}, 0x0) 2.763324786s ago: executing program 6 (id=4802): socket$nl_audit(0x10, 0x3, 0x9) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES32=r0], 0x30}, 0x4) 2.40943772s ago: executing program 6 (id=4803): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000", @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYBLOB="81857db0fb3d82fe34b2933c9a5c96effe18fce779976f3b1c5c3245ba72e7ba45bd4cfb5e32294713a4dca768e13edd24654f546dd34b50414c5607ba0cf3c2cc92601642005eafe8a7d6c377c788395919d6796c1969144988f95d05d8a4d14219ae642924ca5f2d751ade22936dc68cdd17638372d8fab4954659e2b3b8d61ba7333e7ceb97fc2b218b7158c5ea77bdd17ccc3ae23c1ede2877fbb8040d86cc0d5fd5871fd725ed0d7c"], &(0x7f00000004c0)='syzkaller\x00', 0xc, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000080"], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x19bf, 0x0, 0x8, 0x4, 0x5, 0x6, 0x3, 0x2, 0x9, 0x8, 0x93cb, 0x3, 0x2, 0x3, 0x401, 0x4, 0x3ff, 0xc, 0x3, 0x0, 0x8000, 0xff}}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000440)={@local, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000400)={0x7, 0x30000, 0x100, 0x8, 0x100, 0x52, 0x0, 0x2, 0x2, 0x42b, 0x2, 0x25, &(0x7f0000000480)=[0x1, 0xfffffffe], 0x2, &(0x7f0000000380)="783a6eb718078447ada9af76f800d1b4c71b2c8060bba9d511a0b2e6c99e0334502048efa58a4cc550ece3498962b77232bd55e8ff2c63dc736995caf5e8afaaa141ce428a5177ae5e42a3e8bdfc85579193f29bcdab14d1e3dd830126179fba5d6df907be811cec5d103a2362e7c087e0a9f17f6a1c", 0x76}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800bb87d7370000950000009500000000040000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="619ff1e3ce57950204527ad3c7c5", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.409250411s ago: executing program 5 (id=4804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) 2.333728245s ago: executing program 2 (id=4805): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @host, 0x0, 0x2, 0x5e, 0x1000000000000005, 0x30, 0x2, 0xffbffffc}) 2.283562608s ago: executing program 4 (id=4806): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8100}}, './file0\x00'}) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x1000000, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 2.143858473s ago: executing program 5 (id=4807): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000069f74a20b810b41b6534010203010902240001000010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000003c0)={0x20, 0x0, 0x1, "f0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x6, 0x5, "2be9171a1d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0x7d, &(0x7f00000007c0)=ANY=[@ANYBLOB="120110030000000882058d0040000102030109026b0003010950040904000000010100000a240106000a000201020904010000010200000904010101010200000b"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f0000000080)="5faa6ceb8728df538cd34db60a74642c23d79ea01b201e97d67a688b79d33694c8caeaaf105a0e2d8196bde1208d1cd0ec103ce7c11e8ec8d9bb2635c174a57967b8bbd077df29ca89366ae3096cdf19dff4ede6df5ff4f58d438e350c9b05616076aa4ec6d73bba6b6ef754aa6a1168", 0x70) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000180)) syz_usb_control_io$rtl8150(r2, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x40, 0x23, 0xf5, {0xf5, 0x10, "d7aa380f8c81b2f4be140722584523e9aec60d2da34d97573e321e50a47c882f535b9110ffb1a8e5e85aa4c0fad8026ba24ed9f7bb9781ae2990ddbdd8e370f71f52a2b343b223398916430328cf904e4dfb6ee8f472d1ad745e779667c0b739be69e42342f1e6e5a8cac41ea83e1c605fa5acccd4dcdb393eebae92d93e43a9af989019ee9be390edc91df5bf7c7934f39ae511e490db16af5aef8da7d6b50083ebc487a3ec05a7d5664de4b5758bfd7d1ac6bb615ef96c3e9702728e65db539e32000935da5eb4f4784dbb3bfb208579728afdb91c3ba38c9640ad231cdaeb727b74622d347231807b756af45560c13e0a0d"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x20, 0xc, 0xf3, "4d1e301433db8a7b953cb5dcb4d839fa891f8c6394915150fc8a40d4536a00635b9bd75f4618c5a304cb61142c1d46945d7b2f78b773f84567d157fd4830152a9332da9d367b6d63fb69dddff9bbe54ef618c27cf594e6e75228043df551c24f4a4b6d24614bdb4373c9161ba9613f6f5da0e8209ba3845d89eea70dfac6ae1621df4e0880468611358af510567eaa7d57116d6be6293625b6f980365db3aba48559b8a74d4dae9ca7a02db44673724f0805c92322312e93d4e40a079e371a0bcae4f3677656ff61b3915d13972d2d0c79fed01596e591b564acfe4da91fc68407eab3e6a56e2ebadabc0b0097454f3d7159f3"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0xc0, 0x5, 0x5, "294bc941ca"}, &(0x7f0000000640)={0x40, 0x5, 0x3, "6b4ef9"}}) 2.064283129s ago: executing program 7 (id=4808): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="9e", 0x1}], 0x1, 0x9a9, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000180)={0x8, r4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x3, 0x371724, 0x8}) 1.885096419s ago: executing program 6 (id=4809): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0), 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000001000), 0xa36793b7d6d8eb41, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x41021, &(0x7f0000000280)=ANY=[]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000fc0)={'vxcan1\x00', @local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) prlimit64(r1, 0x2, &(0x7f0000001040)={0x7fffffff}, &(0x7f0000001080)) socket(0x11, 0x3, 0x0) 1.339631386s ago: executing program 6 (id=4810): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.335157991s ago: executing program 7 (id=4811): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 1.334931766s ago: executing program 4 (id=4812): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, 0x0, 0x10044880) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = open(0x0, 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.245489023s ago: executing program 7 (id=4813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x8c0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x48800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d03, &(0x7f0000002180)) 0s ago: executing program 7 (id=4814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, 0x0, 0x8c0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x48800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d03, &(0x7f0000002180)) kernel console output (not intermixed with test programs): 38][T20030] fuse: Unknown parameter '0x0000000000000007' [ 1095.957028][T20038] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4396'. [ 1096.269541][T20046] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1096.539870][T19846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.529173][ T7685] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1097.658962][T19846] team0: Port device team_slave_0 added [ 1097.677167][ T7685] usb 6-1: Using ep0 maxpacket: 32 [ 1097.680247][ T7685] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1097.683804][ T7685] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1097.683829][ T7685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.683847][ T7685] usb 6-1: Product: ㆭ墳謭䤴ᛧ믟㟧Ꭼ啓쀅åŸã„䉋葔૱䒮삔뤎យ貢Ќ盡ᩂ茞뭒ä€ë’±ä¯á¯†ãœ‹éªã€â¾™î—“ᵤ茡廙撀ᄺîµä¡ˆå—œä‚‹è¥å±¹í‡¨ïµ…䦡骯ᙽ듪æ˜áŸ»é¨†ë“’窇߱⻑×徰腖撵ᜂ৷唘슘矒⳪㥮ᇈ᛽秉餸요亰ᩪ셦ફ詾桺᷅é¶î”‰ã½„኿鱀闌鑧㉂꤆康á™ï¢«å•¤é–¾ë½ƒè¡ã“¹êŒ†ç¯šä¬¿ [ 1097.683877][ T7685] usb 6-1: Manufacturer: Њ [ 1097.683890][ T7685] usb 6-1: SerialNumber: І [ 1097.707428][T20060] FAULT_INJECTION: forcing a failure. [ 1097.707428][T20060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.707513][T20060] CPU: 1 UID: 0 PID: 20060 Comm: syz.2.4404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1097.707577][T20060] Tainted: [L]=SOFTLOCKUP [ 1097.707604][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1097.707638][T20060] Call Trace: [ 1097.707657][T20060] [ 1097.707678][T20060] dump_stack_lvl+0xe8/0x150 [ 1097.707765][T20060] should_fail_ex+0x467/0x600 [ 1097.707852][T20060] _copy_to_user+0x31/0xb0 [ 1097.707912][T20060] simple_read_from_buffer+0xe1/0x170 [ 1097.707961][T20060] proc_fail_nth_read+0x1be/0x230 [ 1097.708008][T20060] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1097.708091][T20060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.708173][T20060] ? rw_verify_area+0x250/0x4d0 [ 1097.708250][T20060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.708310][T20060] vfs_read+0x219/0xa90 [ 1097.708401][T20060] ? __pfx_vfs_read+0x10/0x10 [ 1097.708459][T20060] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1097.708538][T20060] ? lockdep_hardirqs_on+0x7a/0x110 [ 1097.708612][T20060] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1097.708693][T20060] ? mutex_lock_nested+0x152/0x1d0 [ 1097.708752][T20060] ? fdget_pos+0x252/0x320 [ 1097.708832][T20060] ksys_read+0x156/0x270 [ 1097.708913][T20060] ? __pfx_ksys_read+0x10/0x10 [ 1097.708985][T20060] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 1097.709065][T20060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.709127][T20060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.709188][T20060] do_syscall_64+0x174/0x580 [ 1097.709267][T20060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.709367][T20060] ? clear_bhb_loop+0x40/0x90 [ 1097.709435][T20060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.709480][T20060] RIP: 0033:0x7ff4d22ee68e [ 1097.709524][T20060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1097.709561][T20060] RSP: 002b:00007ff4d0585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1097.709607][T20060] RAX: ffffffffffffffda RBX: 00007ff4d05866c0 RCX: 00007ff4d22ee68e [ 1097.709642][T20060] RDX: 000000000000000f RSI: 00007ff4d05860a0 RDI: 0000000000000005 [ 1097.709675][T20060] RBP: 00007ff4d0586090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.709704][T20060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.709732][T20060] R13: 00007ff4d25b6038 R14: 00007ff4d25b5fa0 R15: 00007ffc89e8b988 [ 1097.709802][T20060] [ 1098.050317][T20062] fuse: Unknown parameter '0x0000000000000007' [ 1098.388716][T19846] team0: Port device team_slave_1 added [ 1098.477252][ T5848] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1098.643903][ T5848] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1098.643952][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.644125][ T5848] usb 7-1: Product: syz [ 1098.644217][ T5848] usb 7-1: Manufacturer: syz [ 1098.644234][ T5848] usb 7-1: SerialNumber: syz [ 1098.866279][T20081] binder: 20075:20081 ioctl c0306201 0 returned -14 [ 1099.759413][ T5848] usb 7-1: config 0 descriptor?? [ 1099.792563][T19846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.792590][T19846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.792610][T19846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.805142][ T7685] usb 6-1: found format II with max.bitrate = 7, frame size=2047 [ 1099.805216][ T7685] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1099.806001][ T7685] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1100.027309][ T5848] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1100.113182][T20084] qrtr: Invalid version 0 [ 1100.656368][T19846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.656385][T19846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.656411][T19846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.850016][ T7685] usb 6-1: USB disconnect, device number 123 [ 1100.921794][ T5848] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1100.954971][ T5848] usb 7-1: USB disconnect, device number 68 [ 1101.010572][T10415] bridge_slave_0: left allmulticast mode [ 1101.010605][T10415] bridge_slave_0: left promiscuous mode [ 1101.010973][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.254441][T12203] udevd[12203]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1101.279355][T20103] fuse: Unknown parameter '0x0000000000000007' [ 1101.497210][ T7685] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1101.787235][ T7685] usb 6-1: Using ep0 maxpacket: 16 [ 1101.827644][ T7685] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1101.827681][ T7685] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1101.827704][ T7685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.833032][ T7685] usb 6-1: config 0 descriptor?? [ 1102.471523][T20122] FAULT_INJECTION: forcing a failure. [ 1102.471523][T20122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.471569][T20122] CPU: 1 UID: 0 PID: 20122 Comm: syz.6.4426 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1102.471595][T20122] Tainted: [L]=SOFTLOCKUP [ 1102.471604][T20122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1102.471617][T20122] Call Trace: [ 1102.471628][T20122] [ 1102.471638][T20122] dump_stack_lvl+0xe8/0x150 [ 1102.471677][T20122] should_fail_ex+0x467/0x600 [ 1102.471715][T20122] _copy_to_user+0x31/0xb0 [ 1102.471742][T20122] simple_read_from_buffer+0xe1/0x170 [ 1102.471784][T20122] proc_fail_nth_read+0x1be/0x230 [ 1102.471811][T20122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.471849][T20122] ? rw_verify_area+0x250/0x4d0 [ 1102.471872][T20122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.471892][T20122] vfs_read+0x219/0xa90 [ 1102.471922][T20122] ? __pfx_vfs_read+0x10/0x10 [ 1102.471947][T20122] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1102.471977][T20122] ? lockdep_hardirqs_on+0x7a/0x110 [ 1102.472006][T20122] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1102.472032][T20122] ? mutex_lock_nested+0x152/0x1d0 [ 1102.472051][T20122] ? fdget_pos+0x252/0x320 [ 1102.472078][T20122] ksys_read+0x156/0x270 [ 1102.472103][T20122] ? __pfx_ksys_read+0x10/0x10 [ 1102.472134][T20122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.472157][T20122] do_syscall_64+0x174/0x580 [ 1102.472184][T20122] ? trace_irq_disable+0x3b/0x140 [ 1102.472202][T20122] ? clear_bhb_loop+0x40/0x90 [ 1102.472223][T20122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.472263][T20122] RIP: 0033:0x7f785a58e68e [ 1102.472282][T20122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1102.472298][T20122] RSP: 002b:00007f7858825fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1102.472317][T20122] RAX: ffffffffffffffda RBX: 00007f78588266c0 RCX: 00007f785a58e68e [ 1102.472331][T20122] RDX: 000000000000000f RSI: 00007f78588260a0 RDI: 0000000000000005 [ 1102.472342][T20122] RBP: 00007f7858826090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.472354][T20122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.472365][T20122] R13: 00007f785a856038 R14: 00007f785a855fa0 R15: 00007fff33e90318 [ 1102.472395][T20122] [ 1103.157864][T10415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.230566][T10415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.289599][T10415] bond0 (unregistering): (slave team0): Releasing backup interface [ 1103.331742][T10415] bond0 (unregistering): Released all slaves [ 1103.576775][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1103.576798][T20127] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1103.576841][T20127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1103.761005][ T7685] usbhid 6-1:0.0: can't add hid device: -71 [ 1103.761147][ T7685] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1103.855002][ T7685] usb 6-1: USB disconnect, device number 124 [ 1103.926137][T20129] fuse: Unknown parameter '0x0000000000000007' [ 1103.968403][ T36] audit: type=1326 audit(2000000771.090:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20130 comm="syz.2.4429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4d232de59 code=0x0 [ 1104.632763][T19846] hsr_slave_0: entered promiscuous mode [ 1104.640076][T19846] hsr_slave_1: entered promiscuous mode [ 1104.650518][T19846] debugfs: 'hsr0' already exists in 'hsr' [ 1104.650543][T19846] Cannot create hsr debugfs directory [ 1104.863965][T20151] binder: 20150:20151 ioctl c0306201 200000000080 returned -14 [ 1104.901746][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.901763][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.901912][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.901922][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.902009][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.902017][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.902113][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.902121][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.914961][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.914973][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.915070][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.915079][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.915166][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.915175][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.915262][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.915271][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.915357][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.915367][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.915481][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.915490][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.915577][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.915586][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.915673][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.915682][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.918862][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.918885][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.919115][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.919140][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.922742][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.922752][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.922840][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.922849][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.922938][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.922947][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923039][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923048][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923134][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923143][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923244][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923253][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923338][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923346][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923444][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923453][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923539][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923547][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923634][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923643][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923730][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923738][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923835][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923844][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.923955][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.923965][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.924066][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.924077][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.954864][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.954886][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.955115][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.955139][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.955342][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.955361][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.955587][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.955617][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.955830][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.955848][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1104.956079][T20152] binder: BINDER_SET_CONTEXT_MGR already set [ 1104.992328][T20152] binder: 20150:20152 ioctl 4018620d 200000000040 returned -16 [ 1105.477284][T20157] FAULT_INJECTION: forcing a failure. [ 1105.477284][T20157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.477313][T20157] CPU: 0 UID: 0 PID: 20157 Comm: syz.5.4436 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1105.477335][T20157] Tainted: [L]=SOFTLOCKUP [ 1105.477350][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1105.477360][T20157] Call Trace: [ 1105.477366][T20157] [ 1105.477373][T20157] dump_stack_lvl+0xe8/0x150 [ 1105.477404][T20157] should_fail_ex+0x467/0x600 [ 1105.477430][T20157] _copy_from_user+0x2d/0xb0 [ 1105.477448][T20157] video_usercopy+0x359/0x1430 [ 1105.477473][T20157] ? smk_tskacc+0x2fb/0x370 [ 1105.477495][T20157] ? __pfx___video_do_ioctl+0x10/0x10 [ 1105.477516][T20157] ? __pfx_video_usercopy+0x10/0x10 [ 1105.477533][T20157] ? smack_file_ioctl+0x2c2/0x360 [ 1105.477567][T20157] ? __fget_files+0x2a/0x420 [ 1105.477582][T20157] ? __fget_files+0x3a8/0x420 [ 1105.477617][T20157] v4l2_ioctl+0x190/0x1e0 [ 1105.477637][T20157] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1105.477656][T20157] __se_sys_ioctl+0xff/0x170 [ 1105.477677][T20157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.477695][T20157] do_syscall_64+0x174/0x580 [ 1105.477718][T20157] ? trace_irq_disable+0x3b/0x140 [ 1105.477735][T20157] ? clear_bhb_loop+0x40/0x90 [ 1105.477755][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.477776][T20157] RIP: 0033:0x7f396a04de59 [ 1105.477792][T20157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.477806][T20157] RSP: 002b:00007f39682a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.477824][T20157] RAX: ffffffffffffffda RBX: 00007f396a2d5fa0 RCX: 00007f396a04de59 [ 1105.477837][T20157] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 1105.477849][T20157] RBP: 00007f39682a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.477859][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.477869][T20157] R13: 00007f396a2d6038 R14: 00007f396a2d5fa0 R15: 00007ffc25e9cf68 [ 1105.477894][T20157] [ 1106.486366][T20181] fuse: Unknown parameter '0x0000000000000007' [ 1107.278912][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1108.606713][T20215] fuse: Unknown parameter '0x0000000000000007' [ 1108.867381][T20225] FAULT_INJECTION: forcing a failure. [ 1108.867381][T20225] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.867416][T20225] CPU: 1 UID: 0 PID: 20225 Comm: syz.5.4456 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1108.867442][T20225] Tainted: [L]=SOFTLOCKUP [ 1108.867450][T20225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.867461][T20225] Call Trace: [ 1108.867469][T20225] [ 1108.867477][T20225] dump_stack_lvl+0xe8/0x150 [ 1108.867513][T20225] should_fail_ex+0x467/0x600 [ 1108.867547][T20225] should_failslab+0xa8/0x100 [ 1108.867571][T20225] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1108.867592][T20225] ? __se_sys_mount+0x166/0x420 [ 1108.867610][T20225] ? __se_sys_mount+0x166/0x420 [ 1108.867629][T20225] ? memdup_user+0x99/0xd0 [ 1108.867658][T20225] __se_sys_mount+0x166/0x420 [ 1108.867682][T20225] ? __pfx___se_sys_mount+0x10/0x10 [ 1108.867707][T20225] ? __x64_sys_mount+0x20/0xc0 [ 1108.867726][T20225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.867747][T20225] do_syscall_64+0x174/0x580 [ 1108.867773][T20225] ? trace_irq_disable+0x3b/0x140 [ 1108.867792][T20225] ? clear_bhb_loop+0x40/0x90 [ 1108.867816][T20225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.867836][T20225] RIP: 0033:0x7f396a04de59 [ 1108.867855][T20225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.867874][T20225] RSP: 002b:00007f39682a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1108.867894][T20225] RAX: ffffffffffffffda RBX: 00007f396a2d5fa0 RCX: 00007f396a04de59 [ 1108.867908][T20225] RDX: 0000200000000000 RSI: 0000200000000500 RDI: 0000000000000000 [ 1108.867921][T20225] RBP: 00007f39682a6090 R08: 0000200000000040 R09: 0000000000000000 [ 1108.867934][T20225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.867945][T20225] R13: 00007f396a2d6038 R14: 00007f396a2d5fa0 R15: 00007ffc25e9cf68 [ 1108.867974][T20225] [ 1109.176343][T20233] FAULT_INJECTION: forcing a failure. [ 1109.176343][T20233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.176378][T20233] CPU: 1 UID: 0 PID: 20233 Comm: syz.7.4459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1109.176404][T20233] Tainted: [L]=SOFTLOCKUP [ 1109.176410][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1109.176427][T20233] Call Trace: [ 1109.176435][T20233] [ 1109.176443][T20233] dump_stack_lvl+0xe8/0x150 [ 1109.176478][T20233] should_fail_ex+0x467/0x600 [ 1109.176511][T20233] _copy_from_user+0x2d/0xb0 [ 1109.176533][T20233] map_update_elem+0x4e0/0x9d0 [ 1109.176562][T20233] __sys_bpf+0xb06/0xd90 [ 1109.176588][T20233] ? __pfx___sys_bpf+0x10/0x10 [ 1109.176611][T20233] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.176644][T20233] ? rt_mutex_slowunlock+0x219/0x460 [ 1109.176681][T20233] ? ksys_write+0x248/0x270 [ 1109.176708][T20233] ? __pfx_ksys_write+0x10/0x10 [ 1109.176735][T20233] __x64_sys_bpf+0xba/0xd0 [ 1109.176765][T20233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.176786][T20233] do_syscall_64+0x174/0x580 [ 1109.176813][T20233] ? trace_irq_disable+0x3b/0x140 [ 1109.176831][T20233] ? clear_bhb_loop+0x40/0x90 [ 1109.176854][T20233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.176874][T20233] RIP: 0033:0x7f3f6b85de59 [ 1109.176892][T20233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.176908][T20233] RSP: 002b:00007f3f69ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1109.176926][T20233] RAX: ffffffffffffffda RBX: 00007f3f6bae5fa0 RCX: 00007f3f6b85de59 [ 1109.176940][T20233] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 1109.176951][T20233] RBP: 00007f3f69ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.176962][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.176973][T20233] R13: 00007f3f6bae6038 R14: 00007f3f6bae5fa0 R15: 00007ffdaee18328 [ 1109.177000][T20233] [ 1109.756065][ T7685] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1109.907209][ T7685] usb 3-1: Using ep0 maxpacket: 32 [ 1109.909312][ T7685] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1109.909335][ T7685] usb 3-1: config 0 has no interface number 0 [ 1109.909376][ T7685] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1109.909401][ T7685] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1109.912845][ T7685] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1109.912871][ T7685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.912890][ T7685] usb 3-1: Product: syz [ 1109.912903][ T7685] usb 3-1: Manufacturer: syz [ 1109.912917][ T7685] usb 3-1: SerialNumber: syz [ 1109.994438][ T7685] usb 3-1: config 0 descriptor?? [ 1110.183723][T20253] binder: 20248:20253 ioctl c0306201 0 returned -14 [ 1110.200679][ T7685] appletouch 3-1:0.85: Failed to read mode from device. [ 1110.200928][ T7685] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1110.500368][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1110.693439][T20255] usb usb8: usbfs: process 20255 (syz.2.4460) did not claim interface 0 before use [ 1110.861557][T20257] fuse: Unknown parameter 'fd0x0000000000000007' [ 1111.007470][T10415] hsr_slave_0: left promiscuous mode [ 1111.047865][T10415] hsr_slave_1: left promiscuous mode [ 1111.048835][T10415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.048938][T10415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.108219][T10415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.108243][T10415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.278981][T10415] veth1_macvtap: left promiscuous mode [ 1111.279075][T10415] veth0_macvtap: left promiscuous mode [ 1111.279314][T10415] veth1_vlan: left promiscuous mode [ 1111.279490][T10415] veth0_vlan: left promiscuous mode [ 1112.644169][ T7685] usb 3-1: USB disconnect, device number 94 [ 1112.840032][T20286] fuse: Unknown parameter 'fd0x0000000000000007' [ 1113.856003][T20297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4477'. [ 1114.188548][T10415] team0 (unregistering): Port device team_slave_1 removed [ 1114.227807][T10415] team0 (unregistering): Port device team_slave_0 removed [ 1114.542524][T20302] FAULT_INJECTION: forcing a failure. [ 1114.542524][T20302] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.542558][T20302] CPU: 0 UID: 0 PID: 20302 Comm: syz.5.4480 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1114.542584][T20302] Tainted: [L]=SOFTLOCKUP [ 1114.542591][T20302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.542603][T20302] Call Trace: [ 1114.542611][T20302] [ 1114.542620][T20302] dump_stack_lvl+0xe8/0x150 [ 1114.542656][T20302] should_fail_ex+0x467/0x600 [ 1114.542688][T20302] should_failslab+0xa8/0x100 [ 1114.542712][T20302] __kvmalloc_node_noprof+0x17a/0x8a0 [ 1114.542738][T20302] ? proc_sys_call_handler+0x3d1/0x830 [ 1114.542818][T20302] ? proc_sys_call_handler+0x3d1/0x830 [ 1114.542848][T20302] proc_sys_call_handler+0x3d1/0x830 [ 1114.542872][T20302] ? vfs_write+0x231/0xbb0 [ 1114.542900][T20302] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1114.542934][T20302] vfs_write+0x61e/0xbb0 [ 1114.542964][T20302] ? __pfx_vfs_write+0x10/0x10 [ 1114.542990][T20302] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1114.543019][T20302] ? lockdep_hardirqs_on+0x7a/0x110 [ 1114.543048][T20302] ? mutex_lock_nested+0x152/0x1d0 [ 1114.543068][T20302] ? fdget_pos+0x252/0x320 [ 1114.543096][T20302] ksys_write+0x156/0x270 [ 1114.543122][T20302] ? __pfx_ksys_write+0x10/0x10 [ 1114.543153][T20302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.543174][T20302] do_syscall_64+0x174/0x580 [ 1114.543201][T20302] ? trace_irq_disable+0x3b/0x140 [ 1114.543226][T20302] ? clear_bhb_loop+0x40/0x90 [ 1114.543250][T20302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.543270][T20302] RIP: 0033:0x7f396a04de59 [ 1114.543288][T20302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.543305][T20302] RSP: 002b:00007f39682a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1114.543325][T20302] RAX: ffffffffffffffda RBX: 00007f396a2d5fa0 RCX: 00007f396a04de59 [ 1114.543340][T20302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1114.543351][T20302] RBP: 00007f39682a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.543362][T20302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.543373][T20302] R13: 00007f396a2d6038 R14: 00007f396a2d5fa0 R15: 00007ffc25e9cf68 [ 1114.543403][T20302] [ 1115.518205][T20317] fuse: Unknown parameter 'fd0x0000000000000007' [ 1115.547178][ T42] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1115.781078][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1115.785827][ T42] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1115.785849][ T42] usb 3-1: config 0 has no interface number 0 [ 1115.785889][ T42] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.785913][ T42] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1115.829710][ T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1115.829742][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.829756][ T42] usb 3-1: Product: syz [ 1115.829766][ T42] usb 3-1: Manufacturer: syz [ 1115.829776][ T42] usb 3-1: SerialNumber: syz [ 1115.836090][ T42] usb 3-1: config 0 descriptor?? [ 1115.844433][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.844623][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.058130][ T42] appletouch 3-1:0.85: Failed to read mode from device. [ 1116.058340][ T42] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1116.495663][T20310] usb usb8: usbfs: process 20310 (syz.2.4484) did not claim interface 0 before use [ 1116.545141][ T42] usb 3-1: USB disconnect, device number 95 [ 1116.898470][ T36] audit: type=1326 audit(2000000783.990:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1116.898521][ T36] audit: type=1326 audit(2000000783.990:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1116.898621][ T36] audit: type=1326 audit(2000000783.990:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1116.898663][ T36] audit: type=1326 audit(2000000784.000:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1116.906125][ T36] audit: type=1326 audit(2000000784.010:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1116.906541][ T36] audit: type=1326 audit(2000000784.010:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1116.979197][ T36] audit: type=1326 audit(2000000784.010:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1117.160205][ T36] audit: type=1326 audit(2000000784.220:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6b85de59 code=0x7ffc0000 [ 1117.160257][ T36] audit: type=1326 audit(2000000784.220:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f6b85dbc2 code=0x7ffc0000 [ 1117.160313][ T36] audit: type=1326 audit(2000000784.220:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20340 comm="syz.7.4496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3f6b85dc57 code=0x7ffc0000 [ 1118.000304][T20373] FAULT_INJECTION: forcing a failure. [ 1118.000304][T20373] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.000328][T20373] CPU: 0 UID: 0 PID: 20373 Comm: syz.2.4502 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1118.000347][T20373] Tainted: [L]=SOFTLOCKUP [ 1118.000352][T20373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.000360][T20373] Call Trace: [ 1118.000366][T20373] [ 1118.000372][T20373] dump_stack_lvl+0xe8/0x150 [ 1118.000398][T20373] should_fail_ex+0x467/0x600 [ 1118.000421][T20373] should_failslab+0xa8/0x100 [ 1118.000439][T20373] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1118.000454][T20373] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 1118.000481][T20373] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 1118.000503][T20373] wakeup_source_sysfs_add+0x57/0x2c0 [ 1118.000524][T20373] wakeup_source_register+0x17f/0x390 [ 1118.000543][T20373] ep_modify+0x2e4/0xa60 [ 1118.000564][T20373] ? __pfx_ep_modify+0x10/0x10 [ 1118.000582][T20373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1118.000603][T20373] ? lockdep_hardirqs_on+0x7a/0x110 [ 1118.000647][T20373] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1118.000697][T20373] ? mutex_lock_nested+0x152/0x1d0 [ 1118.000719][T20373] ? do_epoll_ctl_file+0x3ff/0xf00 [ 1118.000747][T20373] do_epoll_ctl_file+0x792/0xf00 [ 1118.000781][T20373] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1118.000810][T20373] ? __fget_files+0x3a8/0x420 [ 1118.000831][T20373] ? __fget_files+0x2a/0x420 [ 1118.000861][T20373] __se_sys_epoll_ctl+0x162/0x230 [ 1118.000891][T20373] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1118.000928][T20373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.000953][T20373] do_syscall_64+0x174/0x580 [ 1118.000983][T20373] ? trace_irq_disable+0x3b/0x140 [ 1118.001005][T20373] ? clear_bhb_loop+0x40/0x90 [ 1118.001032][T20373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.001054][T20373] RIP: 0033:0x7ff4d232de59 [ 1118.001074][T20373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.001092][T20373] RSP: 002b:00007ff4d0586028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1118.001113][T20373] RAX: ffffffffffffffda RBX: 00007ff4d25b5fa0 RCX: 00007ff4d232de59 [ 1118.001127][T20373] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000004 [ 1118.001138][T20373] RBP: 00007ff4d0586090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.001150][T20373] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 1118.001163][T20373] R13: 00007ff4d25b6038 R14: 00007ff4d25b5fa0 R15: 00007ffc89e8b988 [ 1118.001195][T20373] [ 1118.477204][T11953] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1118.692058][T11953] usb 8-1: config 1 has an invalid interface number: 238 but max is 2 [ 1118.692087][T11953] usb 8-1: config 1 has an invalid interface number: 225 but max is 2 [ 1118.692106][T11953] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1118.692123][T11953] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.692141][T11953] usb 8-1: config 1 has no interface number 0 [ 1118.692156][T11953] usb 8-1: config 1 has no interface number 2 [ 1118.692223][T11953] usb 8-1: config 1 interface 1 altsetting 8 endpoint 0xD has an invalid bInterval 107, changing to 7 [ 1118.692249][T11953] usb 8-1: config 1 interface 1 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1118.692271][T11953] usb 8-1: config 1 interface 1 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1118.692309][T11953] usb 8-1: config 1 interface 238 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 1118.692345][T11953] usb 8-1: config 1 interface 225 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 1118.692366][T11953] usb 8-1: config 1 interface 225 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1118.692387][T11953] usb 8-1: config 1 interface 225 altsetting 8 endpoint 0xE has an invalid bInterval 175, changing to 7 [ 1118.692410][T11953] usb 8-1: config 1 interface 225 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1118.692435][T11953] usb 8-1: config 1 interface 1 has no altsetting 0 [ 1118.692451][T11953] usb 8-1: config 1 interface 238 has no altsetting 0 [ 1118.692467][T11953] usb 8-1: config 1 interface 225 has no altsetting 0 [ 1118.831919][T11953] usb 8-1: New USB device found, idVendor=19d2, idProduct=0199, bcdDevice=c0.a5 [ 1118.831961][T11953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.831985][T11953] usb 8-1: Product: syz [ 1118.832001][T11953] usb 8-1: Manufacturer: syz [ 1118.832016][T11953] usb 8-1: SerialNumber: syz [ 1119.999593][T20383] bond1: entered promiscuous mode [ 1119.999752][T20383] bond1: entered allmulticast mode [ 1120.000489][T20383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1120.423703][T20408] FAULT_INJECTION: forcing a failure. [ 1120.423703][T20408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.423755][T20408] CPU: 1 UID: 0 PID: 20408 Comm: syz.6.4509 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1120.423782][T20408] Tainted: [L]=SOFTLOCKUP [ 1120.423789][T20408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1120.423801][T20408] Call Trace: [ 1120.423809][T20408] [ 1120.423818][T20408] dump_stack_lvl+0xe8/0x150 [ 1120.423852][T20408] should_fail_ex+0x467/0x600 [ 1120.423886][T20408] _copy_from_user+0x2d/0xb0 [ 1120.423903][T20408] ____sys_sendmsg+0x31b/0x870 [ 1120.423931][T20408] ? __might_fault+0xaf/0x130 [ 1120.423959][T20408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1120.423987][T20408] ? import_iovec+0x73/0xa0 [ 1120.424010][T20408] ___sys_sendmsg+0x2a5/0x360 [ 1120.424027][T20408] ? __lock_acquire+0x683/0x2ce0 [ 1120.424052][T20408] ? __pfx____sys_sendmsg+0x10/0x10 [ 1120.424068][T20408] ? kstrtouint+0x6e/0xe0 [ 1120.424124][T20408] ? __fget_files+0x2a/0x420 [ 1120.424143][T20408] ? __fget_files+0x3a8/0x420 [ 1120.424170][T20408] __sys_sendmmsg+0x279/0x4d0 [ 1120.424193][T20408] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1120.424220][T20408] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1120.424245][T20408] ? ksys_write+0x248/0x270 [ 1120.424281][T20408] ? __pfx_ksys_write+0x10/0x10 [ 1120.424319][T20408] __x64_sys_sendmmsg+0xa0/0xc0 [ 1120.424338][T20408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.424357][T20408] do_syscall_64+0x174/0x580 [ 1120.424384][T20408] ? trace_irq_disable+0x3b/0x140 [ 1120.424398][T20408] ? clear_bhb_loop+0x40/0x90 [ 1120.424427][T20408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.424447][T20408] RIP: 0033:0x7f785a5cde59 [ 1120.424466][T20408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.424482][T20408] RSP: 002b:00007f7858826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1120.424501][T20408] RAX: ffffffffffffffda RBX: 00007f785a855fa0 RCX: 00007f785a5cde59 [ 1120.424514][T20408] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1120.424525][T20408] RBP: 00007f7858826090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.424542][T20408] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 1120.424550][T20408] R13: 00007f785a856038 R14: 00007f785a855fa0 R15: 00007fff33e90318 [ 1120.424572][T20408] [ 1121.384502][T11953] usb 8-1: USB disconnect, device number 3 [ 1122.167052][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 1122.167316][ T36] audit: type=1326 audit(2000000789.270:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.219284][ T36] audit: type=1326 audit(2000000789.320:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.219333][ T36] audit: type=1326 audit(2000000789.320:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.219370][ T36] audit: type=1326 audit(2000000789.340:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.219406][ T36] audit: type=1326 audit(2000000789.340:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.219443][ T36] audit: type=1326 audit(2000000789.340:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.222315][ T36] audit: type=1326 audit(2000000789.340:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.222352][ T36] audit: type=1326 audit(2000000789.340:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f396a00e68e code=0x7ffc0000 [ 1122.222386][ T36] audit: type=1326 audit(2000000789.340:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.222418][ T36] audit: type=1326 audit(2000000789.340:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20441 comm="syz.5.4518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396a04de59 code=0x7ffc0000 [ 1122.555823][T19846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1122.603460][T19846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1122.606417][T19846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1122.655069][T19846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1122.672467][T19846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1122.727703][T11953] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1122.808227][ T5612] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1122.815030][T19846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.820507][T19846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1122.884552][T19846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1122.886767][T11953] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 1122.886793][T11953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.886813][T11953] usb 6-1: config 0 has no interface number 0 [ 1122.886855][T11953] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1122.886883][T11953] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 204, setting to 64 [ 1122.950536][T11953] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1122.950567][T11953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.950589][T11953] usb 6-1: Product: syz [ 1122.950604][T11953] usb 6-1: Manufacturer: syz [ 1122.950620][T11953] usb 6-1: SerialNumber: syz [ 1122.967540][ T5612] usb 7-1: Using ep0 maxpacket: 8 [ 1122.995147][ T5612] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1122.995555][ T5612] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.995579][ T5612] usb 7-1: config 0 has no interface number 0 [ 1123.023102][T11953] usb 6-1: config 0 descriptor?? [ 1123.025373][T20444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1123.025666][T20444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1123.050386][ T5612] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1123.050412][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.050431][ T5612] usb 7-1: Product: syz [ 1123.050444][ T5612] usb 7-1: Manufacturer: syz [ 1123.050458][ T5612] usb 7-1: SerialNumber: syz [ 1123.092015][ T5612] usb 7-1: config 0 descriptor?? [ 1123.135163][ T5612] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1123.135198][ T5612] uvcvideo 7-1:0.31: No valid video chain found. [ 1123.269728][T11953] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1123.324823][T12620] usb 7-1: USB disconnect, device number 69 [ 1123.370340][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.374269][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.417542][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.418052][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.425867][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.457814][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.484840][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.485364][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.519940][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.520509][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.788556][T19846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.049980][T19846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.122850][T17614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.123045][T17614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.154941][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.249891][T10407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.459006][ T7975] usb 6-1: USB disconnect, device number 125 [ 1125.153368][T20494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1126.295662][T20507] syz_tun: entered allmulticast mode [ 1126.535682][T20511] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1126.535723][T20511] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1126.535741][T20511] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1127.034943][T19846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.769263][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1128.320568][T19846] veth0_vlan: entered promiscuous mode [ 1128.349164][T19846] veth1_vlan: entered promiscuous mode [ 1128.383152][T19846] veth0_macvtap: entered promiscuous mode [ 1128.394202][T19846] veth1_macvtap: entered promiscuous mode [ 1128.415835][T19846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.428315][T19846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.615886][T17614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.708177][T17614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.710152][T17614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.710238][T17614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.910343][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.910395][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.128439][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1131.269314][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.269334][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.452707][T20582] FAULT_INJECTION: forcing a failure. [ 1131.452707][T20582] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.452742][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.5.4548 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1131.452768][T20582] Tainted: [L]=SOFTLOCKUP [ 1131.452774][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.452786][T20582] Call Trace: [ 1131.452793][T20582] [ 1131.452802][T20582] dump_stack_lvl+0xe8/0x150 [ 1131.452839][T20582] should_fail_ex+0x467/0x600 [ 1131.452874][T20582] should_failslab+0xa8/0x100 [ 1131.452898][T20582] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1131.452931][T20582] ? alloc_vmap_area+0x21c/0x1420 [ 1131.452957][T20582] ? alloc_vmap_area+0x21c/0x1420 [ 1131.452991][T20582] alloc_vmap_area+0x21c/0x1420 [ 1131.453028][T20582] ? rcu_is_watching+0x15/0xb0 [ 1131.453071][T20582] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1131.453100][T20582] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 1131.453122][T20582] ? __get_vm_area_node+0x136/0x300 [ 1131.453149][T20582] ? __get_vm_area_node+0x136/0x300 [ 1131.453181][T20582] __get_vm_area_node+0x1f2/0x300 [ 1131.453213][T20582] __vmalloc_node_range_noprof+0x358/0x1730 [ 1131.453244][T20582] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1131.453271][T20582] ? is_bpf_text_address+0x26/0x2b0 [ 1131.453309][T20582] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1131.453339][T20582] ? is_bpf_text_address+0x26/0x2b0 [ 1131.453363][T20582] ? kernel_text_address+0xa5/0xe0 [ 1131.453388][T20582] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1131.453406][T20582] __vmalloc_noprof+0xd2/0x120 [ 1131.453435][T20582] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1131.453458][T20582] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1131.453477][T20582] ? bpf_prog_alloc+0x2a/0x1a0 [ 1131.453499][T20582] bpf_prog_alloc+0x3c/0x1a0 [ 1131.453521][T20582] bpf_prog_load+0x7f8/0x1c00 [ 1131.453554][T20582] ? __pfx_bpf_prog_load+0x10/0x10 [ 1131.453597][T20582] __sys_bpf+0xd0d/0xd90 [ 1131.453623][T20582] ? __pfx___sys_bpf+0x10/0x10 [ 1131.453645][T20582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1131.453678][T20582] ? rt_mutex_slowunlock+0x219/0x460 [ 1131.453715][T20582] ? ksys_write+0x248/0x270 [ 1131.453740][T20582] ? __pfx_ksys_write+0x10/0x10 [ 1131.453768][T20582] __x64_sys_bpf+0xba/0xd0 [ 1131.453798][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.453819][T20582] do_syscall_64+0x174/0x580 [ 1131.453843][T20582] ? trace_irq_disable+0x3b/0x140 [ 1131.453862][T20582] ? clear_bhb_loop+0x40/0x90 [ 1131.453886][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.453905][T20582] RIP: 0033:0x7f396a04de59 [ 1131.453924][T20582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.453942][T20582] RSP: 002b:00007f39682a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.453962][T20582] RAX: ffffffffffffffda RBX: 00007f396a2d5fa0 RCX: 00007f396a04de59 [ 1131.453976][T20582] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1131.453988][T20582] RBP: 00007f39682a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.453999][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.454010][T20582] R13: 00007f396a2d6038 R14: 00007f396a2d5fa0 R15: 00007ffc25e9cf68 [ 1131.454045][T20582] [ 1131.462083][T20582] syz.5.4548: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1131.462266][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.5.4548 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1131.462339][T20582] Tainted: [L]=SOFTLOCKUP [ 1131.462358][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.462391][T20582] Call Trace: [ 1131.462410][T20582] [ 1131.462429][T20582] dump_stack_lvl+0xe8/0x150 [ 1131.462516][T20582] warn_alloc+0x24c/0x270 [ 1131.462565][T20582] ? kasan_quarantine_put+0xbb/0x1f0 [ 1131.462654][T20582] ? __pfx_warn_alloc+0x10/0x10 [ 1131.462701][T20582] ? __get_vm_area_node+0x20b/0x300 [ 1131.462735][T20582] ? __get_vm_area_node+0x20b/0x300 [ 1131.462835][T20582] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1131.462943][T20582] ? is_bpf_text_address+0x26/0x2b0 [ 1131.463041][T20582] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1131.463119][T20582] ? is_bpf_text_address+0x26/0x2b0 [ 1131.463184][T20582] ? kernel_text_address+0xa5/0xe0 [ 1131.463239][T20582] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1131.463291][T20582] __vmalloc_noprof+0xd2/0x120 [ 1131.463362][T20582] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1131.463417][T20582] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1131.463463][T20582] ? bpf_prog_alloc+0x2a/0x1a0 [ 1131.463515][T20582] bpf_prog_alloc+0x3c/0x1a0 [ 1131.463564][T20582] bpf_prog_load+0x7f8/0x1c00 [ 1131.463641][T20582] ? __pfx_bpf_prog_load+0x10/0x10 [ 1131.463742][T20582] __sys_bpf+0xd0d/0xd90 [ 1131.463812][T20582] ? __pfx___sys_bpf+0x10/0x10 [ 1131.463864][T20582] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1131.463928][T20582] ? rt_mutex_slowunlock+0x219/0x460 [ 1131.464019][T20582] ? ksys_write+0x248/0x270 [ 1131.464089][T20582] ? __pfx_ksys_write+0x10/0x10 [ 1131.464160][T20582] __x64_sys_bpf+0xba/0xd0 [ 1131.464229][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.464300][T20582] do_syscall_64+0x174/0x580 [ 1131.464363][T20582] ? trace_irq_disable+0x3b/0x140 [ 1131.464414][T20582] ? clear_bhb_loop+0x40/0x90 [ 1131.464474][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.464519][T20582] RIP: 0033:0x7f396a04de59 [ 1131.464568][T20582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.464611][T20582] RSP: 002b:00007f39682a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.464661][T20582] RAX: ffffffffffffffda RBX: 00007f396a2d5fa0 RCX: 00007f396a04de59 [ 1131.464699][T20582] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1131.464735][T20582] RBP: 00007f39682a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.464772][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.464805][T20582] R13: 00007f396a2d6038 R14: 00007f396a2d5fa0 R15: 00007ffc25e9cf68 [ 1131.464876][T20582] [ 1131.476147][T20582] Mem-Info: [ 1131.476175][T20582] active_anon:44 inactive_anon:6571 isolated_anon:0 [ 1131.476175][T20582] active_file:17332 inactive_file:2551 isolated_file:0 [ 1131.476175][T20582] unevictable:768 dirty:214 writeback:0 [ 1131.476175][T20582] slab_reclaimable:10677 slab_unreclaimable:109362 [ 1131.476175][T20582] mapped:32372 shmem:1320 pagetables:3879 [ 1131.476175][T20582] sec_pagetables:0 bounce:0 [ 1131.476175][T20582] kernel_misc_reclaimable:0 [ 1131.476175][T20582] free:1330677 free_pcp:6414 free_cma:0 [ 1131.476303][T20582] Node 0 active_anon:176kB inactive_anon:26284kB active_file:69328kB inactive_file:10060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129488kB dirty:856kB writeback:0kB shmem:3744kB kernel_stack:14108kB pagetables:15372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1131.476418][T20582] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1131.476519][T20582] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.476672][T20582] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1131.476788][T20582] Node 0 DMA32 free:1368684kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176kB inactive_anon:26284kB active_file:69328kB inactive_file:10060kB unevictable:1536kB writepending:856kB zspages:0kB present:3129332kB managed:2560792kB mlocked:0kB bounce:0kB free_pcp:25648kB local_pcp:892kB free_cma:0kB [ 1131.476935][T20582] lowmem_reserve[]: 0 0 1 1 1 [ 1131.477011][T20582] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1131.482173][T20582] lowmem_reserve[]: 0 0 0 0 0 [ 1131.482262][T20582] Node 1 Normal free:3938664kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1131.482440][T20582] lowmem_reserve[]: 0 0 0 0 0 [ 1131.482519][T20582] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1131.483623][T20582] Node 0 DMA32: 300*4kB (ME) 241*8kB (UME) 579*16kB (UME) 742*32kB (UME) 790*64kB (UME) 721*128kB (UME) 533*256kB (UME) 329*512kB (UME) 190*1024kB (UME) 23*2048kB (UME) 157*4096kB (UM) = 1368616kB [ 1131.484036][T20582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1131.484281][T20582] Node 1 Normal: 6*4kB (UM) 14*8kB (UM) 12*16kB (UM) 9*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (UM) 959*4096kB (UM) = 3938664kB [ 1131.484624][T20582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.484671][T20582] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1131.484708][T20582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1131.484746][T20582] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1131.484781][T20582] 21200 total pagecache pages [ 1131.484805][T20582] 0 pages in swap cache [ 1131.484818][T20582] Free swap = 124996kB [ 1131.491531][T20582] Total swap = 124996kB [ 1131.491557][T20582] 2097051 pages RAM [ 1131.491579][T20582] 0 pages HighMem/MovableOnly [ 1131.491600][T20582] 424773 pages reserved [ 1131.491621][T20582] 0 pages cma reserved [ 1133.134785][T20603] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1133.559210][T19801] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1133.707184][T19801] usb 8-1: Using ep0 maxpacket: 8 [ 1133.709222][T19801] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1133.709246][T19801] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.709270][T19801] usb 8-1: config 0 has no interface number 0 [ 1133.712650][T19801] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1133.712675][T19801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.712694][T19801] usb 8-1: Product: syz [ 1133.712706][T19801] usb 8-1: Manufacturer: syz [ 1133.712720][T19801] usb 8-1: SerialNumber: syz [ 1133.803907][T19801] usb 8-1: config 0 descriptor?? [ 1133.846040][T19801] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1133.846068][T19801] uvcvideo 8-1:0.31: No valid video chain found. [ 1134.003194][T13132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1134.040762][T13132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1134.044769][T13132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1134.053485][T13132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1134.054367][T13132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1134.138262][ T7975] usb 8-1: USB disconnect, device number 4 [ 1134.802440][T20620] kvm: kvm [20619]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x1800 [ 1134.822453][T20620] kvm: kvm [20619]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 1134.954976][ T5743] IPVS: starting estimator thread 0... [ 1135.047469][T20632] IPVS: using max 10 ests per chain, 24000 per kthread [ 1136.187045][T20646] binder: 20645:20646 ioctl c0306201 2000000001c0 returned -14 [ 1136.267361][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4563'. [ 1136.327364][T13132] Bluetooth: hci3: command tx timeout [ 1136.697404][ T7685] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1136.769217][T20657] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4571'. [ 1136.853360][ T7685] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1136.853391][ T7685] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.853425][ T7685] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1136.853446][ T7685] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.911698][ T7685] usb 8-1: config 0 descriptor?? [ 1136.919214][T20661] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1137.317279][ T5333] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1137.384836][T10407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.384869][T10407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.488327][ T5333] usb 5-1: Using ep0 maxpacket: 16 [ 1137.493546][ T5333] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1137.493571][ T5333] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1137.493591][ T5333] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1137.493608][ T5333] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1137.493627][ T5333] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1137.493646][ T5333] usb 5-1: config 0 has no interface number 0 [ 1137.493687][ T5333] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1137.493713][ T5333] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1137.493733][ T5333] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1137.493765][ T5333] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1137.493789][ T5333] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1137.493806][ T5333] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1137.496724][ T7685] elan 0003:04F3:0755.0028: unknown main item tag 0x0 [ 1137.496751][ T7685] elan 0003:04F3:0755.0028: unknown main item tag 0x0 [ 1137.504138][ T7685] elan 0003:04F3:0755.0028: failed to start in urb: -90 [ 1137.566320][ T5333] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1137.566345][ T5333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.566363][ T5333] usb 5-1: Product: syz [ 1137.566376][ T5333] usb 5-1: Manufacturer: syz [ 1137.566389][ T5333] usb 5-1: SerialNumber: syz [ 1137.682237][ T5333] usb 5-1: config 0 descriptor?? [ 1137.688558][ T7685] elan 0003:04F3:0755.0028: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1137.695292][T20668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.708043][T20668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.407857][T13132] Bluetooth: hci3: command tx timeout [ 1138.440732][ T5333] usb 5-1: selecting invalid altsetting 2 [ 1138.706956][T20668] bond2: entered allmulticast mode [ 1138.713641][T20668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1140.054977][ T5333] get_1284_register timeout [ 1140.103077][ C1] usb 5-1: async_complete: urb error -104 [ 1140.487176][T13132] Bluetooth: hci3: command tx timeout [ 1140.630646][ T5612] usb 8-1: USB disconnect, device number 5 [ 1141.030405][T20702] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1141.150377][T20703] dlm: non-version read from control device 4096 [ 1142.176872][ T7685] usb 5-1: USB disconnect, device number 120 [ 1142.243549][T10407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.243581][T10407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.567143][T13132] Bluetooth: hci3: command tx timeout [ 1142.890384][T20721] FAULT_INJECTION: forcing a failure. [ 1142.890384][T20721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.890419][T20721] CPU: 0 UID: 0 PID: 20721 Comm: syz.6.4591 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1142.890445][T20721] Tainted: [L]=SOFTLOCKUP [ 1142.890453][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1142.890465][T20721] Call Trace: [ 1142.890473][T20721] [ 1142.890481][T20721] dump_stack_lvl+0xe8/0x150 [ 1142.890517][T20721] should_fail_ex+0x467/0x600 [ 1142.890550][T20721] _copy_from_user+0x2d/0xb0 [ 1142.890573][T20721] io_sqe_files_register+0x2ae/0x7d0 [ 1142.890614][T20721] ? __pfx_io_sqe_files_register+0x10/0x10 [ 1142.890647][T20721] ? lockdep_hardirqs_on+0x7a/0x110 [ 1142.890676][T20721] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1142.890725][T20721] ? mutex_lock_nested+0x152/0x1d0 [ 1142.890748][T20721] ? __se_sys_io_uring_register+0x221/0x1a20 [ 1142.890776][T20721] __se_sys_io_uring_register+0x11da/0x1a20 [ 1142.890808][T20721] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1142.890837][T20721] ? ksys_write+0x248/0x270 [ 1142.890869][T20721] ? __pfx_ksys_write+0x10/0x10 [ 1142.890906][T20721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.890933][T20721] do_syscall_64+0x174/0x580 [ 1142.890966][T20721] ? trace_irq_disable+0x3b/0x140 [ 1142.890987][T20721] ? clear_bhb_loop+0x40/0x90 [ 1142.891016][T20721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.891040][T20721] RIP: 0033:0x7f785a5cde59 [ 1142.891062][T20721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.891083][T20721] RSP: 002b:00007f7858826028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1142.891114][T20721] RAX: ffffffffffffffda RBX: 00007f785a855fa0 RCX: 00007f785a5cde59 [ 1142.891129][T20721] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000004 [ 1142.891143][T20721] RBP: 00007f7858826090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.891156][T20721] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 1142.891169][T20721] R13: 00007f785a856038 R14: 00007f785a855fa0 R15: 00007fff33e90318 [ 1142.891205][T20721] [ 1143.792202][T20725] FAULT_INJECTION: forcing a failure. [ 1143.792202][T20725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.792237][T20725] CPU: 0 UID: 0 PID: 20725 Comm: syz.7.4589 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1143.792263][T20725] Tainted: [L]=SOFTLOCKUP [ 1143.792270][T20725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1143.792282][T20725] Call Trace: [ 1143.792290][T20725] [ 1143.792299][T20725] dump_stack_lvl+0xe8/0x150 [ 1143.792333][T20725] should_fail_ex+0x467/0x600 [ 1143.792366][T20725] _copy_from_user+0x2d/0xb0 [ 1143.792392][T20725] do_pagemap_cmd+0x13d/0xc50 [ 1143.792496][T20725] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 1143.792545][T20725] ? __fget_files+0x2a/0x420 [ 1143.792564][T20725] ? __fget_files+0x3a8/0x420 [ 1143.792581][T20725] ? __fget_files+0x2a/0x420 [ 1143.792603][T20725] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1143.792634][T20725] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 1143.792670][T20725] __se_sys_ioctl+0xff/0x170 [ 1143.792695][T20725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.792717][T20725] do_syscall_64+0x174/0x580 [ 1143.792745][T20725] ? trace_irq_disable+0x3b/0x140 [ 1143.792763][T20725] ? clear_bhb_loop+0x40/0x90 [ 1143.792788][T20725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.792807][T20725] RIP: 0033:0x7f3f6b85de59 [ 1143.792826][T20725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.792842][T20725] RSP: 002b:00007f3f69a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1143.792861][T20725] RAX: ffffffffffffffda RBX: 00007f3f6bae6090 RCX: 00007f3f6b85de59 [ 1143.792875][T20725] RDX: 0000200000000440 RSI: 00000000c0606610 RDI: 0000000000000004 [ 1143.792886][T20725] RBP: 00007f3f69a95090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.792898][T20725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.792909][T20725] R13: 00007f3f6bae6128 R14: 00007f3f6bae6090 R15: 00007ffdaee18328 [ 1143.792938][T20725] [ 1144.111057][T10407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.111095][T10407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.146716][T20727] binder: 20726:20727 ioctl c018620c 200000000240 returned -22 [ 1144.350076][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1144.608816][T20735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4595'. [ 1145.328469][T10407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.328503][T10407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.614772][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'. [ 1145.875738][T20612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.876013][T20612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.876191][T20612] bridge_slave_0: entered allmulticast mode [ 1146.119660][T20612] bridge_slave_0: entered promiscuous mode [ 1146.124431][T20612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.124566][T20612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.124763][T20612] bridge_slave_1: entered allmulticast mode [ 1146.268773][T20612] bridge_slave_1: entered promiscuous mode [ 1146.396448][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4604'. [ 1146.952873][T20612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.972680][T20612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.151846][T20612] team0: Port device team_slave_0 added [ 1147.218259][T20612] team0: Port device team_slave_1 added [ 1147.377005][T20612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.377023][T20612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.377052][T20612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.536431][T20775] dlm: non-version read from control device 4096 [ 1147.586169][T20612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.586651][T20612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.586828][T20612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.221130][T20778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.494423][T20789] qrtr: Invalid version 4 [ 1148.630431][T20792] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1148.648442][ T5612] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1148.759247][T20612] hsr_slave_0: entered promiscuous mode [ 1148.760177][T20612] hsr_slave_1: entered promiscuous mode [ 1148.760814][T20612] debugfs: 'hsr0' already exists in 'hsr' [ 1148.760857][T20612] Cannot create hsr debugfs directory [ 1148.809752][ T5612] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1148.809778][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.809796][ T5612] usb 5-1: Product: syz [ 1148.809809][ T5612] usb 5-1: Manufacturer: syz [ 1148.809822][ T5612] usb 5-1: SerialNumber: syz [ 1148.853045][ T5612] usb 5-1: config 0 descriptor?? [ 1148.872174][ T5612] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1149.250937][T13132] Bluetooth: hci1: command 0x0406 tx timeout [ 1149.585951][ T5743] usb 5-1: USB disconnect, device number 121 [ 1149.889155][T10407] macvlan4: left allmulticast mode [ 1149.889176][T10407] ip6gretap0: left allmulticast mode [ 1149.889533][T10407] macvlan4: left promiscuous mode [ 1149.889940][T10407] bridge0: port 3(macvlan4) entered disabled state [ 1149.997118][T20813] dlm: non-version read from control device 4096 [ 1150.848252][T10407] bridge_slave_1: left allmulticast mode [ 1150.848275][T10407] bridge_slave_1: left promiscuous mode [ 1150.848466][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.999935][T10407] bridge_slave_0: left allmulticast mode [ 1150.999968][T10407] bridge_slave_0: left promiscuous mode [ 1151.000181][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.218782][T20834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4629'. [ 1152.607228][T19801] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1152.758412][T19801] usb 8-1: Using ep0 maxpacket: 8 [ 1152.760145][T19801] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1152.760166][T19801] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.760184][T19801] usb 8-1: config 0 has no interface number 0 [ 1152.762623][T19801] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1152.762647][T19801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.762665][T19801] usb 8-1: Product: syz [ 1152.762687][T19801] usb 8-1: Manufacturer: syz [ 1152.762697][T19801] usb 8-1: SerialNumber: syz [ 1152.768401][T19801] usb 8-1: config 0 descriptor?? [ 1152.842553][T19801] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1152.842744][T19801] uvcvideo 8-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1152.843299][T19801] uvcvideo 8-1:0.31: Failed to create links for entity 32774 [ 1152.843317][T19801] uvcvideo 8-1:0.31: Failed to register entities (-22). [ 1153.026652][T19801] usb 8-1: USB disconnect, device number 6 [ 1153.357934][T10407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.418071][T10407] bond0 (unregistering): (slave 4@0Ùÿÿ): Releasing backup interface [ 1153.464543][T10407] bond0 (unregistering): Released all slaves [ 1153.491561][T10407] bond1 (unregistering): Released all slaves [ 1153.528130][T10407] bond2 (unregistering): Released all slaves [ 1153.861873][T20863] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4639'. [ 1154.275580][ T42] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1154.343314][T20871] FAULT_INJECTION: forcing a failure. [ 1154.343314][T20871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.345200][T20871] CPU: 0 UID: 0 PID: 20871 Comm: syz.6.4642 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1154.345226][T20871] Tainted: [L]=SOFTLOCKUP [ 1154.345233][T20871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1154.345243][T20871] Call Trace: [ 1154.345250][T20871] [ 1154.345257][T20871] dump_stack_lvl+0xe8/0x150 [ 1154.345290][T20871] should_fail_ex+0x467/0x600 [ 1154.345316][T20871] _copy_from_user+0x2d/0xb0 [ 1154.345333][T20871] do_sys_poll+0x258/0xf50 [ 1154.345360][T20871] ? __lock_acquire+0x683/0x2ce0 [ 1154.345379][T20871] ? __pfx_do_sys_poll+0x10/0x10 [ 1154.345399][T20871] ? is_bpf_text_address+0x26/0x2b0 [ 1154.345419][T20871] ? kernel_text_address+0xa5/0xe0 [ 1154.345433][T20871] ? __kernel_text_address+0xd/0x30 [ 1154.345501][T20871] ? ktime_get_ts64+0xa9/0x410 [ 1154.345534][T20871] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1154.345559][T20871] __x64_sys_poll+0x190/0x360 [ 1154.345585][T20871] ? __pfx___x64_sys_poll+0x10/0x10 [ 1154.345611][T20871] ? __secure_computing+0xe7/0x2b0 [ 1154.345631][T20871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.345649][T20871] do_syscall_64+0x174/0x580 [ 1154.345673][T20871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.345688][T20871] ? clear_bhb_loop+0x40/0x90 [ 1154.345707][T20871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.345722][T20871] RIP: 0033:0x7f785a5cde59 [ 1154.345738][T20871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.345753][T20871] RSP: 002b:00007f7858805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1154.345770][T20871] RAX: ffffffffffffffda RBX: 00007f785a856090 RCX: 00007f785a5cde59 [ 1154.345782][T20871] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 1154.345794][T20871] RBP: 00007f7858805090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.345805][T20871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.345814][T20871] R13: 00007f785a856128 R14: 00007f785a856090 R15: 00007fff33e90318 [ 1154.345836][T20871] [ 1154.487232][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1154.489055][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1154.489093][ T42] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1154.489116][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.520352][ T42] usb 3-1: config 0 descriptor?? [ 1155.247164][T11953] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1155.467191][T11953] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1155.467227][T11953] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.467265][T11953] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1155.467290][T11953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.512427][T11953] usb 8-1: config 0 descriptor?? [ 1156.146897][T20905] 9p: Bad value for 'rfdno' [ 1156.893304][T11953] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1156.893338][T11953] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1156.915412][T11953] elan 0003:04F3:0755.0029: failed to start in urb: -90 [ 1156.928323][T20907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.928769][T20907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.933524][T11953] elan 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1157.254866][T20879] bond3: entered allmulticast mode [ 1157.255274][T20879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1157.294129][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1157.343165][ T7685] usb 8-1: USB disconnect, device number 7 [ 1158.317854][T20955] FAULT_INJECTION: forcing a failure. [ 1158.317854][T20955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.317891][T20955] CPU: 1 UID: 0 PID: 20955 Comm: syz.4.4658 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1158.317918][T20955] Tainted: [L]=SOFTLOCKUP [ 1158.317926][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1158.317938][T20955] Call Trace: [ 1158.317946][T20955] [ 1158.317955][T20955] dump_stack_lvl+0xe8/0x150 [ 1158.317990][T20955] should_fail_ex+0x467/0x600 [ 1158.318022][T20955] _copy_from_user+0x2d/0xb0 [ 1158.318044][T20955] do_handle_open+0x573/0xae0 [ 1158.318157][T20955] ? __pfx_do_handle_open+0x10/0x10 [ 1158.318185][T20955] ? ksys_write+0x248/0x270 [ 1158.318210][T20955] ? __pfx_ksys_write+0x10/0x10 [ 1158.318240][T20955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.318261][T20955] do_syscall_64+0x174/0x580 [ 1158.318289][T20955] ? trace_irq_disable+0x3b/0x140 [ 1158.318307][T20955] ? clear_bhb_loop+0x40/0x90 [ 1158.318331][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.318349][T20955] RIP: 0033:0x7f8170fdde59 [ 1158.318368][T20955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.318384][T20955] RSP: 002b:00007f816f236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1158.318404][T20955] RAX: ffffffffffffffda RBX: 00007f8171265fa0 RCX: 00007f8170fdde59 [ 1158.318418][T20955] RDX: 0000000000400040 RSI: 0000200000000900 RDI: 0000000000000003 [ 1158.318430][T20955] RBP: 00007f816f236090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.318441][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.318452][T20955] R13: 00007f8171266038 R14: 00007f8171265fa0 R15: 00007ffec7f2c8f8 [ 1158.318481][T20955] [ 1158.542930][T10407] hsr_slave_0: left promiscuous mode [ 1158.578137][T10407] hsr_slave_1: left promiscuous mode [ 1158.579091][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.579115][T10407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.729827][T10407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.729850][T10407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.869049][T10407] veth1_macvtap: left promiscuous mode [ 1158.869152][T10407] veth0_macvtap: left promiscuous mode [ 1158.870529][T10407] veth1_vlan: left promiscuous mode [ 1158.870647][T10407] veth0_vlan: left promiscuous mode [ 1158.920907][T11953] usb 3-1: USB disconnect, device number 96 [ 1159.263690][T20973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4662'. [ 1159.569204][T20976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4663'. [ 1159.701798][T20979] netlink: 292 bytes leftover after parsing attributes in process `syz.7.4664'. [ 1161.178990][T10407] team0 (unregistering): Port device team_slave_1 removed [ 1161.238450][T10407] team0 (unregistering): Port device team_slave_0 removed [ 1161.704152][T21003] dlm: non-version read from control device 4096 [ 1162.207822][ T42] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1162.377176][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1162.379593][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1162.379641][ T42] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1162.379661][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.420727][ T42] usb 3-1: config 0 descriptor?? [ 1162.813110][ T7685] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1162.940155][T21018] loop5: detected capacity change from 0 to 7 [ 1162.986347][T21018] Dev loop5: unable to read RDB block 7 [ 1162.986397][T21018] loop5: unable to read partition table [ 1162.986570][T21018] loop5: partition table beyond EOD, truncated [ 1162.986618][T21018] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1163.024858][ T7685] usb 8-1: Using ep0 maxpacket: 16 [ 1163.032063][ T7685] usb 8-1: config 3 has an invalid interface number: 20 but max is 0 [ 1163.032091][ T7685] usb 8-1: config 3 has no interface number 0 [ 1163.032160][ T7685] usb 8-1: config 3 interface 20 has no altsetting 0 [ 1163.055983][ T7685] usb 8-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 1163.056008][ T7685] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.056025][ T7685] usb 8-1: Product: syz [ 1163.056038][ T7685] usb 8-1: Manufacturer: syz [ 1163.056050][ T7685] usb 8-1: SerialNumber: syz [ 1164.036125][ T7685] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:3.20/input/input28 [ 1164.040975][ T4952] bcm5974 8-1:3.20: could not read from device [ 1164.156039][ T7685] usb 8-1: USB disconnect, device number 8 [ 1164.436859][T21045] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1165.439753][T11953] usb 3-1: USB disconnect, device number 97 [ 1165.505005][T10407] IPVS: stop unused estimator thread 0... [ 1165.629615][T21067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1165.637238][ T7685] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1165.765153][T20612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1165.802450][ T7685] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1165.802477][ T7685] usb 8-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 1165.802495][ T7685] usb 8-1: config 220 has no interface number 2 [ 1165.802567][ T7685] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1165.802593][ T7685] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1165.802610][ T7685] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1165.802627][ T7685] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1165.811828][ T7685] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1165.811903][ T7685] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.811952][ T7685] usb 8-1: Product: syz [ 1165.812229][ T7685] usb 8-1: Manufacturer: syz [ 1165.812285][ T7685] usb 8-1: SerialNumber: syz [ 1166.008076][T20612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1166.025366][T20612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1166.213587][T21081] FAULT_INJECTION: forcing a failure. [ 1166.213587][T21081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.213623][T21081] CPU: 1 UID: 0 PID: 21081 Comm: syz.2.4687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1166.213652][T21081] Tainted: [L]=SOFTLOCKUP [ 1166.213660][T21081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1166.213672][T21081] Call Trace: [ 1166.213681][T21081] [ 1166.213690][T21081] dump_stack_lvl+0xe8/0x150 [ 1166.213731][T21081] should_fail_ex+0x467/0x600 [ 1166.213767][T21081] _copy_from_user+0x2d/0xb0 [ 1166.213791][T21081] drm_ioctl+0x61c/0xba0 [ 1166.213827][T21081] ? __pfx_drm_mode_getplane+0x10/0x10 [ 1166.213931][T21081] ? __pfx_drm_ioctl+0x10/0x10 [ 1166.213970][T21081] ? __fget_files+0x2a/0x420 [ 1166.213996][T21081] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1166.214027][T21081] ? __pfx_drm_ioctl+0x10/0x10 [ 1166.214063][T21081] __se_sys_ioctl+0xff/0x170 [ 1166.214092][T21081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.214123][T21081] do_syscall_64+0x174/0x580 [ 1166.214151][T21081] ? trace_irq_disable+0x3b/0x140 [ 1166.214170][T21081] ? clear_bhb_loop+0x40/0x90 [ 1166.214195][T21081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.214214][T21081] RIP: 0033:0x7ff4d232de59 [ 1166.214233][T21081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.214250][T21081] RSP: 002b:00007ff4d0586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.214272][T21081] RAX: ffffffffffffffda RBX: 00007ff4d25b5fa0 RCX: 00007ff4d232de59 [ 1166.214285][T21081] RDX: 00002000000001c0 RSI: 00000000c02064b6 RDI: 0000000000000003 [ 1166.214297][T21081] RBP: 00007ff4d0586090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.214308][T21081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.214319][T21081] R13: 00007ff4d25b6038 R14: 00007ff4d25b5fa0 R15: 00007ffc89e8b988 [ 1166.214348][T21081] [ 1166.549379][T20612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1166.559077][T20612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1166.583356][ T7685] usb 8-1: selecting invalid altsetting 0 [ 1166.583802][ T7685] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1166.583828][ T7685] uvcvideo 8-1:220.0: No valid video chain found. [ 1166.670220][ T7685] usb 8-1: selecting invalid altsetting 0 [ 1166.670244][ T7685] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1166.711638][T20612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1166.714206][ T7685] usb 8-1: USB disconnect, device number 9 [ 1166.725423][T20612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1166.761314][T20612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.114491][T20612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.183088][T20612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.266744][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.274439][T10142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.303459][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.303577][T10142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.768239][T21103] dlm: non-version read from control device 4096 [ 1169.387223][ T7975] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1169.538474][ T7975] usb 7-1: Using ep0 maxpacket: 32 [ 1169.542846][ T7975] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1169.542892][ T7975] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1169.542914][ T7975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.587627][ T7975] usb 7-1: config 0 descriptor?? [ 1170.337395][T11953] usb 7-1: USB disconnect, device number 70 [ 1170.899583][T20612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.386241][T21158] FAULT_INJECTION: forcing a failure. [ 1171.386241][T21158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.386281][T21158] CPU: 0 UID: 0 PID: 21158 Comm: syz.7.4701 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1171.386312][T21158] Tainted: [L]=SOFTLOCKUP [ 1171.386321][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1171.386334][T21158] Call Trace: [ 1171.386344][T21158] [ 1171.386354][T21158] dump_stack_lvl+0xe8/0x150 [ 1171.386396][T21158] should_fail_ex+0x467/0x600 [ 1171.386436][T21158] prepare_alloc_pages+0x223/0x690 [ 1171.386470][T21158] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1171.386501][T21158] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1171.386532][T21158] ? __pfx_policy_nodemask+0x10/0x10 [ 1171.386561][T21158] ? __lock_acquire+0x683/0x2ce0 [ 1171.386593][T21158] alloc_pages_mpol+0xce/0x280 [ 1171.386625][T21158] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1171.386657][T21158] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1171.386689][T21158] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1171.386718][T21158] ? __pte_offset_map+0x29/0x200 [ 1171.386761][T21158] do_pte_missing+0x835/0x28f0 [ 1171.386824][T21158] ? handle_mm_fault+0xe8/0x13f0 [ 1171.386860][T21158] handle_mm_fault+0xd28/0x13f0 [ 1171.386897][T21158] ? handle_mm_fault+0xe8/0x13f0 [ 1171.386929][T21158] ? __pfx_handle_mm_fault+0x10/0x10 [ 1171.386973][T21158] ? __lock_acquire+0x683/0x2ce0 [ 1171.386997][T21158] ? lock_mm_and_find_vma+0xa7/0x340 [ 1171.387022][T21158] do_user_addr_fault+0x744/0x1340 [ 1171.387069][T21158] exc_page_fault+0x6a/0xc0 [ 1171.387098][T21158] asm_exc_page_fault+0x26/0x30 [ 1171.387118][T21158] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 1171.387141][T21158] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 1171.387158][T21158] RSP: 0018:ffffc9000456fa58 EFLAGS: 00050206 [ 1171.387177][T21158] RAX: ffffffff84bf7a32 RBX: ffff888032e7e000 RCX: 0000000000000006 [ 1171.387191][T21158] RDX: 0000000000000000 RSI: ffff888032e7e000 RDI: 0000200000001780 [ 1171.387205][T21158] RBP: ffffc9000456fbd8 R08: ffff888032e7e005 R09: 1ffff110065cfc00 [ 1171.387219][T21158] R10: dffffc0000000000 R11: ffffed10065cfc01 R12: 1ffff920008adfaf [ 1171.387234][T21158] R13: 0000200000001780 R14: ffffc9000456fd88 R15: 0000000000000006 [ 1171.387256][T21158] ? _copy_to_iter+0x162/0x1810 [ 1171.387293][T21158] _copy_to_iter+0x255/0x1810 [ 1171.387329][T21158] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1171.387357][T21158] ? lockdep_hardirqs_on+0x7a/0x110 [ 1171.387386][T21158] ? rt_mutex_slowunlock+0x219/0x460 [ 1171.387407][T21158] ? __pfx__copy_to_iter+0x10/0x10 [ 1171.387436][T21158] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1171.387463][T21158] ? seq_read_iter+0xa48/0xcb0 [ 1171.387495][T21158] seq_read_iter+0xaaf/0xcb0 [ 1171.387536][T21158] vfs_read+0x59e/0xa90 [ 1171.387567][T21158] ? __pfx_vfs_read+0x10/0x10 [ 1171.387592][T21158] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1171.387619][T21158] ? lockdep_hardirqs_on+0x7a/0x110 [ 1171.387647][T21158] ? mutex_lock_nested+0x152/0x1d0 [ 1171.387667][T21158] ? fdget_pos+0x252/0x320 [ 1171.387694][T21158] ksys_read+0x156/0x270 [ 1171.387720][T21158] ? __pfx_ksys_read+0x10/0x10 [ 1171.387751][T21158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.387772][T21158] do_syscall_64+0x174/0x580 [ 1171.387812][T21158] ? trace_irq_disable+0x3b/0x140 [ 1171.387830][T21158] ? clear_bhb_loop+0x40/0x90 [ 1171.387855][T21158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.387874][T21158] RIP: 0033:0x7f3f6b85de59 [ 1171.387892][T21158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.387908][T21158] RSP: 002b:00007f3f69ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1171.387928][T21158] RAX: ffffffffffffffda RBX: 00007f3f6bae5fa0 RCX: 00007f3f6b85de59 [ 1171.387940][T21158] RDX: 0000000000002020 RSI: 0000200000001780 RDI: 0000000000000003 [ 1171.387952][T21158] RBP: 00007f3f69ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.387963][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.387974][T21158] R13: 00007f3f6bae6038 R14: 00007f3f6bae5fa0 R15: 00007ffdaee18328 [ 1171.388003][T21158] [ 1172.255427][T13132] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1172.257524][ T5612] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1172.567503][ T5612] usb 5-1: Using ep0 maxpacket: 32 [ 1172.569475][ T5612] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1172.569512][ T5612] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1172.569534][ T5612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.610649][ T5612] usb 5-1: config 0 descriptor?? [ 1172.703797][T20612] veth0_vlan: entered promiscuous mode [ 1172.757319][T20612] veth1_vlan: entered promiscuous mode [ 1172.841937][T20612] veth0_macvtap: entered promiscuous mode [ 1172.936947][T20612] veth1_macvtap: entered promiscuous mode [ 1173.034682][T20612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.069486][T20612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.244714][T16689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.244758][T16689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.244791][T16689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.244837][T16689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.174668][T13132] Bluetooth: hci0: command 0x0406 tx timeout [ 1174.807794][T21202] ipvlan1: mtu less than device minimum [ 1174.977146][T11953] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1175.005999][T10415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.006037][T10415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.177134][T11953] usb 8-1: Using ep0 maxpacket: 8 [ 1175.180819][T11953] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.180848][T11953] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 1175.180874][T11953] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1175.180906][T11953] usb 8-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 1175.180927][T11953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.241147][T11953] usb 8-1: config 0 descriptor?? [ 1175.452613][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4716'. [ 1175.593121][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.593141][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.043432][T11953] usbhid 8-1:0.0: can't add hid device: -71 [ 1176.043547][T11953] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1176.068018][T11953] usb 8-1: USB disconnect, device number 10 [ 1176.377227][ T7975] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1176.450519][ T5612] usb 5-1: USB disconnect, device number 122 [ 1176.518141][T12620] usb 7-1: new low-speed USB device number 71 using dummy_hcd [ 1176.540093][T21224] FAULT_INJECTION: forcing a failure. [ 1176.540093][T21224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.540126][T21224] CPU: 1 UID: 0 PID: 21224 Comm: syz.4.4723 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1176.540151][T21224] Tainted: [L]=SOFTLOCKUP [ 1176.540158][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1176.540169][T21224] Call Trace: [ 1176.540177][T21224] [ 1176.540185][T21224] dump_stack_lvl+0xe8/0x150 [ 1176.540225][T21224] should_fail_ex+0x467/0x600 [ 1176.540258][T21224] _copy_to_user+0x31/0xb0 [ 1176.540282][T21224] simple_read_from_buffer+0xe1/0x170 [ 1176.540308][T21224] proc_fail_nth_read+0x1be/0x230 [ 1176.540331][T21224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1176.540355][T21224] ? rw_verify_area+0x250/0x4d0 [ 1176.540381][T21224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1176.540408][T21224] vfs_read+0x219/0xa90 [ 1176.540445][T21224] ? __pfx_vfs_read+0x10/0x10 [ 1176.540470][T21224] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1176.540497][T21224] ? lockdep_hardirqs_on+0x7a/0x110 [ 1176.540523][T21224] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1176.540550][T21224] ? mutex_lock_nested+0x152/0x1d0 [ 1176.540571][T21224] ? fdget_pos+0x252/0x320 [ 1176.540599][T21224] ksys_read+0x156/0x270 [ 1176.540623][T21224] ? __pfx_ksys_read+0x10/0x10 [ 1176.540654][T21224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.540676][T21224] do_syscall_64+0x174/0x580 [ 1176.540701][T21224] ? trace_irq_disable+0x3b/0x140 [ 1176.540720][T21224] ? clear_bhb_loop+0x40/0x90 [ 1176.540744][T21224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.540763][T21224] RIP: 0033:0x7f8170f9e68e [ 1176.540781][T21224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1176.540799][T21224] RSP: 002b:00007f816f235fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1176.540818][T21224] RAX: ffffffffffffffda RBX: 00007f816f2366c0 RCX: 00007f8170f9e68e [ 1176.540832][T21224] RDX: 000000000000000f RSI: 00007f816f2360a0 RDI: 0000000000000005 [ 1176.540843][T21224] RBP: 00007f816f236090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.540854][T21224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.540865][T21224] R13: 00007f8171266038 R14: 00007f8171265fa0 R15: 00007ffec7f2c8f8 [ 1176.540894][T21224] [ 1176.545102][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.545128][ T7975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.545163][ T7975] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1176.545183][ T7975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.663926][ T7975] usb 6-1: config 0 descriptor?? [ 1176.707188][T12620] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1176.707216][T12620] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1176.707248][T12620] usb 7-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1176.707269][T12620] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.080675][T12620] usb 7-1: config 0 descriptor?? [ 1177.081856][T21222] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1177.230999][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.231041][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.306910][T21222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.316855][T21222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.387228][ T5612] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1177.391665][T21206] syz.2.4717 (21206): drop_caches: 1 [ 1177.539174][ T5612] usb 5-1: Using ep0 maxpacket: 32 [ 1177.544308][ T5612] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1177.545622][ T5612] usb 5-1: config 3 has an invalid interface number: 249 but max is 0 [ 1177.545644][ T5612] usb 5-1: config 3 has no interface number 0 [ 1177.545685][ T5612] usb 5-1: config 3 interface 249 altsetting 2 endpoint 0x1 has an invalid bInterval 47, changing to 9 [ 1177.545712][ T5612] usb 5-1: config 3 interface 249 has no altsetting 0 [ 1177.610140][ T5612] usb 5-1: New USB device found, idVendor=168c, idProduct=0002, bcdDevice=4f.f4 [ 1177.610165][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.610184][ T5612] usb 5-1: Product: syz [ 1177.610197][ T5612] usb 5-1: Manufacturer: syz [ 1177.610210][ T5612] usb 5-1: SerialNumber: syz [ 1177.713561][T12620] usbhid 7-1:0.0: can't add hid device: -71 [ 1177.713720][T12620] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1177.768173][T12620] usb 7-1: USB disconnect, device number 71 [ 1177.961593][T21238] comedi comedi0: unsupported base address 0x294 [ 1178.400889][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4730'. [ 1179.084552][ T7975] hid-led 0003:27B8:01ED.002A: probe with driver hid-led failed with error -71 [ 1179.108174][ T7975] usb 6-1: USB disconnect, device number 126 [ 1179.334699][ T5612] usb 5-1: Could not find all expected endpoints [ 1179.370553][ T5612] usb 5-1: USB disconnect, device number 123 [ 1179.395393][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4733'. [ 1179.577221][T21255] kvm: emulating exchange as write [ 1179.621547][T21264] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1179.676259][T21261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1179.687688][T21266] program syz.4.4738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.807215][ T7975] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1179.997206][ T7975] usb 8-1: Using ep0 maxpacket: 32 [ 1179.999092][ T7975] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1179.999115][ T7975] usb 8-1: config 0 has no interface number 0 [ 1179.999154][ T7975] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.999178][ T7975] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1180.002552][ T7975] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1180.002578][ T7975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.002597][ T7975] usb 8-1: Product: syz [ 1180.002610][ T7975] usb 8-1: Manufacturer: syz [ 1180.002684][ T7975] usb 8-1: SerialNumber: syz [ 1180.025006][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1180.093381][ T7975] usb 8-1: config 0 descriptor?? [ 1180.311876][ T7975] appletouch 8-1:0.85: Failed to read mode from device. [ 1180.312085][ T7975] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 1181.031941][T21301] FAULT_INJECTION: forcing a failure. [ 1181.031941][T21301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.031975][T21301] CPU: 0 UID: 0 PID: 21301 Comm: syz.6.4751 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1181.032002][T21301] Tainted: [L]=SOFTLOCKUP [ 1181.032009][T21301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.032022][T21301] Call Trace: [ 1181.032030][T21301] [ 1181.032039][T21301] dump_stack_lvl+0xe8/0x150 [ 1181.032075][T21301] should_fail_ex+0x467/0x600 [ 1181.032117][T21301] _copy_to_user+0x31/0xb0 [ 1181.032141][T21301] mptcp_getsockopt+0xba1/0x1ed0 [ 1181.032244][T21301] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1181.032280][T21301] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 1181.032338][T21301] ? __lock_acquire+0x683/0x2ce0 [ 1181.032369][T21301] ? do_raw_spin_lock+0x12b/0x2f0 [ 1181.032401][T21301] ? unwind_next_frame+0x8f/0x2550 [ 1181.032430][T21301] ? is_bpf_text_address+0x26/0x2b0 [ 1181.032462][T21301] ? __lock_acquire+0x683/0x2ce0 [ 1181.032486][T21301] ? is_bpf_text_address+0x292/0x2b0 [ 1181.032508][T21301] ? is_bpf_text_address+0x26/0x2b0 [ 1181.032534][T21301] ? kernel_text_address+0xa5/0xe0 [ 1181.032554][T21301] ? __kernel_text_address+0xd/0x30 [ 1181.032571][T21301] ? unwind_get_return_address+0x4d/0x90 [ 1181.032592][T21301] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1181.032630][T21301] ? __lock_acquire+0x683/0x2ce0 [ 1181.032654][T21301] ? _parse_integer_limit+0x192/0x1e0 [ 1181.032690][T21301] ? __lock_acquire+0x683/0x2ce0 [ 1181.032712][T21301] ? kstrtouint+0x6e/0xe0 [ 1181.032739][T21301] ? get_pid_task+0x20/0x1f0 [ 1181.032771][T21301] ? __lock_acquire+0x683/0x2ce0 [ 1181.032799][T21301] ? __might_fault+0xaf/0x130 [ 1181.032821][T21301] ? __might_fault+0xaf/0x130 [ 1181.032856][T21301] ? sock_common_getsockopt+0x2d/0xb0 [ 1181.032883][T21301] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1181.032909][T21301] do_sock_getsockopt+0x51d/0x7e0 [ 1181.032946][T21301] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1181.032993][T21301] ? __fget_files+0x3a8/0x420 [ 1181.033012][T21301] ? __fget_files+0x2a/0x420 [ 1181.033038][T21301] __x64_sys_getsockopt+0x1aa/0x250 [ 1181.033075][T21301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.033105][T21301] do_syscall_64+0x174/0x580 [ 1181.033133][T21301] ? trace_irq_disable+0x3b/0x140 [ 1181.033152][T21301] ? clear_bhb_loop+0x40/0x90 [ 1181.033176][T21301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.033196][T21301] RIP: 0033:0x7f785a5cde59 [ 1181.033215][T21301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.033233][T21301] RSP: 002b:00007f7858826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1181.033254][T21301] RAX: ffffffffffffffda RBX: 00007f785a855fa0 RCX: 00007f785a5cde59 [ 1181.033268][T21301] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000003 [ 1181.033279][T21301] RBP: 00007f7858826090 R08: 0000200000000000 R09: 0000000000000000 [ 1181.033292][T21301] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1181.033304][T21301] R13: 00007f785a856038 R14: 00007f785a855fa0 R15: 00007fff33e90318 [ 1181.033335][T21301] [ 1181.140171][ T7685] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1181.298382][ T7685] usb 5-1: Using ep0 maxpacket: 32 [ 1181.320197][ T7685] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1181.320236][ T7685] usb 5-1: config 0 has no interface number 0 [ 1181.333564][ T7685] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.333600][ T7685] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1181.354267][ T7685] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1181.354334][ T7685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.354364][ T7685] usb 5-1: Product: syz [ 1181.354377][ T7685] usb 5-1: Manufacturer: syz [ 1181.354392][ T7685] usb 5-1: SerialNumber: syz [ 1181.468399][ T7685] usb 5-1: config 0 descriptor?? [ 1181.671844][ T7685] appletouch 5-1:0.85: Failed to read mode from device. [ 1181.672063][ T7685] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1182.787329][T21342] FAULT_INJECTION: forcing a failure. [ 1182.787329][T21342] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.787364][T21342] CPU: 0 UID: 0 PID: 21342 Comm: syz.2.4766 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.787391][T21342] Tainted: [L]=SOFTLOCKUP [ 1182.787398][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1182.787410][T21342] Call Trace: [ 1182.787418][T21342] [ 1182.787427][T21342] dump_stack_lvl+0xe8/0x150 [ 1182.787474][T21342] should_fail_ex+0x467/0x600 [ 1182.787507][T21342] should_failslab+0xa8/0x100 [ 1182.787532][T21342] __kmalloc_noprof+0xfe/0x780 [ 1182.787553][T21342] ? video_usercopy+0x1b1/0x1430 [ 1182.787577][T21342] ? video_usercopy+0x1b1/0x1430 [ 1182.787608][T21342] video_usercopy+0x1b1/0x1430 [ 1182.787638][T21342] ? __pfx___video_do_ioctl+0x10/0x10 [ 1182.787663][T21342] ? irqentry_exit+0x218/0x8f0 [ 1182.787691][T21342] ? __pfx_video_usercopy+0x10/0x10 [ 1182.787727][T21342] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1182.787756][T21342] v4l2_ioctl+0x190/0x1e0 [ 1182.787779][T21342] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1182.787802][T21342] __se_sys_ioctl+0xff/0x170 [ 1182.787826][T21342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.787848][T21342] do_syscall_64+0x174/0x580 [ 1182.787875][T21342] ? trace_irq_disable+0x3b/0x140 [ 1182.787894][T21342] ? clear_bhb_loop+0x40/0x90 [ 1182.787918][T21342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.787938][T21342] RIP: 0033:0x7ff4d232de59 [ 1182.787956][T21342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.787973][T21342] RSP: 002b:00007ff4d0586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.787994][T21342] RAX: ffffffffffffffda RBX: 00007ff4d25b5fa0 RCX: 00007ff4d232de59 [ 1182.788007][T21342] RDX: 00002000000005c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1182.788018][T21342] RBP: 00007ff4d0586090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.788030][T21342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.788041][T21342] R13: 00007ff4d25b6038 R14: 00007ff4d25b5fa0 R15: 00007ffc89e8b988 [ 1182.788071][T21342] [ 1183.112410][T21346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4763'. [ 1185.180157][T21360] FAULT_INJECTION: forcing a failure. [ 1185.180157][T21360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.180192][T21360] CPU: 1 UID: 0 PID: 21360 Comm: syz.6.4773 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1185.180218][T21360] Tainted: [L]=SOFTLOCKUP [ 1185.180229][T21360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.180240][T21360] Call Trace: [ 1185.180248][T21360] [ 1185.180257][T21360] dump_stack_lvl+0xe8/0x150 [ 1185.180293][T21360] should_fail_ex+0x467/0x600 [ 1185.180327][T21360] strncpy_from_user+0x36/0x2c0 [ 1185.180356][T21360] path_setxattrat+0x191/0x450 [ 1185.180391][T21360] ? __pfx_path_setxattrat+0x10/0x10 [ 1185.180441][T21360] ? ksys_write+0x248/0x270 [ 1185.180467][T21360] ? __pfx_ksys_write+0x10/0x10 [ 1185.180495][T21360] __x64_sys_lsetxattr+0xbf/0xe0 [ 1185.180518][T21360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.180540][T21360] do_syscall_64+0x174/0x580 [ 1185.180568][T21360] ? trace_irq_disable+0x3b/0x140 [ 1185.180588][T21360] ? clear_bhb_loop+0x40/0x90 [ 1185.180613][T21360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.180633][T21360] RIP: 0033:0x7f785a5cde59 [ 1185.180652][T21360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.180668][T21360] RSP: 002b:00007f7858826028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1185.180688][T21360] RAX: ffffffffffffffda RBX: 00007f785a855fa0 RCX: 00007f785a5cde59 [ 1185.180701][T21360] RDX: 0000200000001d40 RSI: 0000200000001d00 RDI: 0000200000001cc0 [ 1185.180714][T21360] RBP: 00007f7858826090 R08: 0000000000000001 R09: 0000000000000000 [ 1185.180725][T21360] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 1185.180736][T21360] R13: 00007f785a856038 R14: 00007f785a855fa0 R15: 00007fff33e90318 [ 1185.180765][T21360] [ 1185.647677][T12620] usb 8-1: USB disconnect, device number 11 [ 1185.672445][ T7685] usb 5-1: USB disconnect, device number 124 [ 1185.927585][ T7975] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1186.304180][ T7975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.304206][ T7975] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1186.304250][ T7975] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1186.353196][ T7975] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1186.353223][ T7975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.353241][ T7975] usb 3-1: Product: syz [ 1186.353254][ T7975] usb 3-1: Manufacturer: syz [ 1186.353267][ T7975] usb 3-1: SerialNumber: syz [ 1186.406883][ T7975] usb 3-1: config 0 descriptor?? [ 1186.433440][ T7975] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1186.433469][ T7975] uvcvideo 3-1:0.0: No valid video chain found. [ 1186.491395][T21384] FAULT_INJECTION: forcing a failure. [ 1186.491395][T21384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1186.491427][T21384] CPU: 1 UID: 0 PID: 21384 Comm: syz.4.4782 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1186.491456][T21384] Tainted: [L]=SOFTLOCKUP [ 1186.491464][T21384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1186.491476][T21384] Call Trace: [ 1186.491484][T21384] [ 1186.491493][T21384] dump_stack_lvl+0xe8/0x150 [ 1186.491528][T21384] should_fail_ex+0x467/0x600 [ 1186.491562][T21384] prepare_alloc_pages+0x223/0x690 [ 1186.491591][T21384] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1186.491619][T21384] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1186.491646][T21384] ? __pfx_policy_nodemask+0x10/0x10 [ 1186.491670][T21384] ? __lock_acquire+0x683/0x2ce0 [ 1186.491704][T21384] alloc_pages_mpol+0xce/0x280 [ 1186.491733][T21384] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1186.491760][T21384] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1186.491786][T21384] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1186.491811][T21384] ? __pte_offset_map+0x29/0x200 [ 1186.491848][T21384] do_pte_missing+0x835/0x28f0 [ 1186.491879][T21384] ? handle_mm_fault+0xe8/0x13f0 [ 1186.491913][T21384] handle_mm_fault+0xd28/0x13f0 [ 1186.491950][T21384] ? handle_mm_fault+0xe8/0x13f0 [ 1186.491983][T21384] ? __pfx_handle_mm_fault+0x10/0x10 [ 1186.492026][T21384] ? __lock_acquire+0x683/0x2ce0 [ 1186.492051][T21384] ? lock_mm_and_find_vma+0xa7/0x340 [ 1186.492077][T21384] do_user_addr_fault+0x744/0x1340 [ 1186.492122][T21384] exc_page_fault+0x6a/0xc0 [ 1186.492151][T21384] asm_exc_page_fault+0x26/0x30 [ 1186.492171][T21384] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1186.492194][T21384] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 28 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1186.492210][T21384] RSP: 0018:ffffc9000452fc30 EFLAGS: 00050206 [ 1186.492227][T21384] RAX: ffffffff84c20a01 RBX: 0000000000000fd0 RCX: 0000000000000fd0 [ 1186.492239][T21384] RDX: 0000000000000000 RSI: ffff888021392030 RDI: 000020000001a600 [ 1186.492252][T21384] RBP: ffffc9000452fe10 R08: ffff888021392fff R09: 1ffff110042725ff [ 1186.492265][T21384] R10: dffffc0000000000 R11: ffffed1004272600 R12: 000020000001b5d0 [ 1186.492278][T21384] R13: 00007ffffffff000 R14: ffff888021392030 R15: 000020000001a600 [ 1186.492299][T21384] ? _copy_to_user+0x11/0xb0 [ 1186.492326][T21384] _copy_to_user+0x8a/0xb0 [ 1186.492349][T21384] store_msg+0x49/0x130 [ 1186.492466][T21384] do_mq_timedreceive+0x921/0xb20 [ 1186.492516][T21384] ? __pfx_do_mq_timedreceive+0x10/0x10 [ 1186.492541][T21384] ? do_sys_openat2+0x14e/0x200 [ 1186.492558][T21384] ? kmem_cache_free+0x187/0x6c0 [ 1186.492595][T21384] __x64_sys_mq_timedreceive+0x17a/0x220 [ 1186.492628][T21384] ? __pfx___x64_sys_mq_timedreceive+0x10/0x10 [ 1186.492666][T21384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.492695][T21384] do_syscall_64+0x174/0x580 [ 1186.492723][T21384] ? clear_bhb_loop+0x40/0x90 [ 1186.492748][T21384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.492767][T21384] RIP: 0033:0x7f8170fdde59 [ 1186.492785][T21384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.492801][T21384] RSP: 002b:00007f816f236028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 1186.492819][T21384] RAX: ffffffffffffffda RBX: 00007f8171265fa0 RCX: 00007f8170fdde59 [ 1186.492833][T21384] RDX: 0000000000018ff1 RSI: 000020000001a600 RDI: 0000000000000003 [ 1186.492844][T21384] RBP: 00007f816f236090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.492856][T21384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.492866][T21384] R13: 00007f8171266038 R14: 00007f8171265fa0 R15: 00007ffec7f2c8f8 [ 1186.492896][T21384] [ 1186.999516][T17152] usb 3-1: USB disconnect, device number 98 [ 1187.134923][T21390] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1187.397184][ T7685] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1187.603253][T21403] 9p: Bad value for 'rfdno' [ 1188.182589][ T7685] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1188.182617][ T7685] usb 7-1: config 220 has an invalid descriptor of length 167, skipping remainder of the config [ 1188.182637][ T7685] usb 7-1: config 220 has no interface number 2 [ 1188.182700][ T7685] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1188.182726][ T7685] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1188.182742][ T7685] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1188.182758][ T7685] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1188.248625][ T7685] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1188.248653][ T7685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.248672][ T7685] usb 7-1: Product: syz [ 1188.248769][ T7685] usb 7-1: Manufacturer: syz [ 1188.248784][ T7685] usb 7-1: SerialNumber: syz [ 1188.454624][T21405] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1188.466599][T21405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1188.535622][ T7685] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1188.535652][ T7685] uvcvideo 7-1:220.0: No valid video chain found. [ 1188.535706][ T7685] usb 7-1: selecting invalid altsetting 0 [ 1188.612873][ T7685] usb 7-1: selecting invalid altsetting 0 [ 1188.612906][ T7685] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1188.616526][ T7685] usb 7-1: USB disconnect, device number 72 [ 1190.817221][T12620] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1190.988807][T12620] usb 8-1: too many configurations: 204, using maximum allowed: 8 [ 1190.993535][T12620] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1190.993567][T12620] usb 8-1: can't read configurations, error -61 [ 1191.050072][T21436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1191.085571][T21436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.263659][T21436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.458534][T12620] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1191.971854][T12620] usb 8-1: too many configurations: 204, using maximum allowed: 8 [ 1192.057191][T12620] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1192.057225][T12620] usb 8-1: can't read configurations, error -61 [ 1192.059137][T12620] usb usb8-port1: attempt power cycle [ 1192.457260][T12620] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1192.465413][T21443] dlm: no locking on control device [ 1192.479848][T12620] usb 8-1: too many configurations: 204, using maximum allowed: 8 [ 1192.484818][T12620] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1192.484890][T12620] usb 8-1: can't read configurations, error -61 [ 1192.641261][ T36] kauditd_printk_skb: 802 callbacks suppressed [ 1192.641279][ T36] audit: type=1326 audit(2000000859.750:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.641327][ T36] audit: type=1326 audit(2000000859.750:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.642878][ T36] audit: type=1326 audit(2000000859.750:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.642924][ T36] audit: type=1326 audit(2000000859.750:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.642965][ T36] audit: type=1326 audit(2000000859.750:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.643004][ T36] audit: type=1326 audit(2000000859.750:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.643045][ T36] audit: type=1326 audit(2000000859.750:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.643088][ T36] audit: type=1326 audit(2000000859.750:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.643130][ T36] audit: type=1326 audit(2000000859.750:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.643267][ T36] audit: type=1326 audit(2000000859.750:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21444 comm="syz.4.4801" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8170fdde59 code=0x7ffc0000 [ 1192.677267][T12620] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1192.792764][T12620] usb 8-1: too many configurations: 204, using maximum allowed: 8 [ 1192.795072][T12620] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1192.795114][T12620] usb 8-1: can't read configurations, error -61 [ 1192.795722][T12620] usb usb8-port1: unable to enumerate USB device [ 1192.887710][T20134] syz_tun (unregistering): left allmulticast mode [ 1193.603148][T21463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.769431][T19801] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1193.919761][T19801] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.923007][T19801] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1193.923032][T19801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.923050][T19801] usb 6-1: Product: syz [ 1193.923064][T19801] usb 6-1: Manufacturer: syz [ 1193.923077][T19801] usb 6-1: SerialNumber: syz [ 1194.011252][T19801] usb 6-1: config 0 descriptor?? [ 1194.052229][T17614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.297222][T19801] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1194.305803][T19801] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1194.306750][T19801] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1194.306816][T19801] usb 6-1: media controller created [ 1194.309955][T19801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.398573][T19801] DVB: Unable to find symbol dib7000p_attach() [ 1194.398597][T19801] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1194.398610][T19801] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1194.404017][T19801] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1194.404059][T19801] usb 6-1: media controller created [ 1194.406442][T19801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.545823][T19801] dib0700: the master dib7090 has to be initialized first [ 1194.545836][T19801] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1195.504016][T21485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.506527][T21485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.545759][T21485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.546147][T21485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.606766][T21485] binder: 21458:21485 ioctl c00c620f 200000000180 returned -22 [ 1195.700323][T19801] rc_core: IR keymap rc-dib0700-rc5 not found [ 1195.700340][T19801] Registered IR keymap rc-empty [ 1195.700740][T19801] dvb-usb: could not initialize remote control. [ 1195.700750][T19801] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1195.834282][T19801] ================================================================== [ 1195.834295][T19801] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1195.834387][T19801] Read of size 8 at addr ffffc9001173f008 by task kworker/0:4/19801 [ 1195.834399][T19801] [ 1195.834412][T19801] CPU: 0 UID: 0 PID: 19801 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1195.834433][T19801] Tainted: [L]=SOFTLOCKUP [ 1195.834438][T19801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.834449][T19801] Workqueue: usb_hub_wq hub_event [ 1195.834506][T19801] Call Trace: [ 1195.834513][T19801] [ 1195.834519][T19801] dump_stack_lvl+0xe8/0x150 [ 1195.834553][T19801] print_address_description+0x55/0x1e0 [ 1195.834578][T19801] ? __list_add_valid_or_report+0x4e/0x130 [ 1195.834601][T19801] print_report+0x58/0x70 [ 1195.834622][T19801] kasan_report+0x117/0x150 [ 1195.834642][T19801] ? __list_add_valid_or_report+0x4e/0x130 [ 1195.834668][T19801] __list_add_valid_or_report+0x4e/0x130 [ 1195.834691][T19801] kcov_remote_stop+0x457/0x680 [ 1195.834716][T19801] hub_event+0x4789/0x4cf0 [ 1195.834756][T19801] ? __pfx_hub_event+0x10/0x10 [ 1195.834777][T19801] ? process_scheduled_works+0xa20/0x14e0 [ 1195.834796][T19801] ? rcu_is_watching+0x15/0xb0 [ 1195.834815][T19801] ? process_scheduled_works+0xa20/0x14e0 [ 1195.834835][T19801] process_scheduled_works+0xa8e/0x14e0 [ 1195.834870][T19801] ? __pfx_process_scheduled_works+0x10/0x10 [ 1195.834895][T19801] ? assign_work+0x3cf/0x5d0 [ 1195.834917][T19801] worker_thread+0xa47/0xfb0 [ 1195.834947][T19801] ? __kthread_parkme+0x71/0x1f0 [ 1195.834978][T19801] kthread+0x388/0x470 [ 1195.835005][T19801] ? __pfx_worker_thread+0x10/0x10 [ 1195.835027][T19801] ? __pfx_kthread+0x10/0x10 [ 1195.835054][T19801] ret_from_fork+0x514/0xb70 [ 1195.835086][T19801] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.835118][T19801] ? __switch_to+0xc89/0x1420 [ 1195.835182][T19801] ? __pfx_kthread+0x10/0x10 [ 1195.835210][T19801] ret_from_fork_asm+0x1a/0x30 [ 1195.835238][T19801] [ 1195.835245][T19801] [ 1195.835251][T19801] The buggy address belongs to a vmalloc virtual mapping [ 1195.835266][T19801] Memory state around the buggy address: [ 1195.835277][T19801] ffffc9001173ef00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1195.835289][T19801] ffffc9001173ef80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1195.835301][T19801] >ffffc9001173f000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1195.835310][T19801] ^ [ 1195.835320][T19801] ffffc9001173f080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1195.835335][T19801] ffffc9001173f100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1195.835342][T19801] ================================================================== [ 1195.841451][T19801] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1195.841470][T19801] CPU: 0 UID: 0 PID: 19801 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1195.841496][T19801] Tainted: [L]=SOFTLOCKUP [ 1195.841503][T19801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.841515][T19801] Workqueue: usb_hub_wq hub_event [ 1195.841554][T19801] Call Trace: [ 1195.841562][T19801] [ 1195.841570][T19801] vpanic+0x56c/0xa60 [ 1195.841594][T19801] ? __pfx_vpanic+0x10/0x10 [ 1195.841611][T19801] ? __pfx___schedule+0x10/0x10 [ 1195.841639][T19801] panic+0xc5/0xd0 [ 1195.841656][T19801] ? __pfx_panic+0x10/0x10 [ 1195.841674][T19801] ? preempt_schedule_thunk+0x16/0x40 [ 1195.841702][T19801] ? __list_add_valid_or_report+0x4e/0x130 [ 1195.841731][T19801] check_panic_on_warn+0x89/0xb0 [ 1195.841761][T19801] ? __list_add_valid_or_report+0x4e/0x130 [ 1195.841789][T19801] end_report+0x73/0x170 [ 1195.841810][T19801] ? __list_add_valid_or_report+0x4e/0x130 [ 1195.841836][T19801] kasan_report+0x128/0x150 [ 1195.841857][T19801] ? __list_add_valid_or_report+0x4e/0x130 [ 1195.841889][T19801] __list_add_valid_or_report+0x4e/0x130 [ 1195.841920][T19801] kcov_remote_stop+0x457/0x680 [ 1195.841951][T19801] hub_event+0x4789/0x4cf0 [ 1195.842001][T19801] ? __pfx_hub_event+0x10/0x10 [ 1195.842029][T19801] ? process_scheduled_works+0xa20/0x14e0 [ 1195.842054][T19801] ? rcu_is_watching+0x15/0xb0 [ 1195.842077][T19801] ? process_scheduled_works+0xa20/0x14e0 [ 1195.842097][T19801] process_scheduled_works+0xa8e/0x14e0 [ 1195.842131][T19801] ? __pfx_process_scheduled_works+0x10/0x10 [ 1195.842157][T19801] ? assign_work+0x3cf/0x5d0 [ 1195.842181][T19801] worker_thread+0xa47/0xfb0 [ 1195.842210][T19801] ? __kthread_parkme+0x71/0x1f0 [ 1195.842239][T19801] kthread+0x388/0x470 [ 1195.842266][T19801] ? __pfx_worker_thread+0x10/0x10 [ 1195.842288][T19801] ? __pfx_kthread+0x10/0x10 [ 1195.842316][T19801] ret_from_fork+0x514/0xb70 [ 1195.842346][T19801] ? __pfx_ret_from_fork+0x10/0x10 [ 1195.842373][T19801] ? __switch_to+0xc89/0x1420 [ 1195.842398][T19801] ? __pfx_kthread+0x10/0x10 [ 1195.842426][T19801] ret_from_fork_asm+0x1a/0x30 [ 1195.842453][T19801] [ 1195.843045][T19801] Kernel Offset: disabled