last executing test programs: 24.696922122s ago: executing program 3 (id=2987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000003f80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003f40)={&(0x7f0000000100)={0x3e38, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x53}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2418, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2394, 0x4, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_PATTERN={0x18, 0x2, "51f5b299e87a3b93dfe722207a1a283048fef457"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0xf2, 0x2, "eba72949d12be10228ec6f5d9877a22b62aea477f8c95ed21176ef49cfe42adb02603e2e1ce6b557b54c4e9cff9ef9f9f05ca1afee4a6ed058f513e9b606241663ab7703eeba843f7e45d4ef071bb6930457f5788aaafdd601c5d1265fbdc0f4c63a5ef250c82ad4453fb488aeb8bc7be69899437b1cc1c99466cb1f2f8a75f1908e04bda41039f427ef39497e0403a571636179ac2611542bf03388dc1f4745a09ad5c1075240f6591e35ed1db56ef28ffa4ee7688306bc36324cd5d843bb052274717abf0a8debe0d1a05fd9dfc726fbe018edd071bdc8d7c4aade26978cc4720c4d1634b1205a561b4659f971"}, @NL80211_PKTPAT_MASK={0x14, 0x1, "9ea23867e7ea0542641822b399da79be"}]}, {0x1008, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}]}, {0x124c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x5f, 0x1, "1612eb2fe2f8218184914c71c5bbf635027ad768f63914c369032c79166c92589ef739b137e1c39f8fc0eb48a0a8cf82fa91fb29043b4e3628dd8cec89f848f0d19aa6bdd5ab61765fb6cc55494f63560b8d3b0091901c6f935c7e"}, @NL80211_PKTPAT_PATTERN={0xb4, 0x2, "9d5b48615a51692ecfb3d9d59d2e87b8f4f85319a235ce14866dc4c3c2934bbdeafca4cc8f54504bf0aa8b1d230f0c369fbafbe3f96999e3315ca0b5d9f15ecb4beecc1f84d3c0365219eab30d9642755be3eea9f0eb17c4b87b8361a2e7c89e1994386a345a287713da8342e4ebec570811a804db44075e088b2929de5423d996f40fe9e89cef41ff28a5d817da6831e49bcf67a8ef4884993a8a1836cb2bff8a99e79c972050154e9fe6bc3d0a3174"}, @NL80211_PKTPAT_MASK={0xce, 0x1, "38e240294160c779a05f5a9e23adb552bbf353f1e6d4bd8965220e276ee35c201c550c0ca400385331da7333aade2b4117a7484a51109a9065daecf505a61c22e4587b54ee7de59ea69a6389a0e1799d9507548e8ee93513f80f934dbbc5f9bf2ac6e15cf559ccaf3751280ae723515370fb828704c4b9b493c1ecc1baa413eb63b565ec66083a7135fe71712d0644a51915c1367afdf04e461c819a762a9722cedb062cb43e488dbd804952a64b6a44de7c5f2d8ae257fd4ba7e3a6d87b974743b881b314dc47e9b78c"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x81}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_MASK={0x4d, 0x1, "c1685374446ecd5f34b90273649456c7ed7f0d08e973b5c153dd89b51fb27e5b2c03b19495da58f36c181cbd3a37d53e9b2dbd8485377dca11c3f4ec846bfd1fb74aac577f6fae8fe1"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x74, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x15, 0x0, @random="22573fa8a222560ef99672661ab6c3e8a2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x9, 0x0, @random="5223a9a41e"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4ac, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x44, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x49fd}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x444, 0x4, 0x0, 0x1, [{0x218, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x90, 0x1, "c2b2d35dbfc4b58b215c8b0f7d76a4583d4018e5c5fa1a319868c054657192db7780e61fd86337cb4c2b7223753e758acbc5b95d1b4527e283021c1f8520088ce01d2211c9a3a65a1becd0913c3528161070a96ae3dcbeeb0cbd8deaefd33c27bb2a0e716382e2ea4f9a6f3544e2aa52d96b2be0fa7c00ef05cf6c7dc8e486d8c1c0c9787e645dd98f3db92d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0x5a, 0x1, "14fa1a6c90f0fd54b5a99f2d3d25de45b4262033f380c180e64b6e18acf5d7dd75d4a3f1ecdc67eeeb4ccb30ea94b2995e17095979c0b40a21129562602bcd79b60cace367c9303cf68e48c83421259b29245d4ed22b"}, @NL80211_PKTPAT_MASK={0x14, 0x1, "adbb9bf3f0ee6d973d4282f0f11a75c5"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0x7d, 0x2, "a33770687a955a9b20909f3bf9526cbf4857883e79114664e9cb1c1557a9b88d4837c03c0e031e84999b26f2d07c543f237bf17573e9fe48b1ae448ea191e51abfde36c3ef0497e68d5380e715805608eff961f2004c0d9140667087173a4708d697d744684a974428586f747efb5f92acb42c3b9b4c007912"}, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "eb66990f616e5df3516fff63181274fe0a9ff06192feaf4003937612ee9e50c2c24977729b22e3d6f445048a13108da05e76a05d1f158978ace03774b93e2b7d549e77ac9c6a59295384eb523066fd21b57cc54fd146714680485b11cc05b5bf3fdaec9f895acd450be5ea8e3ae1fa890977430366"}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x67, 0x1, "fb352bfab81fccc8ac20712b3dd8f92da0c3a6f78d8b43bc4d5255031b7f7d409f551c30e7722326a8e65d52842a42c070d37f42ae94e5312c2bcbe52ec4d233aeb4d4d20bcf9d1e088a73fd1f4ea9b5feb21725bc413c7bf2e8e467794812d9b0445c"}, @NL80211_PKTPAT_MASK={0x7c, 0x1, "bc92a15c91a28390be27ac5b8b94031c671f8dd14e4c64f0a7d42ea16fa1fd899e02770ab8cb5239b23c7bbdf00201473b315b1b7004613223eee2108123e3326d1522e29e7c1c5fd7e34ad4f691d97227363761269893edd5866f742ee6775d1e1304649bf0839bc754dab9f6867af83b220cb64d25fc1a"}]}, {0x138, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x77, 0x1, "ce6c61094019b32392df651757cf2cfa641f6a552eb1335a0400430d3d01201378200e107e7690988b26869883d55903d9f56e15efbbe88bda18b2266ce1aba1272ffca3ed74ad66caeb83651315167d9a95061b34dbe59861200ff1c3104e529c22082f4317c5458fac327f8f97abc2e36599"}, @NL80211_PKTPAT_MASK={0xbb, 0x1, "61b593a83b3a406ca5f259583e991079a2e98c631ac1f453dd6a94c0072a5a4e9e2c07e84240e3100245384aada15618bc42008717497c383af9bc6239c706bd63d37158093734924e1bbd11f372895e6927bc6aeb0904ed674ae91361883053bf52f2f06b1edc6273fc72990d008b258035825c63c3b82265d3f9e3d40ac6b7f3cc6b8584982c839fb4fd6600ad5cc0741f40d47c2556e66a8e44e0355eb8ada6f0f3b8b545cd588335f3ceda916bcfbd3e6f8b91a097"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x70, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x68, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x5c, 0x8, {0x8, 0x1, "2ad5fefa087c0faeaba17f6c2a7842bffdaf79fb2caf09d7ffbb5ec783c7f615d042a472e0fa903e5beb2232f8ae5acaf8ebc60f35497714787e202b0594866d09e2845d33130e2512d5d578e6ff8273"}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x127c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x126c, 0x4, 0x0, 0x1, [{0x1268, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "1b4114b434277eaa617f09cd79d289358bde53560f588aacadb1c0616240e22f2c9422320cfa653ac2da31253395118683a7f5cdb2c0b5f347f4a3162f89ee8f6c429802734292483984e7aba4b719a88ca437c965dfec7d2e7f1cc9e1a46001dffea3b6ccaaa5a4fc5b040e020026d536e142077cf55a5ed4a0d039f9421e8ac48db8d743c61f8b04a1bacae29c1bec76591b254d1b17f179eb57061bb7b8f9516ee33cfc288f88cebab2fee2bb11cee68448fcd085b3e3cc6ed14e826c53d02e826911538b9bb86e578f10a7a51424b67b50da244bc612aa7e995507ea2ce78d19d4476e8165aa471b041890ac4412209367e9f8b4d36dab356ae7ffda57084e7792488a9e815a44a134b9330766c8a204ce77cff61bd188cc13cad5a42dd7d3b7e53c994f3c9baff2ea0b0f0497faec6e94a94955779e75bc97945ffa9bcfe956194ed7e9f5484163b1b509a2134df993fe02ed7c4780b0836dfa0d2ce76c67df96283584bb4ff02bf2b5d7e22f8682158000199062c70acf54e7e20dc6dec8024cc88c1421defd899e3739a79edefee3ce8d54691d05f593e69aff4054c993674cd4da93e86f75afde25e1ad2288b68fdd6ecd9cbf4f9c5921ebd0dd37fb8a7208023522a4068e094d2dbe86aff1774bea4fbd1023dc69f8217808023c082983fa3ff7b1a5471382e81db3fd3b56bd8c13dcc37e30114bc7872f91d26b42c1998e9499018bd32909fceeaff6f0274af3e972431adcdd4666d32d678dd15eb4691403c0460a9450a9f8195e5b1236b957151950a7754f70846bd10a9277f8e246cf9dbbd39c1325596b53a9b0e75dcd89a57c90c487a324a2581f0b58a22e8f0d48332a6b27a8ffb951e7cd9662734abb35a581bf306901b18d54f6b9115b1aa4478dfa7fca25a23bf5877df4934a86bed0fe88420869d2a19fcdc128360a2196e542d0e7b2568adc3f8a5219e8e16dca31b2b4c71017ee9178c0c942ae02865a46aa197240bcaaa16723ebf7b36ddccd7a84f8908079a75e42476fdc10747e30232d15dd9b287e24c2031424efb36245a8485b0ea21f326a8904d46bf68cc4a1c80f055306ffccfec56aeaa2a151c609965f194ce55842fb577f5a02c71eaab3043dfedfd24a35d5777bd37cb287da0543384f8758b412e9feff038b439f4f8e9f839bb651bc6a759cfb7d4ea4988c4a30c7528f41474990416b2e01b836d55fd22f1a121fcc44585b8c26712145335d841729463daf741384268cfb6e362a30f7cef5bd5be05cebbc9d598db3fdcaaf4e90e3721e3fe239d0548218c37da19f0da7e87e8a49cd8457a86fd476309d1f99d3bf176762daf7d74db7398550c004f3663670160143e04650a3f8c83017075a5f3a7c3a4b8cff884a31b2d57c70289506991a6e7e0245967cee0dbb0f574dbd789732e390bc64bec24369ed821baf1983db437e17cf11906bb1f7f4ad1ca21096abc5a3a258ede99548229d2bc4ce0bcb81be5373618f2816060af33f6a9402c24d22bb3c43564d7f7d0f85db0bd4453ae9f5cf6c37fb07b1fc3fe1012c636a6301cbc79d83f1a42dcee99165311bdec9c9dd636b51467ff0621f29022abed2154af7ef65321886c31af8d0d6ae4761455e34da8d596c2ce2829e31278e3f4947756a0ccc64c7bdc62fd1859644994d09647f8543994e8d79046a769107461b9d6c7021aeeb26a362011203063de652c33ee6c0661c2bdfa5e419adcf0cf6a9742667d917b2d0353c09b453e3d55f9455df05a1dc878187063ec4fd5b3b40271e48a1834120a21357a42418dca53d8f8d5f4a896d6dfcef11db2c4a5a4c4c61cd4aec5b6ca948d159ae60f97a08624c2908ec814e43c011d58dfb8f7af93f53035b0237fad2a4d698f2177e726f8ec2189fe84a3a60065962a36dc3e821b41ca0498c1501d7c0ffdb1df3cba6a2f47370b607ca949b495b8fcf703b576ec87af716ae36a566a9c6d9f22a3dd3b62efbd1f51c42253baa945940cc80aadbf280b1cdb6e8ec77576c2f6dc53d81b62dc3e4fdc727774101c33a15d36912e074609f99a6c6cfd4dababb7abda04bf1d97636af8b3c660747b2cad423573664c2fd7c0a7c963479a0526ba0524fd70003c59e31814735036f6d8fc9bdb21d9223ef77c8fd45841657d6091e02429efb48e70f9cd3eb50c5774a822b1b55b5fb3f104ea5c6ad63654549a64a617d0b5e3fb2973d61ee9e4def9874527791118163c287a543370d4dcc0a4288627800a38e45ed1dca813a406820c4a6ad27d6bf2c065a4b8279079e1fc89dcc91efde973a38f8e4c7a4e412672cb0d311a0e749b28a1e355aaa238184dea4b16d9c00267a93fcb5692198348ebfcce4e669a868b9f148f3b158857b89291269c5a88b7f202d69a69c231fe87e09686f4fc66ae52190c4afc564ab68e62f9123a6389b2dbe3e297dfc11181553ca1cdaa4bfcb09c4efc02e9ff06f7e8e0bccc2a4f9067dc5085bb0e409efa1a683d409d27add17494b3b093e4dabfdc0359c604f53f6b7e02c54f64d41ded2a3d0db73949449e517e5547fbe81d77669d94c952e21939c4e034f34652cc98e45eb2dc0f730890108b3d8fe1779a16f832ca129a55a667015b8a18c471fbf8ed4d2490785beb340caad8d8fa10ca1dc53bfc5e9be8acc144fba65a4d5f0e6038d30a4ca17eb3b2bf80883e43f344d2ce4c1da11cc8ca84a96dc930bb6a8ede3935a6b9f41e7953f7a7defffed64f43c0b27b2e46359d8362ad190303eebb98bd5ebcd7f2cadc9409cc076f6bb9efbe0e75a275b3af6695e589147cc7a59fff4c475ff015ffea763a8b654d8b3a177c1db2dbd47187775fa0595e4dd70c42b1913e74b99434fd4f8fd76d61299d181470dd5f1994754300bdb2e490230b68eadc0fa4a70c962336b177fc5fabd1d15b88c5f4b9814e085235c4d95dfbc24891e2933ad70ec6585559aca0dcbcb9aa66ae0b08b7f0fcf308dc6a7e55a464c7c10dd12f65fdbc3ed89608d809fd1cc351665ddf14c4924b9fb28da4a607bf2d21827d6ebe03e74850c259d602b5138562c4d347b0548224a7bdd9045e4d2de823cc5581351a2de0d0b0c1d82d643c3f5baeed5e2ce17418b2484689bba8027a45c5dd0cd600b3a18053c851d13a9458ad85473b75f6e0b45047894a43e9aa0b0620d982d39fc22401ce977c6a1769ddb84d268276c9d5f2422f7a56cbefa4cd60681a811a4b0c1e02feb4d889536f640b44325501142cfcef526671d7336b9b9005076454160b139519b9fde0f66db1e75dc521ef0a9648ff2a941fcc20cd5326983a93aef58dfe94a121c7c34d02ba3172af6f65269f2e24b5ef57bf2d5ba3b4ceeb5ba5efaede77ad802b024a7f24a3c457a7345b2d27bcdb6b484cee1b09ed9e7405186e0930ad0e17d5a08e252683cf2736b1a01d210d40f74d2c5571bc79b177af47236d124532fb68f5c5d734d05696682b9ab084e23c4aeaacaf60252ca8d38dd688dca8255d112f73cc72103f71c22b98bead84e68c0a129f20490491708f93dce4aaa363e0cfb78e472e7cd9424e7a9fac5a56cd6f87d827c4964806ede3e086954339e9f9fe7a45922ee88e22d338c75fd88f70a007c7ec780ef8115a010a47dbf0c0f6ab59d5dd9113199a15a77d27f38c91092e2e36b586866cfe3ebdb547def50c838a9fe1ab06483960e9641f05367ced9efdff6f9ecf9fb44b6ff759039a13eebe0c1350814c357014822e04e02b32af8c2a92104e0da369f0b378fea3ca7e63d934d7caf41ebf7682b3933d8656666b6661e765c162d6c71926fa0e3577f8727aa9e1c409d5ffd86a84ca3fa0442675eebfa1510d5a9da832a185fc65e7d9992afb1454e7b962c18b7a87e84268c47c6ab2f1b72722e9a3a2acd0703f8006fe4730620cc7b2b5abd964c83fe85f1952614cf51e04bc2f42492ed37384bd9d3b179f37b54c5403f1e6e44c00d1faadf5723073ba12481c64be6b2fb9397af168d34901e90280d0ac7d689586f1389041088ff5adbf879c294a63988b1cea278e6fa09a885e1f544eaa14c1248f2dd1373bfdd15bc14fc3b8917b6a8e5a01447fdc53d688b2fe339b087dc5087d20870331148dfa83fcd7d5752bf6722afb4ed7b946287316bbbf9ac7c5d568093a137d9e7d44a3ebb161e60ecd5732231454fb0c8829aab2c41d0849b8866f24d4a61d286a01a0e15589b4a755d0601f4f22ae237edaa3ab8c8f316c9a48ca47830f867486435142f2b350600f8f90465b99618a728892455c597d62d9e382205ca1043f4e8d8e52497f2f6d41140f6355715e855ca5eae3dbe10fa8df970f0e45427f776289d454ac8920aaba721289bea2d342835ff78694684bd67086c877d70fe7e4ed5b91194b95722cfcfc727babec0421c83773f4ddf4756b88ee38376740e4ede778c25ce4576b3c9e0547b9c257bb312a6816fde02851db74b421de3290b52fd41bb2f0c1f654f519881ce46de18dae9aea5b8b970671eb1ca91e65a79c57f5e77cddf9ad18add9757b2d46fe4696f82e5eefaa23fad2cf72dc5c78aff1f3f8fbf7c87a4288687831118a0948c364294bba92ed26c5ae36c55ac09b41feaed8b59f18b15ef67ff4e598fc84c5f6e8bb4c41376ff2694603f33d15f6acb70fd361d85a051c2362a45cd8290a18cf2bbe210287645221d9a42770c44389db601e26bdb345717423b13ecbfce6e7ee6d7a8bb7619dc77e04ab2292b48b5e2b0d86444a872a60381af8b6f0b6487ed5472846ea2353cef76ed6e52ce4d1850e4d4116e63c3014203da44efc72f5c4a26884259cc51650e64e5f78aee74267b7c9ebb4e48a6f0a54e6bcfb2dedacdf9b740e21cd1e43d17e63bd8a90894574aefa0da448a9e327b040e583a7b6089d25fbf8807fcafd5debc2c29a9a0a4b18357294d97a203f6ddc9c5e2a01266dbd2fce47cf84bac6addd90d63d498eba904bf478a7363e8fc50c3aca3d3775bbea19b7f4f128a5c460e9be45da5da236a83385560fe03cf8d1e868035b35602a5ba7b3980d1c8b1e12146d1b3acc0d0da035e795cfc1f3ecee06c93f749790137637fedee8da594fc4b2e0ce09f9038ff66e52e3bdecfa545117de042ac2e90024cfb5801ee68fd373ed9ae4ec391102f9831485a5d54c6cc2ee54bffaf4803a42e383a9f701da182123c91d3b4e0ab8384419cb0df9f171af7190f8c19b3895f54b0a5d4bac6b1ed7563b5733b3a5c4acb7805159c2d659e9439b50aa0d0c352178d0c245283d77d79d2bc9c3cbdf2d498213e37142ccbf54c91860d7d253cca2d376acfcf0681067cfb801125bef58fe724fa25382857cbcf2d2aa6e4a2decac1dfa9f6302b1d59636f757734bad2d58321f9f71df2242ed1eb323b0f794908d4f3ba3b4ff9a60e3b4b7eaefb7ae001c4f90bf8fc596dda67a8cae3cc4c545c1045f334052bf2aa29c4d8e8a3532e2021500b47e018bb83644a7d656f68dd976df299f34f54cfcbda72bd14140c985b72493276868eb9bf6e691f7bd053329d2154135983d49ae8eac827c30cf481a15b2f1ba57ba574b9c44d507d93834e2a695be95726f87b8efa42cb39b762686c102c15e97c2d6db56e24ee247fa0c1499f3dfd73b8d269551582a808d9ede91437ec9f7a8715851a815317ac636b1a3cfb206398036691da59318910fbf24bb846cbf2b91876f72654e7cb33efff8bef47270716f61c656eb10b05d3af79f929b962b9ee80ce5d995d71c7b0f29443a53443aa00f4cdc803ebfd15dcdcb42bcd5ffd41"}, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "012e1ec16155b3fda8750444a9c44ab3750c9e7bb7f5581c58d06698ee27426ed567ab60ff11d0bba1a01ed13d5fc91e48a8223f92d261d0c35298f71ee2ee525aa8706a16b153d7acc9033e3870db06401ccb3ba12e36fb9ab01079c1a37a557dc0713d0d2be520481ea94b0fa2c0e7d02def0ecc82b50f9896c727cb3e8c0bdb8478674864b568682e04527a65ac8e1d73b2b690cf5a7ae7985bc87e9e983a60825750dd92174c718c1097289797571327cc8c0fee9e7d97d142371a8089f369bea3c385519f69eca0ad7fca636c8a095b066d4b4a5767"}, @NL80211_PKTPAT_MASK={0xbe, 0x1, "faa86716a6a473cc11b6c6860b71584cd76c1a0e046ee569dbc6727abe2dc0c21494710b9201187e5804cacc10595e596c7f581353dcb6f13dd8f7cdad2c9b759478de1cf0405982b638c54f0091b6478bb1e44c9c6633d495f1b598be11f66c30b55184b79c899ba6548affa1919d2d1e39d009a3eb4a18754ce3a4c65dac12d783d023e81790fd3f7beecfb63c6c6bcc3f2d6664c46b2e4d362c90ffc20693070b65369d58eb63f0a7a98ce51cf79718ffc9ef998500a4d7ff"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}, @NL80211_PKTPAT_PATTERN={0xb2, 0x2, "8e411b2f6267896062248e4bd27eed47681707b50ce25ce5a790bb4fdb3a58f967eff73bb3a97bcbbfa376052cf261cc7fd61cdaed7fd291782edba72f95e99565c0f576adb1d07d506fef938d8703fe56410d21f772ce2b83c7726f882165fc2a0b7e25be9a1c461e8207844dd1c524f783e5865085ad534a8c025368a63864df0ec4ca920a269f7eb2cb693a823c18f1b3d0cfef4fa5fd79943f31a9d809d89bb58d8bd9f9572ecb2e606bc756"}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x268, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x23c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x80, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x9, 0x0, @random="af36537c84"}, {0xa, 0x0, @default_ap_ssid}, {0x1a, 0x0, @random="341e298c5e9fbbdcd3dcbd0721d4619c76b79f366612"}, {0x21, 0x0, @random="979f87d19049f1902f16c37a40b45750380bbe6ae15ac9fb8328974099"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x140, 0x84, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7ff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e24d4dee8ec9"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="e84de71eecef"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x79}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7fff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="8ef2934b13ed3c8c931ce6181474"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x500}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4a9043ac1e1c"}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x3e38}, 0x1, 0x0, 0x0, 0x818}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000040c0)={&(0x7f0000003fc0), 0xc, &(0x7f0000004080)={&(0x7f0000004000)={0x68, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x28}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x28c4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000004100)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000004140)='yeah', 0x4) connect$inet(r3, &(0x7f0000004180)={0x2, 0x4e21, @broadcast}, 0x10) bind$inet(r3, &(0x7f00000041c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) r4 = syz_clone(0x40040000, &(0x7f00000046c0)="618ab26b4a9f49b2651dc7bdf9c0233d2a7f54d361021de2d48399a310142819fbc726c68143f3912f893febbf10a19c927763e647ca07065389f2c84b41a518a7332d367fbc20c6ac65d2e48af12b68a4c1e16882385f9ef7895498b031e4acd006144f93884602462951994b04810b208ac95d69e40b7974389440fdf1ee094bb23a1aa76511d62b82df62181be15dba51f8e9600d7aece9f94b7400a773c847e799c82f0c13695807443d8104071a9b4b493c80544f31bb3287eafb8e4254a40ba5944986d05ece6cd0d779e92049998115c58af23ee88be2ed53c526d625d02f3b95", 0xe4, &(0x7f00000047c0), &(0x7f0000004800), &(0x7f0000004840)="2c4b39569eae26e77814c58766eb38f4bbadaeea8fdd943c7bc3a07d019d1f45e61d7dfff0ca7df09f2fdd160043fec7ad882474f29181b988b837d148") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004880)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = gettid() statx(r3, &(0x7f0000004980)='./file0/file0\x00', 0x1000, 0x101, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() r10 = getegid() r11 = accept4$x25(r3, &(0x7f0000004ac0), &(0x7f0000004b00)=0x12, 0x0) read$FUSE(r3, &(0x7f0000004b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r13 = getuid() fstat(r0, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000006c00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r16 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006c40), 0x10000, 0x0) r17 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000006c80)='./file0\x00', &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000007500)=0x0) fstat(r0, &(0x7f0000007540)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() r22 = syz_open_dev$hiddev(&(0x7f00000075c0), 0xec, 0x4000) sendmmsg$unix(r3, &(0x7f000000ba00)=[{{&(0x7f0000004200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004280)="3021d9", 0x3}, {&(0x7f00000042c0)="5971804a48c16084f8dad7aceb79dd28cd0922ac6a11ff8232dd4661a1ff40ef398d8e9df587235dfac7c30fda86da52ab19f66e62e383144e", 0x39}, {&(0x7f0000004300)="2c39b610b9235955d48c12a537f79c8132f7f926278210e3b57575c14e44409d7334cfa86553e549d339f9359be4988fd9ec916bcb24b7e7adec0fdc989d52bdf077d63a681302fceb20d63f542e0bbb02d2ebe813dfc0ad48fec419b635034df0253ee9e8783d34d49259987c360f683347aaf81b336da2143f4699afc89238597e44a3282fd57d249069d97646e09811ef3b4469a3da49d8598c15fb92dff9714e04d53c0a588cd885d081a94ea8f077c82e06660b0526f1261dc2c66516483a3f836dad502b51361c13345e7dec04631c00ab4d79a6d14bc91292b9cfc52c7261b079b85d5f65e4aa96a8c98444e93e6c61880139", 0xf6}, {&(0x7f0000004400)="1e82a232b466120be76d48166559cd91a4a7474a372a8eacdefecc385b1994b28419c87e181273a1a8292f28a1cf0428bb5c2d63e838a07d39de616d036d015bfa193093c84a8451cf82ce3af1e77e8053b43393c3069ea839cb252a1388b6df2ea7df", 0x63}, {&(0x7f0000004480)="cac1aa8322eb9b02f6a4c2624b4ef1665627f1db7c9a6038c77181e50d6373a6c25c8ccadec52642b3629b49f15821a61cd207543bc00c0681e3f1d5f8b47591927d0e3e710fd4cac4c0c894faa6c94b4a7ed255fc2141229c5e8b770d662ffb9b262b4d687336cb3a698b302e7039864afc9abb94268f89c97b88146c8ab18e5a7620b323e3afe8cab11584c2f46891cfdefe478e4a833ba3497a1dd71d", 0x9e}, {&(0x7f0000004540)="62292333e6981e7b7fcfb0fdd0ff90c882e6dca19cfa0a880572d4b04a7b5903c50117583eb8a6625512", 0x2a}, {&(0x7f0000004580)="55c5fded7ed1f6394a4d3a15273d8f0aa949daa0bd2817effca063897e5814f757d8240b2c212ee7305f4a61046702ef18b932d75e4a844884685d43f1d3dfd7ec6cd1c2bad1aaa4fc7eb76b1984b18f8e8ed98bf69941cf80a90c006bb780f1fb0280aeedf895037c0def9f7177e28eaade9693a842bd4fc309f2a1ba302a26bf31936569f65151cf8213c285e14a2faa163b70bdbc3e755f75f62fb824f34475982f", 0xa3}], 0x7, &(0x7f00000048c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xffffffffffffffff}}}], 0x20, 0x4000}}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004900)="06af2a982973386037a62c420c8f3bf9ab0184ee97e07af6b169352cc17015cad33209f08a5926eccae71a11329ec90364c3b9962e931d6c67292e", 0x3b}], 0x1, &(0x7f0000006d40)=[@rights={{0x20, 0x1, 0x1, [r3, r6, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r11, 0xffffffffffffffff, r3, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x28, 0x1, 0x1, [r15, r3, r0, r3, r0, r16]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, r18}}}], 0xf0, 0x4000001}}, {{&(0x7f0000006e40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000007480)=[{&(0x7f0000006ec0)="205acf9011399708dea4df137ef987427028eed782f58cced147584dc142ed7bdff303bdbb199de6ca9c622b0f8852fe4bc471670311bc95aba43be3dd6745516ec96024154c", 0x46}, {&(0x7f0000006f40)="c9099b7b69109a3ffc7d9c09dad7e750037b212b84ec4bfa570f820cf3267f3a7119d56662793eb35f2568b01703a2972af216ca198941457a9df60963ccb8e343d0c8038bb00377208a6b4bca2300ef82268c43043a08bfcb17c094ae8184b3803ca91c8831685a57071789f18e978a896a44aa28a13edca35da42e121ca4a4bafd027e9f016bd5c4008b2cec19c6e1c6f6ed7694468d4e4c1b1a1c53073c2742f61abc552094745217f8d0541f06dc93ac643ce720738b25cc372c022579d9483e7782ff89f4", 0xc7}, {&(0x7f0000007040)="1d1c5c1cba4c7852f5e22f51d9d353cbbda1be76d3d2b6e863d02171811d01548e3e2d79404ab1d2bfbdbae0e721ab8c924c1ef3d386e4d8f8bfd190b6bff160ad", 0x41}, {&(0x7f00000070c0)="ec6533d43adbd63f7058096c09d0cf68e0be98bea3735b19a3ce64c3f664c037d8e6d73e4d835807a9669492d857d9f2d06592e711c29a728c1776510027ad3d42fb57e814076d8e177fd5fc1909dc7c7856293596b20697a6df4e1c5c38285915094d6adb82dd3bf36e7d20029d2d98ee0cb0b455f0d66dd8dd0bff384c7103cef2b234d07bb0ce81d8603a57cf3717e0acfe6a5a001e5df141677189a2fe467d54a8c2ad8121fe8d6b477645ebeec52ce05a731b8147df084039760a6a409125c79fc02e4e55aadabc18d3870aa03153754143e5b880e5be7bf7beb58fb2", 0xdf}, {&(0x7f00000071c0)="229f0b79740b6a722908c09333d76e23ab89f6269b187196ec7065885dbbb64d8f39ee125517b0108e8172e6692dbd91454653336318b09947e1efff5c9e392816e580e561d6f996d2227e0f01a7017549034ed5d656536dd7fb96e9136f9d74a176c57907ebe156789b664ce434040b05f3647d1707cd13fc7205f4e0c4cd7bd14b611a9f5292fdefd029505ea793872223d03efc1bee5294e6d019a0d02f19ffc67e6e7918b2537a02089c192ae711c27a375b2b", 0xb5}, {&(0x7f0000007280)="63cc8521f2380662d38aad5e3b271dbd582705372382fafd9152df36b38a58e4735e003779854fb64b9f1e432286bbab9edea41c87e535dfc4a13fce50c1809fbca4ff742367121a6c2eb97aff0e340a9612db0897ef4b8cac3c5b619a0980bd8921d815b33ab402cf0fc5de470ea49763239d68aed794ff8c06bced9b4a058e51ac9ecf03237a35e43a2882853deb03650483ad763070f0107ab6a157e2f4fbea", 0xa1}, {&(0x7f0000007340)="8941f1b34709c109b6bd78fef96948b5dce7f5824d99359709beaad3b7266c8b2bd19a37e03fcf3abd8860d7800642d55cc182663a75bfbc344220f7c1e534ea87368e6bc66fa62946a58283e56c3eaa0c7136c201108918e1062f29a47a2ab6d95b263ffad782a5ea42341b9e7dd5619e6a8e3098693db4f6e2066bd9b55f2d90398c47686dd5bc71a6f9d60575fb2ecf6892ff6ba090f4b1fb63c7abd72b162055d7e814951cf09cd29ae1", 0xac}, {&(0x7f0000007400)="378b03141184c72fd7d7f04f9b7c1fb4d94f1443f34f59be7d5f2775c733cf0cc7dae01b0f76eb910dbd4f4fde0d6e8edef9d39f34c0bb55129876061e61d9b63f005698bb78c9f3a96843b8e3c11a9435d1bfe5928f1cf42aacc2551d03abf49583f8649c3c3d2f5c212754646f5ff2a67093", 0x73}], 0x8, &(0x7f0000007bc0)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x24, 0x1, 0x1, [r22, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x4048000}}, {{&(0x7f0000007cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{&(0x7f0000007d40)="77a9d220d53bb7b81f2780a1db71ed8ef5638f861e1163f1765be3defafb809b0d35c082a34f02f0103c8df258f46a4ca066466171e5f2da8bd9fe127a83c0d4d0fec3ff51dae61d4d0561875e23afe811e8917a421beb0118018e115e2162d5eee02a01063f88dfaef740a6c5e7c9ab6b9b18c8f9f2f126776df9efd73698d9ddbb24f5cc1a0a1be30738ca6eaa76734068109beb8d68ddb5a9f4b3ae4ca39a87ea46701f3d0fdac6baa3cc2516ebc1741d39537de08ac2bfdcd2a9f99b32f86692ee98100d501f3b282133a141", 0xce}, {&(0x7f0000007e40)="b3751516072d087458a52b6e480f6f77dc1f7830108b3f238e5e086cb76ea1c56f92e86e1df80d4d1de9eb3ddb074fdc4264937bdd34eb8044b44746", 0x3c}, {&(0x7f0000007e80)="6560421eda305b4ae5f81a9ae1d0a77f17a13bfd9b638ee48b8ab5625a4f4d9946f30cf9492de007b36de451fd20035529079278bfc6809e92e10a8cb5ec39e741b65e3ef9d5b7eca62dfb9d8b64e1840cd197fcb3eeecc361128f4be7eebe62d46f72f1eb15499443fcd50a5a382c09b2d2367b15e93a9609ec6ba74e0d9c086b44a3c127f285091191b0fc4bc683d3bd523e56c97cfe7095c1921be7b5d2f0c51e51f5054ef1a353c1a85f7fb02caff127810f5307865edbd59f950a4775d80cd797d9cb540008bc897717d0c56c950b8846440094966135f337e5082ff0dfa77210cc7a4d87f704e246", 0xeb}, {&(0x7f0000007f80)="58eca758311e619866cec1953ecedd35eb0082fc897e3a32d5a329f2cb618363ba3ccfeb5a562135e25fd20dbc6e14cd4f1f02", 0x33}, {&(0x7f0000007fc0)="2db95fc8dd2497792a8b8286a872257d66a7c02fb64a81b2839413", 0x1b}, {&(0x7f0000008000)="4ffc7a57d9a2ac21b8425c2ebbb09013d7347ab08dd61327ced70e78f3d7e89c58b50d16e0631e45f08a47678acb9795f21541ee0559d1d0ef2efec484cd", 0x3e}, {&(0x7f0000008040)="a76107c4c56f08fee52a0fe26c062e43f59b0d10d30f72190f1ffbaf94bb4ecc8072b47d177224d3f13c4a8bc1d0ef2057348d", 0x33}], 0x7, &(0x7f000000b900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r0, r3, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r0, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0]}}], 0x100, 0x20000104}}], 0x4, 0x40000) 16.489233885s ago: executing program 3 (id=3000): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x139}], 0x2}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 15.375430756s ago: executing program 3 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x401, 0x9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x84f, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x2b, 0x21, [@empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010101, @multicast2, @multicast1, @loopback, @multicast2, @private=0xa010101, @private=0xa010100]}, @ssrr={0x89, 0x1f, 0xd8, [@loopback, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x24, 0x3, 0x8, [{@multicast2, 0x3}, {@rand_addr=0x64010100, 0xc}, {@multicast1, 0xdddc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp={0x44, 0x8, 0x19, 0x0, 0x7, [0xbba5]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x7ffc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x2, 0x4002) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xfffffff9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 14.143775434s ago: executing program 3 (id=3007): ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x2e9aa845) 13.005442448s ago: executing program 3 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x20044080) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{r5, 0xffffffffffffffff}, &(0x7f0000002a00), &(0x7f0000002a40)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2500f900000000000000000000000000000000007e"], 0x34}}, 0x20008000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000001}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000140)={0xc, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2$watch_queue(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000000000000169, &(0x7f00000003c0)=ANY=[@ANYBLOB="ebd0", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000300186700000d0000000000000010000000186600000e00002ee977b3d199551a825404119499", @ANYRES32=r9, @ANYRES16], &(0x7f0000002bc0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) 11.893933654s ago: executing program 3 (id=3010): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r0 = socket$inet6(0xa, 0x2, 0x88) r1 = openat$random(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev2(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="8939c60504de77bbd081ac68b503d2d16ea59f79143d4df40e1e0634d3965d2e1da850d1b2c266a1237666009be0b0cb8f7417dc", 0x34}], 0x1, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0xd0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) process_madvise(r4, &(0x7f0000000100)=[{&(0x7f0000000380)="da859b3a581a4602fba85496cadb02d104a70728f2a55efc478e52c4017c631431f82a831d79ec80dc895fcaa46c62ea42b41effdd03c0de33592787316c505354d2d29d41168ba811bb34860253692953b2c2ed6d0bdcc3ffb41df5283b28bfdbe69ef1904ad8656ee60667e540faac5ba75dc8683e5549f53f2b0e87a1bbb8ec42f283b8cb4c038643e6f6932f4684c028d27c06a5b43f33d82d37329e513241a0ce44ec738be9e31c88c1b19d22b11de4f8295090fd31b52e916bac94c79e52", 0xc1}, {&(0x7f0000000000)="70700aa5c630250093afe255894c174e40f74c4d69f8cb9197030e0d8ad25408edc44ba516413783ac190595a70d1c3d4c032991b5ad5b1214717f2606db81fd950e08aa3b3c6da00c1b597fbf042dbfc2949ff5ae9893a7b26e59250e23df739e", 0x61}, {&(0x7f00000001c0)="8be98e0c3013a5856bc6bc8f16508ddb0646405afd4608f77ffd8adb5ac8c0f98a3f61f040b86f0d6de224dea12ec0c0f7bde790e84adaa198b96ff3ea0cd41c85d8a5f8619e22684ca6a7b0d332a3482db9ab56f8caff015e5a4c3dbd3f1464e31cb80b19353e29d8926d01eeb5fba865081ed95c26ca71e6e61b744df334dc", 0x80}, {&(0x7f0000000480)="2b1a1c46e639360b2c9e71c6f6201f5e71c992ba40dc126e6f004de3c14cb5e72e3a2d4ee9e3088edf960863124e0f9913be945d639779b378d17ca068ae28f5bfff879bf3dd873cd64a5a216b9dfc5ec4bf80854e88a744fa905848d8aa1a3f612404cf094e39af954302b01f03eb3c5b0802e73fbb4aca1b7e61771c2f22af1c5cef359c4aa264c42fbecefc9cde97b357eb39f8d58456fbb8b3844882048c9ba3e83ccf1ad536c769605f4b3f6bbd198d977a4992091d7df8e731bc684b54b26cea1bdf489fe2619848091baad89ca774c5b35360762ac429bfb380d28d8450c25bb541", 0xe5}], 0x4, 0xf, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073796b320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000b80)="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", 0x207, 0x0) 11.542929012s ago: executing program 1 (id=3011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000030f000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) gettid() openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r4 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) 10.664875951s ago: executing program 1 (id=3014): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r1, &(0x7f0000001200), 0x0, 0x2023, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x370, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48aed3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff, 0xffffff00], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffff00, 0xffffff00, 'caif0\x00', 'pim6reg\x00', {}, {}, 0x1, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x26}, 0xff, 0xffffff00, 'ipvlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x1b, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0b00000005000000020000000600000000000000", @ANYRES32, @ANYBLOB="000600000000000003000000000000640bc7333213b315283cbd78bb743fc849d0ce547262b8383799ed6bd3b30000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000003080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000010000000b70400000100000085000000030000009500000000000000bb136f105dde607597179411f2f337754b572a6f5727a01324070a14a7afa2942a79d641c3c93c82d207322e1dc7550bbcc66325f3c08aee3d54e0f9a624d8d9301884225cb550bd74157978f6bafaf8e57431c1161e63e3bd55ec2294f0ba3934311543244aec09278fc75dd70f9c28df6f0ea1affe0acda7e2df14b119bb5a"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 9.283920169s ago: executing program 4 (id=3016): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000620000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) 9.076801859s ago: executing program 1 (id=3017): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, 0x0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x284200, 0x0) close_range(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x1}], 0x2, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000007c0)="00aad6ac2e03be8983c74b87c2ebbe3caa113a9fb121c7eaba64a7a4ebc60cd3915b44053f218f036626fe3912e4758911b677cb49cc51653e950cc4604e6e25a9095681382e90f5645a4d37cb9ceb9c5f0203732230d8268aa27cbf7f8983476f3a12d5e52ad6b102542cf03c72e732140cf7a0f2f4458e325e4c3610c3b665ab13173eb5a978149e9dedb6f8cf5788e4b97341ae09a7f15838e3ad81ba8e0e999acc98b1905f80afe53c93264abf209b418235206f520f534d99e3cb76ee", 0xbf}], 0x1, 0x2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=':#^)&\x00', 0x0) timer_create(0x0, &(0x7f0000000580)={0x0, 0x35, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000600)=0x0) timer_gettime(r4, &(0x7f0000000640)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) r11 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYRES32=r10, @ANYRESOCT=r10, @ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="d5063300800001"], 0x6f4}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file2', [{0x20, '\x00'}, {0x20, 'memory.numa_stat\x00'}]}, 0x1f) sendmmsg$inet6(r2, &(0x7f0000000600), 0x0, 0xc004) 9.048481996s ago: executing program 2 (id=3018): r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.697268494s ago: executing program 0 (id=3019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x20044080) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{r5, 0xffffffffffffffff}, &(0x7f0000002a00), &(0x7f0000002a40)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2500f900000000000000000000000000000000007e"], 0x34}}, 0x20008000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000001}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000140)={0xc, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2$watch_queue(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000000000000169, &(0x7f00000003c0)=ANY=[@ANYBLOB="ebd0", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000300186700000d0000000000000010000000186600000e00002ee977b3d199551a825404119499", @ANYRES32=r9, @ANYRES16], &(0x7f0000002bc0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) 7.814671339s ago: executing program 1 (id=3020): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)) write$FUSE_ATTR(r5, &(0x7f0000000580)={0x78, 0x0, 0x0, {0x8000, 0x6, 0x0, {0x3, 0xffff, 0x6, 0x200, 0xa, 0x9951, 0x5d3, 0x5, 0xffffff33, 0xa000, 0x7f, 0x0, 0x0, 0xfffffffc, 0xa}}}, 0x78) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 7.813679779s ago: executing program 2 (id=3021): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000440)=""/4090, 0xffa) getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 7.651937679s ago: executing program 4 (id=3022): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdir(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r7, &(0x7f0000000580)={0x78, 0x0, r5, {0x8000, 0x6, 0x0, {0x3, 0xffff, 0x6, 0x200, 0xa, 0x9951, 0x5d3, 0x5, 0xffffff33, 0xa000, 0x7f, r6, r8, 0xfffffffc, 0xa}}}, 0x78) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="015c1033d9dc110001000400"]) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 6.879631258s ago: executing program 2 (id=3023): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18, 0xa1, 0xfffffffe, 0x3, 0xfdfd}) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r2, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000380), &(0x7f0000000580)=r6}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f000041a000/0x4000)=nil, 0x4000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 5.924467347s ago: executing program 0 (id=3024): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0xff97) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) 5.898685254s ago: executing program 4 (id=3025): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110081005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.714924361s ago: executing program 2 (id=3026): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r1, &(0x7f0000001200), 0x0, 0x2023, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x370, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48aed3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff, 0xffffff00], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffff00, 0xffffff00, 'caif0\x00', 'pim6reg\x00', {}, {}, 0x1, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x26}, 0xff, 0xffffff00, 'ipvlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x1b, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0b00000005000000020000000600000000000000", @ANYRES32, @ANYBLOB="000600000000000003000000000000640bc7333213b315283cbd78bb743fc849d0ce547262b8383799ed6bd3b30000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000003080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000010000000b70400000100000085000000030000009500000000000000bb136f105dde607597179411f2f337754b572a6f5727a01324070a14a7afa2942a79d641c3c93c82d207322e1dc7550bbcc66325f3c08aee3d54e0f9a624d8d9301884225cb550bd74157978f6bafaf8e57431c1161e63e3bd55ec2294f0ba3934311543244aec09278fc75dd70f9c28df6f0ea1affe0acda7e2df14b119bb5a"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 4.711204215s ago: executing program 2 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x0, r4}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000000780)=""/41, 0x4f, 0x29, 0x7fff, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x4, 0x80000, 0xf, 0x4008, r6, 0x2, '\x00', r3, r7, 0x0, 0x2, 0x3}, 0x50) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) ioctl$COMEDI_BUFCONFIG(r4, 0x8020640d, &(0x7f0000000600)={0x7, 0x3, 0xd8, 0x3536}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r9, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) ptrace$getregs(0xe, 0x0, 0x2, &(0x7f0000000980)=""/206) 4.637227059s ago: executing program 0 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./bus\x00', 0x0, 0x80) fsync(r2) creat(&(0x7f0000000380)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010003704000000000200000000000000", @ANYRES32=r6, @ANYBLOB="83040500000000001c0012800b00030062726964676500000c00028005002b0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x12200, 0x0) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f00000001c0)) 3.791308496s ago: executing program 1 (id=3029): openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {0x0, 0x0, 0x0, 0x9e13}, 0x31, [0x0, 0x1, 0x6, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7ffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x7c, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xe8e, 0xff, 0xffffff48, 0x8000, 0x0, 0x1, 0x0, 0x3, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x10000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x3, 0x7, 0x0, 0x0, 0x6, 0x4, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x800009, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffd]}, 0x45c) syz_open_dev$video(&(0x7f0000000b40), 0x7fffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='udf\x00', 0x4001, &(0x7f0000000240)='/dev/uinput\x00') ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000100)={0xf, 0x20000, 0x2, 0xcbc, 0x1, 0x8}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r2}, &(0x7f0000000180), &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) 3.774856642s ago: executing program 4 (id=3030): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x24c002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r1}, 0x18) inotify_init1(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffd, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r3, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 3.639692801s ago: executing program 2 (id=3031): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x5, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000) setreuid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4040814) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) gettid() inotify_init() getpid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0xe8c, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x4000000000040, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x3, 0xb8, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x5, 0x0, 0x0, 0x5bfd, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x353, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f07600000000000010902240000000009040000e86a0103000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000080)={0x10000, 0x40, 0x280, &(0x7f0000000480)=[0x25a2a48f, 0x9, 0x9, 0x120, 0x7ff, 0x7, 0x8, 0x32, 0x5, 0x9, 0x8, 0x9, 0x800, 0x9, 0x43, 0x2, 0x0, 0x93, 0xfb9, 0x8, 0x5b, 0x9, 0x2, 0x80000001, 0x2, 0x3ff, 0x47, 0x3, 0x8001, 0x42, 0x1, 0x1000, 0x4, 0xf, 0x1000, 0x4, 0x41e, 0x5, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x5, 0x9, 0x2ab9, 0x8001, 0xf0, 0x101, 0x0, 0x0, 0x8, 0x8, 0x3, 0x6, 0x5, 0x5, 0x2, 0x8, 0x2, 0x2, 0xd, 0x80000001, 0x1200000000000000, 0x6, 0x7f, 0xb, 0x8000, 0x2, 0x6bde, 0x81, 0x91a2, 0xc, 0x4, 0x8, 0x10000, 0x8001, 0x8000000000000000, 0x8, 0x6, 0x100, 0x4, 0x7, 0x5, 0x10001, 0x6d71, 0x8, 0x4, 0xff, 0x8, 0xffffffff, 0x8000000000000000, 0x7, 0x1ff, 0x16284b6b, 0x9, 0x1, 0x6, 0x7b, 0x100, 0x659, 0x81, 0xffffffff, 0xa, 0xd7, 0x2, 0x3, 0xffffffffffffff00, 0x6, 0xce94, 0x6, 0x8000000000000000, 0x1, 0xff, 0x3, 0xe, 0x8001, 0x3ea1c1cd, 0x0, 0x6, 0x9, 0x5ba2, 0x3, 0x8, 0x2, 0xd, 0x1, 0x3, 0x8]}) socket$netlink(0x10, 0x3, 0x10) 2.540193516s ago: executing program 4 (id=3032): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendto$inet(r1, &(0x7f0000000340)="2e2dbd64ee5a0f1437823e2338f380", 0xf, 0xc000, 0x0, 0x0) 2.50789399s ago: executing program 4 (id=3033): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x103081, 0x0) socket(0x10, 0x803, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0xfffffffffffffffe, 0x0, {{0x80000002, 0x3, 0x0, 0xfffffffffedfff81, 0x3, 0x0, {0x2, 0x983, 0x20fd, 0x6d5300ae, 0xf7c, 0x800000000000d615, 0x3fb, 0x80000000, 0x8, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x13bf, 0x4008ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x56, 0x7f01) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 2.407711416s ago: executing program 0 (id=3034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x20044080) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{r5, 0xffffffffffffffff}, &(0x7f0000002a00), &(0x7f0000002a40)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2500f900000000000000000000000000000000007e"], 0x34}}, 0x20008000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000001}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000140)={0xc, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) pipe2$watch_queue(&(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000000000000169, &(0x7f00000003c0)=ANY=[@ANYBLOB="ebd0", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000300186700000d0000000000000010000000186600000e00002ee977b3d199551a825404119499", @ANYRES32=r9, @ANYRES16], &(0x7f0000002bc0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x8, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) 979.263298ms ago: executing program 0 (id=3035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_open(&(0x7f0000000180)='.\\\x00', 0x2, 0x40, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000001b000)={0x0}, &(0x7f000001b040)=0xc) timer_create(0x0, &(0x7f000001b080)={0x0, 0x29, 0x4, @tid=r2}, &(0x7f000001b0c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='btrfs\x00', 0x210818, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r9 = dup(r8) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r9, 0xae80, 0x0) 428.51016ms ago: executing program 0 (id=3036): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r1, &(0x7f0000001200), 0x0, 0x2023, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x370, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48aed3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff, 0xffffff00], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffff00, 0xffffff00, 'caif0\x00', 'pim6reg\x00', {}, {}, 0x1, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x26}, 0xff, 0xffffff00, 'ipvlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x1b, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0b00000005000000020000000600000000000000", @ANYRES32, @ANYBLOB="000600000000000003000000000000640bc7333213b315283cbd78bb743fc849d0ce547262b8383799ed6bd3b30000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000003080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000010000000b70400000100000085000000030000009500000000000000bb136f105dde607597179411f2f337754b572a6f5727a01324070a14a7afa2942a79d641c3c93c82d207322e1dc7550bbcc66325f3c08aee3d54e0f9a624d8d9301884225cb550bd74157978f6bafaf8e57431c1161e63e3bd55ec2294f0ba3934311543244aec09278fc75dd70f9c28df6f0ea1affe0acda7e2df14b119bb5a"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=3037): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0xff97) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) kernel console output (not intermixed with test programs): .0: unknown em28xx chip ID (0) [ 1047.901225][ T5927] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1047.912041][ T5927] em28xx 1-1:0.0: board has no eeprom [ 1047.984124][ T5927] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1047.994226][ T5927] em28xx 1-1:0.0: dvb set to bulk mode. [ 1048.001653][ T5884] em28xx 1-1:0.0: Binding DVB extension [ 1048.009158][T16184] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1048.013729][ T5927] usb 1-1: USB disconnect, device number 70 [ 1048.035277][ T5927] em28xx 1-1:0.0: Disconnecting em28xx [ 1048.078903][ T5884] em28xx 1-1:0.0: Registering input extension [ 1048.089420][ T5927] em28xx 1-1:0.0: Closing input extension [ 1048.145503][ T5927] em28xx 1-1:0.0: Freeing device [ 1048.976591][ T30] audit: type=1400 audit(1766822747.107:1295): avc: denied { audit_read } for pid=16193 comm="syz.1.2691" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1049.356902][ T5962] pwc: Warning: more than 1 configuration available. [ 1049.388149][ T5962] pwc: Failed to set LED on/off time (-71) [ 1049.513731][ T5962] pwc: send_video_command error -71 [ 1049.530985][ T5962] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1049.541770][ T5962] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1049.589008][ T5962] usb 4-1: USB disconnect, device number 91 [ 1050.084099][ T30] audit: type=1400 audit(1766822748.567:1296): avc: denied { create } for pid=16203 comm="syz.3.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1050.128970][ T30] audit: type=1400 audit(1766822748.597:1297): avc: denied { set_context_mgr } for pid=16207 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1050.262911][ T30] audit: type=1400 audit(1766822748.597:1298): avc: denied { map } for pid=16207 comm="syz.0.2696" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1050.336130][ T30] audit: type=1400 audit(1766822748.597:1299): avc: denied { call } for pid=16207 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1050.514387][T16216] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2695'. [ 1050.798576][ T30] audit: type=1400 audit(1766822748.597:1300): avc: denied { transfer } for pid=16207 comm="syz.0.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1050.903088][T16223] Cannot find add_set index 65532 as target [ 1051.097546][ T30] audit: type=1400 audit(1766822749.577:1301): avc: denied { connect } for pid=16205 comm="syz.2.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1051.163504][T16220] netlink: 'syz.2.2695': attribute type 4 has an invalid length. [ 1051.265398][ T5938] pwc: send_video_command error -71 [ 1051.273597][ T5938] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1051.594094][ T5938] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1051.603572][ T30] audit: type=1400 audit(1766822749.587:1302): avc: denied { write } for pid=16205 comm="syz.2.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1051.739400][ T5938] usb 5-1: USB disconnect, device number 77 [ 1052.617169][ T30] audit: type=1400 audit(1766822751.117:1303): avc: denied { create } for pid=16245 comm="syz.4.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1052.653334][ T30] audit: type=1400 audit(1766822751.147:1304): avc: denied { write } for pid=16245 comm="syz.4.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1053.381670][ T30] audit: type=1400 audit(1766822751.577:1305): avc: denied { getopt } for pid=16243 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1053.606056][ T5927] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1053.643822][ T5927] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1053.837465][T16259] netem: incorrect ge model size [ 1053.853035][T16259] netem: change failed [ 1054.020006][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.413715][T16273] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1054.509411][T16274] netlink: 'syz.1.2713': attribute type 2 has an invalid length. [ 1055.094313][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1055.094329][ T30] audit: type=1400 audit(1766822753.587:1307): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1055.099472][T16256] hid-generic 0000:0000:0000.003D: pid 16256 passed too short report [ 1055.283006][T16278] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1055.319142][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1055.525654][ T30] audit: type=1400 audit(1766822753.757:1308): avc: denied { ioctl } for pid=16276 comm="syz.2.2714" path="socket:[56723]" dev="sockfs" ino=56723 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1056.695898][T16293] FAULT_INJECTION: forcing a failure. [ 1056.695898][T16293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.724121][T16293] CPU: 0 UID: 0 PID: 16293 Comm: syz.4.2719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1056.724151][T16293] Tainted: [L]=SOFTLOCKUP [ 1056.724157][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1056.724167][T16293] Call Trace: [ 1056.724173][T16293] [ 1056.724181][T16293] dump_stack_lvl+0x16c/0x1f0 [ 1056.724208][T16293] should_fail_ex+0x512/0x640 [ 1056.724239][T16293] _copy_from_user+0x2e/0xd0 [ 1056.724265][T16293] move_addr_to_kernel+0x65/0x170 [ 1056.724290][T16293] __copy_msghdr+0x386/0x470 [ 1056.724308][T16293] copy_msghdr_from_user+0xc1/0x160 [ 1056.724325][T16293] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1056.724346][T16293] ? __pfx__kstrtoull+0x10/0x10 [ 1056.724369][T16293] ___sys_sendmsg+0xfe/0x1d0 [ 1056.724387][T16293] ? __pfx____sys_sendmsg+0x10/0x10 [ 1056.724416][T16293] ? find_held_lock+0x2b/0x80 [ 1056.724458][T16293] __sys_sendmmsg+0x200/0x420 [ 1056.724479][T16293] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1056.724505][T16293] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1056.724539][T16293] ? fput+0x70/0xf0 [ 1056.724554][T16293] ? ksys_write+0x1ac/0x250 [ 1056.724574][T16293] ? __pfx_ksys_write+0x10/0x10 [ 1056.724608][T16293] __x64_sys_sendmmsg+0x9c/0x100 [ 1056.724625][T16293] ? lockdep_hardirqs_on+0x7c/0x110 [ 1056.724646][T16293] do_syscall_64+0xcd/0xf80 [ 1056.724669][T16293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.724687][T16293] RIP: 0033:0x7f3fcd98f749 [ 1056.724701][T16293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.724718][T16293] RSP: 002b:00007f3fce900038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1056.724736][T16293] RAX: ffffffffffffffda RBX: 00007f3fcdbe5fa0 RCX: 00007f3fcd98f749 [ 1056.724748][T16293] RDX: 0000000000000001 RSI: 0000200000006ac0 RDI: 0000000000000003 [ 1056.724758][T16293] RBP: 00007f3fce900090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.724769][T16293] R10: 0000000004008000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.724780][T16293] R13: 00007f3fcdbe6038 R14: 00007f3fcdbe5fa0 R15: 00007ffd98462798 [ 1056.724803][T16293] [ 1057.190204][ T30] audit: type=1400 audit(1766822755.687:1309): avc: denied { read write } for pid=16289 comm="syz.2.2718" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1057.302730][ T30] audit: type=1400 audit(1766822755.707:1310): avc: denied { open } for pid=16289 comm="syz.2.2718" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1057.418291][ T3600] bond0: (slave bond_slave_0): interface is now down [ 1057.464014][ T3600] bond0: (slave bond_slave_1): interface is now down [ 1057.526045][ T3600] bond0: (slave bond_slave_0): interface is now down [ 1057.563907][ T3600] bond0: (slave bond_slave_1): interface is now down [ 1057.577909][T16299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1057.638461][ T9244] bond0: (slave bond_slave_0): interface is now down [ 1057.657744][ T9244] bond0: (slave bond_slave_1): interface is now down [ 1057.681823][T16301] bond_slave_0: entered promiscuous mode [ 1057.687814][T16301] bond_slave_1: entered promiscuous mode [ 1057.745493][ T9247] bond0: (slave bond_slave_0): interface is now down [ 1057.752343][ T9247] bond0: (slave bond_slave_1): interface is now down [ 1057.774262][T16301] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1057.800184][ T9244] bond0: (slave bond_slave_0): interface is now down [ 1057.810685][ T9244] bond0: (slave bond_slave_1): interface is now down [ 1057.811725][T16301] bond1: (slave macvlan2): making interface the new active one [ 1057.841496][T16301] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1057.947578][ T3937] bond0: (slave bond_slave_0): interface is now down [ 1057.948161][T16320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.975388][ T3937] bond0: (slave bond_slave_1): interface is now down [ 1057.982952][T16316] sg_write: process 1991 (syz.2.2725) changed security contexts after opening file descriptor, this is not allowed. [ 1058.424905][ T3937] bond0: (slave bond_slave_0): interface is now down [ 1058.448627][T16307] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:3cd3:4dff:feb8:4811 error=-28 [ 1058.454265][ T3937] bond0: (slave bond_slave_1): interface is now down [ 1058.463043][T16323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.483327][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2725'. [ 1058.493144][T16316] openvswitch: netlink: Flow key attr not present in new flow. [ 1058.500927][ T3937] bond0: (slave bond_slave_0): interface is now down [ 1058.519919][ T3937] bond0: (slave bond_slave_1): interface is now down [ 1058.553910][ T3937] bond0: now running without any active interface! [ 1058.587521][ T30] audit: type=1400 audit(1766822757.087:1311): avc: denied { mount } for pid=16310 comm="syz.2.2725" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1058.656298][ T12] bond1: (slave macvlan2): link status definitely down, disabling slave [ 1058.671180][ T12] bond1: now running without any active interface! [ 1058.772765][T16314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.858970][ T30] audit: type=1400 audit(1766822757.357:1312): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1059.169495][T16333] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2728'. [ 1059.333241][T15346] syz0: Port: 1 Link DOWN [ 1059.345762][T16307] infiniband syz0: set down [ 1059.368002][T16307] infiniband syz0: added bond0 [ 1059.501415][T16307] RDS/IB: syz0: added [ 1059.530479][T16338] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2730'. [ 1059.542544][T16338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2730'. [ 1059.604208][T16307] smc: adding ib device syz0 with port count 1 [ 1059.612381][T16307] smc: ib device syz0 port 1 has no pnetid [ 1061.981030][ T30] audit: type=1400 audit(1766822760.477:1313): avc: denied { setopt } for pid=16369 comm="syz.2.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1062.011136][T16370] loop6: detected capacity change from 0 to 524287999 [ 1062.224105][T15346] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1062.383286][ T30] audit: type=1400 audit(1766822760.817:1314): avc: denied { accept } for pid=16369 comm="syz.2.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1062.428986][T16376] netlink: 'syz.0.2738': attribute type 10 has an invalid length. [ 1062.436977][T16376] team0: left allmulticast mode [ 1062.447492][ T30] audit: type=1400 audit(1766822760.917:1315): avc: denied { read write } for pid=16372 comm="syz.0.2738" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1062.489946][T16376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.520970][ T30] audit: type=1400 audit(1766822760.917:1316): avc: denied { open } for pid=16372 comm="syz.0.2738" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1062.553158][T16376] team0: entered allmulticast mode [ 1062.571406][T16376] bond0: (slave team0): Enslaving as an active interface with an up link [ 1062.608387][T15346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.622988][T15346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.638333][ T30] audit: type=1400 audit(1766822760.917:1317): avc: denied { ioctl } for pid=16372 comm="syz.0.2738" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1062.665938][T15346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.681562][T15346] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1062.691626][T15346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.699957][ T30] audit: type=1400 audit(1766822760.927:1318): avc: denied { create } for pid=16372 comm="syz.0.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1062.721704][ T30] audit: type=1400 audit(1766822760.987:1319): avc: denied { setopt } for pid=16372 comm="syz.0.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1062.743890][T15346] usb 2-1: config 0 descriptor?? [ 1062.995216][T16372] delete_channel: no stack [ 1063.227903][T15346] wacom 0003:056A:0010.003E: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1063.258345][T15346] wacom 0003:056A:0010.003E: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 1063.322667][T15346] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.003E/input/input108 [ 1063.325725][T16385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.493417][T15346] usb 2-1: USB disconnect, device number 76 [ 1063.522384][T16389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.631195][T16385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.730451][T16395] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2742'. [ 1063.855238][ T30] audit: type=1400 audit(1766822762.357:1320): avc: denied { load_policy } for pid=16387 comm="syz.3.2740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1063.905479][T16398] SELinux: failed to load policy [ 1065.651574][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 1065.875347][T16418] futex_wake_op: syz.3.2748 tries to shift op by -1; fix this program [ 1066.454852][ T30] audit: type=1400 audit(1766822764.947:1321): avc: denied { write } for pid=16417 comm="syz.3.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1067.006233][ T7184] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1067.026940][ T7184] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1068.054431][T16065] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1068.265713][T16065] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1068.288970][T16453] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1068.299994][T16453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1068.310562][T16065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.539398][T16065] usb 5-1: config 0 descriptor?? [ 1068.583551][T16065] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1068.862933][T16457] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2756'. [ 1068.890058][T16457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2756'. [ 1069.186465][T16438] hid-generic 0000:0000:0000.003F: pid 16438 passed too short report [ 1069.314539][T16065] pwc: Failed to set LED on/off time (-71) [ 1069.354493][T16065] pwc: send_video_command error -71 [ 1069.404562][T16065] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1069.424832][T16065] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1069.445877][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 1069.454819][ T5962] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1069.464654][T16065] usb 5-1: USB disconnect, device number 78 [ 1069.535238][T16465] netlink: 'syz.2.2760': attribute type 15 has an invalid length. [ 1069.554780][T16465] netlink: 'syz.2.2760': attribute type 18 has an invalid length. [ 1069.674083][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 1069.794845][ T5962] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1069.818121][ T5962] usb 2-1: config 0 has no interface number 0 [ 1069.856344][ T5962] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1069.894339][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.928831][ T5962] usb 2-1: Product: syz [ 1069.933147][ T5962] usb 2-1: Manufacturer: syz [ 1069.937856][ T5962] usb 2-1: SerialNumber: syz [ 1070.514575][ T5962] usb 2-1: config 0 descriptor?? [ 1070.530864][ T5962] smsc95xx v2.0.0 [ 1071.057762][ T5962] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1071.089260][ T5962] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1071.114532][ T5884] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1071.444024][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 1071.471961][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1071.484469][ T5884] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 1071.493136][ T5884] usb 5-1: config 4 has no interface number 0 [ 1071.499898][ T5884] usb 5-1: config 4 interface 30 has no altsetting 0 [ 1071.513673][ T5884] usb 5-1: string descriptor 0 read error: -22 [ 1071.520068][ T5884] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1071.529595][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.547622][ T5884] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1071.577859][ T5884] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1071.588177][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 1071.654728][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1071.670445][ T5884] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1071.682615][ T5884] usb 5-1: media controller created [ 1071.703003][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 1071.817006][ T5884] dw2102: i2c transfer failed. [ 1071.821800][T16479] dvb-usb: bulk message failed: -22 (3/0) [ 1071.854110][T16479] dw2102: i2c transfer failed. [ 1071.864077][T16479] dvb-usb: bulk message failed: -22 (3/0) [ 1071.888552][T16479] dw2102: i2c transfer failed. [ 1071.909432][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 1071.939733][ T5884] dw2102: i2c transfer failed. [ 1071.954283][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 1071.971775][ T5884] dw2102: i2c transfer failed. [ 1071.990344][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 1072.068863][ T5962] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1072.084107][ T5884] dw2102: i2c transfer failed. [ 1072.088879][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 1072.151804][ T5884] dw2102: i2c transfer failed. [ 1072.154438][ T5962] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1072.181902][ T5884] dvb-usb: bulk message failed: -22 (6/0) [ 1072.253398][ T5884] dw2102: i2c transfer failed. [ 1072.256385][ T5962] usb 2-1: USB disconnect, device number 77 [ 1072.283632][ T5884] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1072.320258][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1072.401774][ T5884] dvb-usb: bulk message failed: -22 (3/0) [ 1072.464081][ T5884] dw2102: command 0x0e transfer failed. [ 1072.478054][ T5884] dvb-usb: bulk message failed: -22 (3/0) [ 1072.497624][ T5884] dw2102: command 0x0e transfer failed. [ 1073.074071][ T5884] dvb-usb: bulk message failed: -22 (3/0) [ 1073.084425][ T5884] dw2102: command 0x0e transfer failed. [ 1073.104174][ T5884] dvb-usb: bulk message failed: -22 (3/0) [ 1073.109915][ T5884] dw2102: command 0x0e transfer failed. [ 1073.140366][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 1073.155634][ T5884] dw2102: command 0x51 transfer failed. [ 1073.161222][ T5884] dvb-usb: bulk message failed: -22 (5/0) [ 1073.264001][ T5884] dw2102: i2c probe for address 0x68 failed. [ 1073.280176][ T5884] dvb-usb: bulk message failed: -22 (5/0) [ 1073.280282][T16514] Cannot find add_set index 65532 as target [ 1073.294247][ T5884] dw2102: i2c probe for address 0x69 failed. [ 1073.323058][ T5884] dvb-usb: bulk message failed: -22 (5/0) [ 1073.356625][ T5884] dw2102: i2c probe for address 0x6a failed. [ 1073.384017][ T5884] dw2102: probing for demodulator failed. Is the external power switched on? [ 1073.433332][ T5884] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1073.683721][ T5884] rc_core: IR keymap rc-tt-1500 not found [ 1073.694033][ T5884] Registered IR keymap rc-empty [ 1073.717327][ T5884] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1073.849817][ T5884] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input112 [ 1073.896501][ T5884] dvb-usb: schedule remote query interval to 250 msecs. [ 1073.906801][ T5884] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1073.919793][ T5884] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1073.950720][ T5884] usb 5-1: USB disconnect, device number 79 [ 1074.091864][ T5884] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1074.879755][ T30] audit: type=1400 audit(1766822773.377:1322): avc: denied { ioctl } for pid=16535 comm="syz.1.2778" path="socket:[57173]" dev="sockfs" ino=57173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1075.034074][ T30] audit: type=1400 audit(1766822773.377:1323): avc: denied { write } for pid=16535 comm="syz.1.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1075.101203][T16543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.154091][ T5884] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1075.315859][T16543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.404937][T16543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.492073][ T5884] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1075.524045][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.533624][ T5884] usb 3-1: config 0 descriptor?? [ 1075.859068][ T5884] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1076.094318][ T5884] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1076.121420][ T5884] [drm] Initialized udl on minor 2 [ 1076.294054][ T5962] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1076.464438][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 1076.484853][ T5962] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1076.514336][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.553134][ T5962] usb 5-1: config 0 descriptor?? [ 1076.595275][ T5884] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1076.604232][ T5962] as10x_usb: device has been detected [ 1076.634738][ T5962] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1076.642796][ T5884] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1076.672463][ T5962] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1076.698079][ T7184] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1076.711381][ T5884] usb 3-1: USB disconnect, device number 66 [ 1076.721353][ T30] audit: type=1400 audit(1766822775.217:1324): avc: denied { firmware_load } for pid=5962 comm="kworker/1:8" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1076.757317][ T5962] as10x_usb: error during firmware upload part1 [ 1076.763802][ T5962] Registered device nBox DVB-T Dongle [ 1076.811220][ T7184] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1079.569833][ T30] audit: type=1400 audit(1766822778.057:1325): avc: denied { egress } for pid=16565 comm="syz.0.2785" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1080.216496][ T5884] usb 5-1: USB disconnect, device number 80 [ 1080.384084][T16065] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1080.394132][ T30] audit: type=1400 audit(1766822778.057:1326): avc: denied { sendto } for pid=16565 comm="syz.0.2785" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1080.744103][T16065] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.767431][T16065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.815979][T16065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.868140][T16065] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1080.892712][ T5884] Unregistered device nBox DVB-T Dongle [ 1080.898932][ T5884] as10x_usb: device has been disconnected [ 1080.970060][T16065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.021937][T16065] usb 1-1: config 0 descriptor?? [ 1081.111189][T16583] vxcan3: entered promiscuous mode [ 1081.284611][ T5884] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1081.654205][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1081.663350][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.714955][ T5884] usb 5-1: config 0 descriptor?? [ 1081.754262][ T5884] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1082.917718][T16065] wacom 0003:056A:0010.0040: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1082.974429][T16065] wacom 0003:056A:0010.0040: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 [ 1082.999792][ T5884] gspca_stv06xx: I2C: Read error writing address: -71 [ 1083.012663][ T5884] usb 5-1: USB disconnect, device number 81 [ 1083.035549][T16065] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.0040/input/input113 [ 1083.362708][T16065] usb 1-1: USB disconnect, device number 71 [ 1084.012075][T16599] fido_id[16599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1084.079287][T16608] Cannot find add_set index 65532 as target [ 1084.444048][ T5962] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1084.812392][T16624] comedi comedi3: pcl724: I/O port conflict (0x5,4) [ 1084.814479][ T5962] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1084.828157][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.838099][ T5962] usb 3-1: Product: syz [ 1085.267165][ T5962] usb 3-1: Manufacturer: syz [ 1085.272975][ T5962] usb 3-1: SerialNumber: syz [ 1085.298028][ T5962] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1085.371325][T16065] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1085.609380][ T5884] usb 3-1: USB disconnect, device number 67 [ 1086.346048][ T30] audit: type=1400 audit(1766822784.667:1327): avc: denied { map } for pid=16630 comm="syz.3.2804" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1086.495038][T16065] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1086.543405][ T30] audit: type=1400 audit(1766822784.667:1328): avc: denied { execute } for pid=16630 comm="syz.3.2804" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1086.568838][T16065] ath9k_htc: Failed to initialize the device [ 1086.585678][ T5884] usb 3-1: ath9k_htc: USB layer deinitialized [ 1086.645535][ T30] audit: type=1400 audit(1766822784.737:1329): avc: denied { watch } for pid=16630 comm="syz.3.2804" path="/558" dev="tmpfs" ino=2938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1086.888400][T16645] FAULT_INJECTION: forcing a failure. [ 1086.888400][T16645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.938126][T16645] CPU: 1 UID: 0 PID: 16645 Comm: syz.0.2809 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.938164][T16645] Tainted: [L]=SOFTLOCKUP [ 1086.938171][T16645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1086.938182][T16645] Call Trace: [ 1086.938190][T16645] [ 1086.938198][T16645] dump_stack_lvl+0x16c/0x1f0 [ 1086.938228][T16645] should_fail_ex+0x512/0x640 [ 1086.938260][T16645] _copy_from_iter+0x2a4/0x16c0 [ 1086.938293][T16645] ? __alloc_skb+0x220/0x410 [ 1086.938320][T16645] ? __alloc_skb+0x35d/0x410 [ 1086.938348][T16645] ? __pfx__copy_from_iter+0x10/0x10 [ 1086.938375][T16645] ? netlink_autobind.isra.0+0x158/0x370 [ 1086.938407][T16645] netlink_sendmsg+0x820/0xdd0 [ 1086.938434][T16645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.938467][T16645] ____sys_sendmsg+0xa5d/0xc30 [ 1086.938492][T16645] ? copy_msghdr_from_user+0x10a/0x160 [ 1086.938511][T16645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.938547][T16645] ___sys_sendmsg+0x134/0x1d0 [ 1086.938568][T16645] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.938617][T16645] __sys_sendmsg+0x16d/0x220 [ 1086.938637][T16645] ? __pfx___sys_sendmsg+0x10/0x10 [ 1086.938673][T16645] do_syscall_64+0xcd/0xf80 [ 1086.938700][T16645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.938719][T16645] RIP: 0033:0x7f806338f749 [ 1086.938734][T16645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.938758][T16645] RSP: 002b:00007f80641bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.938778][T16645] RAX: ffffffffffffffda RBX: 00007f80635e5fa0 RCX: 00007f806338f749 [ 1086.938790][T16645] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1086.938801][T16645] RBP: 00007f80641bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.938812][T16645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.938823][T16645] R13: 00007f80635e6038 R14: 00007f80635e5fa0 R15: 00007ffc8eb3bbb8 [ 1086.938849][T16645] [ 1088.224095][ T5884] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1088.387572][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1088.404198][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.424516][ T5884] usb 1-1: config 0 descriptor?? [ 1088.438714][ T5884] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1088.850056][T16656] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2811'. [ 1088.912819][T16652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2811'. [ 1088.923865][ T5884] pwc: Failed to set LED on/off time (-71) [ 1088.965837][ T5884] pwc: send_video_command error -71 [ 1088.971079][ T5884] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1088.986930][ T5884] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1089.234795][ T5884] usb 1-1: USB disconnect, device number 72 [ 1089.415195][T16663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.477622][T16663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.664312][ T5884] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1089.895840][ T5884] usb 2-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 1089.906499][ T5884] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.924882][ T5884] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1089.978096][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.013234][T16065] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1090.046905][T16065] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1090.074915][ T5884] usb 2-1: config 0 descriptor?? [ 1090.397261][T16673] hid-generic 0000:0000:0000.0041: pid 16673 passed too short report [ 1090.654147][ T5884] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1091.195496][ T5884] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1091.203506][ T5884] usb 4-1: config 1 has no interface number 0 [ 1091.218743][ T7184] usb 2-1: USB disconnect, device number 78 [ 1091.248884][ T5884] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1091.326763][ T5884] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1091.361270][ T5884] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.409364][ T5884] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1091.433399][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.635048][ T5884] usb 4-1: Product: syz [ 1091.639238][ T5884] usb 4-1: Manufacturer: syz [ 1091.643843][ T5884] usb 4-1: SerialNumber: syz [ 1091.673023][T16678] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1091.964351][T16678] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1092.706880][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.715631][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.809941][T16706] ubi: mtd0 is already attached to ubi31 [ 1092.895726][ T5884] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1093.131847][ T5884] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 1093.138668][ T5884] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 1093.146309][ T5884] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 1093.153013][ T5884] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 1093.167020][ T5884] usb 4-1: USB disconnect, device number 92 [ 1093.175219][ T5884] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 1093.234804][ T5884] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1093.886878][ T30] audit: type=1400 audit(1766822792.387:1330): avc: denied { name_bind } for pid=16717 comm="syz.3.2829" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1093.924772][ T30] audit: type=1400 audit(1766822792.417:1331): avc: denied { ioctl } for pid=16717 comm="syz.3.2829" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1094.004381][T16065] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 1094.044141][ T5962] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1094.070051][T16724] netlink: zone id is out of range [ 1094.075463][T16724] netlink: zone id is out of range [ 1094.080822][T16724] netlink: zone id is out of range [ 1094.086267][T16724] netlink: zone id is out of range [ 1094.091704][T16724] netlink: zone id is out of range [ 1094.097164][T16724] netlink: zone id is out of range [ 1094.102393][T16724] netlink: zone id is out of range [ 1094.107843][T16724] netlink: zone id is out of range [ 1094.113066][T16724] netlink: zone id is out of range [ 1094.118406][T16724] netlink: zone id is out of range [ 1094.166227][T16065] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1094.224090][ T5962] usb 5-1: config 0 has no interfaces? [ 1094.230708][ T5962] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1094.256453][T16065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.289023][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.313772][T16065] usb 2-1: config 0 descriptor?? [ 1094.324199][ T5962] usb 5-1: config 0 descriptor?? [ 1094.339500][T16065] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1094.607134][T16732] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2828'. [ 1094.630866][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2828'. [ 1095.152035][T16065] pwc: Failed to set LED on/off time (-71) [ 1095.161930][T16065] pwc: send_video_command error -71 [ 1095.167365][T16065] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1095.175558][T16065] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1095.223692][ T5962] usb 5-1: USB disconnect, device number 82 [ 1095.234903][T16065] usb 2-1: USB disconnect, device number 79 [ 1095.455890][T16734] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1095.826399][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 1095.954565][T16739] netlink: 'syz.2.2834': attribute type 15 has an invalid length. [ 1096.083691][T16739] netlink: 'syz.2.2834': attribute type 18 has an invalid length. [ 1099.114149][ T24] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1099.304264][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1099.324802][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1099.343235][ T24] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 1099.352734][ T24] usb 5-1: config 4 has no interface number 0 [ 1099.367342][ T24] usb 5-1: config 4 interface 30 has no altsetting 0 [ 1099.381956][ T24] usb 5-1: string descriptor 0 read error: -22 [ 1099.390589][ T24] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1099.400709][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.426292][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1099.434413][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1099.440928][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1099.471923][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1099.500494][T16782] FAULT_INJECTION: forcing a failure. [ 1099.500494][T16782] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.513678][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz.2.2846 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.513712][T16782] Tainted: [L]=SOFTLOCKUP [ 1099.513719][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.513731][T16782] Call Trace: [ 1099.513738][T16782] [ 1099.513745][T16782] dump_stack_lvl+0x16c/0x1f0 [ 1099.513774][T16782] should_fail_ex+0x512/0x640 [ 1099.513799][T16782] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1099.513824][T16782] should_failslab+0xc2/0x120 [ 1099.513848][T16782] __kvmalloc_node_noprof+0x14a/0xa40 [ 1099.513870][T16782] ? kasan_check_range+0x15c/0x1b0 [ 1099.513895][T16782] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 1099.513925][T16782] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 1099.513949][T16782] __nf_hook_entries_try_shrink+0x164/0x400 [ 1099.513976][T16782] __nf_unregister_net_hook+0x2af/0x660 [ 1099.514001][T16782] nf_unregister_net_hooks+0x11b/0x160 [ 1099.514024][T16782] ip_vs_unregister_hooks+0xd8/0x140 [ 1099.514046][T16782] ip_vs_unlink_service+0x9a4/0xbf0 [ 1099.514077][T16782] ip_vs_flush+0x1c0/0x230 [ 1099.514104][T16782] do_ip_vs_set_ctl+0xe9a/0x11d0 [ 1099.514132][T16782] ? preempt_schedule_thunk+0x16/0x30 [ 1099.514156][T16782] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1099.514188][T16782] ? __mutex_lock+0x669/0x1ca0 [ 1099.514217][T16782] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1099.514242][T16782] ? sockopt_release_sock+0x52/0x60 [ 1099.514264][T16782] ? __mutex_unlock_slowpath+0x161/0x790 [ 1099.514291][ T24] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1099.514309][T16782] ? nf_setsockopt+0x8d/0xf0 [ 1099.514331][T16782] nf_setsockopt+0x8d/0xf0 [ 1099.514354][T16782] ip_setsockopt+0xcb/0xf0 [ 1099.514382][T16782] sctp_setsockopt+0x16c/0xb8c0 [ 1099.514407][T16782] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1099.514433][T16782] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1099.514458][T16782] ? find_held_lock+0x2b/0x80 [ 1099.514487][T16782] ? selinux_socket_setsockopt+0x6a/0x80 [ 1099.514504][T16782] ? sock_common_setsockopt+0x2e/0xf0 [ 1099.514523][T16782] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1099.514545][T16782] do_sock_setsockopt+0xf3/0x1d0 [ 1099.514567][T16782] __sys_setsockopt+0x1a0/0x230 [ 1099.514587][T16782] __x64_sys_setsockopt+0xbd/0x160 [ 1099.514601][T16782] ? do_syscall_64+0x91/0xf80 [ 1099.514620][T16782] ? lockdep_hardirqs_on+0x7c/0x110 [ 1099.514640][T16782] do_syscall_64+0xcd/0xf80 [ 1099.514662][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.514679][T16782] RIP: 0033:0x7f0cbf58f749 [ 1099.514693][T16782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.514713][T16782] RSP: 002b:00007f0cc042b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1099.514730][T16782] RAX: ffffffffffffffda RBX: 00007f0cbf7e6180 RCX: 00007f0cbf58f749 [ 1099.514740][T16782] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000007 [ 1099.514750][T16782] RBP: 00007f0cc042b090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.514760][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.514769][T16782] R13: 00007f0cbf7e6218 R14: 00007f0cbf7e6180 R15: 00007ffd008b2638 [ 1099.514792][T16782] [ 1099.836730][ T24] usb 5-1: media controller created [ 1099.842153][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1099.873944][ T24] dw2102: i2c transfer failed. [ 1099.882222][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1099.888564][ T24] dw2102: i2c transfer failed. [ 1099.894315][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1099.900562][ T24] dw2102: i2c transfer failed. [ 1099.906391][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1099.933251][ T24] dw2102: i2c transfer failed. [ 1099.938796][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1099.952758][ T24] dw2102: i2c transfer failed. [ 1099.959896][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1099.966924][ T24] dw2102: i2c transfer failed. [ 1099.972285][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1099.994686][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1100.015439][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1100.021578][ T24] dw2102: command 0x0e transfer failed. [ 1100.028210][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1100.039028][ T24] dw2102: command 0x0e transfer failed. [ 1100.372567][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1100.433401][ T24] dw2102: command 0x0e transfer failed. [ 1100.445241][T16791] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1100.454048][T16791] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1100.463141][T16791] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1100.475081][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1100.481683][ T24] dw2102: command 0x0e transfer failed. [ 1100.507859][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1100.547295][ T24] dw2102: command 0x51 transfer failed. [ 1100.558904][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1100.578637][ T24] dw2102: i2c probe for address 0x68 failed. [ 1100.598095][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1100.624061][ T24] dw2102: i2c probe for address 0x69 failed. [ 1100.635526][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 1100.642270][ T24] dw2102: i2c probe for address 0x6a failed. [ 1100.659427][T16794] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1100.678710][ T24] dw2102: probing for demodulator failed. Is the external power switched on? [ 1100.691939][ T24] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1100.795296][ T24] rc_core: IR keymap rc-tt-1500 not found [ 1100.803018][ T24] Registered IR keymap rc-empty [ 1100.827108][ T24] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1100.879510][ T24] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input117 [ 1100.919034][ T24] dvb-usb: schedule remote query interval to 250 msecs. [ 1100.956402][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1100.981274][ T24] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1101.016672][ T24] usb 5-1: USB disconnect, device number 83 [ 1101.097764][T15755] udevd[15755]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1101.488140][ T24] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1102.628476][T16823] Cannot find add_set index 65532 as target [ 1104.033525][T16065] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1104.096038][ T30] audit: type=1400 audit(1766822802.257:1332): avc: denied { bind } for pid=16831 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1104.240452][T16065] usb 5-1: Using ep0 maxpacket: 16 [ 1104.280780][ T30] audit: type=1400 audit(1766822802.527:1333): avc: denied { setopt } for pid=16831 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1104.302645][T16065] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.345634][T16065] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1104.383093][T16065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.394208][ T30] audit: type=1400 audit(1766822802.527:1334): avc: denied { write } for pid=16831 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1104.422603][ T30] audit: type=1400 audit(1766822802.527:1335): avc: denied { read } for pid=16831 comm="syz.0.2859" lport=36164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1104.475984][T16065] usb 5-1: config 0 descriptor?? [ 1104.487872][T16065] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input118 [ 1104.571821][T16839] program syz.3.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.598713][T16839] program syz.3.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.621555][T16839] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1104.634505][T16839] lo: entered allmulticast mode [ 1104.642715][T16839] tunl0: entered allmulticast mode [ 1104.650514][T16839] gre0: entered allmulticast mode [ 1104.666326][T16839] gretap0: entered allmulticast mode [ 1104.678290][T16839] erspan0: entered allmulticast mode [ 1104.688088][T16830] netlink: 'syz.4.2858': attribute type 2 has an invalid length. [ 1104.703338][T16839] ip_vti0: entered allmulticast mode [ 1104.714889][T16839] ip6_vti0: entered allmulticast mode [ 1104.723287][T16839] sit0: entered allmulticast mode [ 1104.734758][T16839] ip6tnl0: entered allmulticast mode [ 1104.746318][T16839] ip6gre0: entered allmulticast mode [ 1105.464372][T16839] ip6gretap0: entered allmulticast mode [ 1105.529791][T16839] vcan0: entered allmulticast mode [ 1105.584930][T16839] bond0: entered allmulticast mode [ 1105.590381][T16839] bond_slave_0: entered allmulticast mode [ 1105.596694][T16839] bond_slave_1: entered allmulticast mode [ 1105.602646][T16839] batadv0: entered allmulticast mode [ 1105.616229][T16839] team0: entered allmulticast mode [ 1105.624090][T16839] team_slave_0: entered allmulticast mode [ 1105.631877][T16860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.645832][T16839] team_slave_1: entered allmulticast mode [ 1105.657580][T16839] dummy0: entered allmulticast mode [ 1105.677401][T16839] nlmon0: entered allmulticast mode [ 1105.693712][T16839] caif0: entered allmulticast mode [ 1105.703759][T16861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.724833][T16839] vxcan0: entered allmulticast mode [ 1105.734817][T16839] vxcan1: entered allmulticast mode [ 1105.743932][T16839] veth0: entered allmulticast mode [ 1105.756313][T16839] veth1: entered allmulticast mode [ 1105.769890][T16839] wg0: entered allmulticast mode [ 1105.780556][T16839] wg1: left promiscuous mode [ 1105.791343][T16839] wg2: entered allmulticast mode [ 1105.806165][T16839] veth0_to_bridge: entered allmulticast mode [ 1105.819676][T16839] bridge_slave_0: entered allmulticast mode [ 1105.831979][T16839] veth1_to_bridge: entered allmulticast mode [ 1105.847533][T16839] bridge_slave_1: entered allmulticast mode [ 1105.857969][T16839] veth0_to_bond: entered allmulticast mode [ 1105.872575][T16862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.884289][ T5962] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1105.899982][T16839] veth1_to_bond: entered allmulticast mode [ 1105.921601][T16839] veth0_to_team: entered allmulticast mode [ 1105.944209][T16839] veth1_to_team: entered allmulticast mode [ 1105.960820][T16839] veth0_to_batadv: entered allmulticast mode [ 1105.985890][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.993735][T16839] batadv_slave_0: entered allmulticast mode [ 1106.016540][T16839] veth1_to_batadv: entered allmulticast mode [ 1106.028164][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.044293][ T5962] usb 3-1: Using ep0 maxpacket: 8 [ 1106.049838][T16839] batadv_slave_1: entered allmulticast mode [ 1106.066979][T16839] xfrm0: entered allmulticast mode [ 1106.086090][T16839] veth0_to_hsr: entered allmulticast mode [ 1106.093287][ T5962] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1106.119920][T16839] hsr_slave_0: entered allmulticast mode [ 1106.128203][ T5962] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 1106.139327][T16839] veth1_to_hsr: entered allmulticast mode [ 1106.154211][ T5962] usb 3-1: config 4 has no interface number 0 [ 1106.160723][ T5962] usb 3-1: config 4 interface 30 has no altsetting 0 [ 1106.175532][T16839] hsr_slave_1: entered allmulticast mode [ 1106.198424][T16839] hsr0: entered allmulticast mode [ 1106.215165][ T5962] usb 3-1: string descriptor 0 read error: -22 [ 1106.223313][ T5962] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1106.239130][T16839] veth1_virt_wifi: entered allmulticast mode [ 1106.245480][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.259518][T16839] veth0_virt_wifi: entered allmulticast mode [ 1106.270610][ T5962] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1106.287766][ T5962] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1106.298736][T16839] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1106.306938][ T5962] dvb-usb: bulk message failed: -22 (2/0) [ 1106.320734][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1106.333116][T16839] veth1_vlan: entered allmulticast mode [ 1106.340235][ T5962] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1106.349823][T16839] veth0_vlan: entered allmulticast mode [ 1106.356075][ T5962] usb 3-1: media controller created [ 1106.365850][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 1106.377024][T16839] vlan1: entered allmulticast mode [ 1106.382573][ T5962] dw2102: i2c transfer failed. [ 1106.389926][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 1106.396313][T16839] macvlan0: entered allmulticast mode [ 1106.403423][ T5962] dw2102: i2c transfer failed. [ 1106.410453][T16839] macvlan1: entered allmulticast mode [ 1106.418397][T16839] ipvlan0: entered allmulticast mode [ 1106.423919][T16839] ipvlan1: entered allmulticast mode [ 1106.429539][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 1106.435622][ T5962] dw2102: i2c transfer failed. [ 1106.441599][T16839] veth1_macvtap: entered allmulticast mode [ 1106.447706][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 1106.455059][ T5962] dw2102: i2c transfer failed. [ 1106.460556][T16839] veth0_macvtap: entered allmulticast mode [ 1106.466813][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 1106.475339][ T5962] dw2102: i2c transfer failed. [ 1106.480188][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 1106.487269][T16839] macvtap0: entered allmulticast mode [ 1106.496460][T16839] macsec0: entered allmulticast mode [ 1106.502183][ T5962] dw2102: i2c transfer failed. [ 1106.510095][ T5962] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1106.518052][T16839] geneve0: entered allmulticast mode [ 1106.528903][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1106.540510][T16839] geneve1: entered allmulticast mode [ 1106.568354][T16839] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1106.576724][ T5962] dvb-usb: bulk message failed: -22 (3/0) [ 1106.582496][ T5962] dw2102: command 0x0e transfer failed. [ 1106.600852][T16839] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1106.608843][ T5962] dvb-usb: bulk message failed: -22 (3/0) [ 1106.615202][ T5962] dw2102: command 0x0e transfer failed. [ 1106.623171][T16839] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1106.624277][T16851] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1106.639452][T16839] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1106.664540][T16839] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 1106.692727][T16839] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1106.717597][T16839] ip6erspan0: entered allmulticast mode [ 1106.723320][T16839] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode [ 1106.744223][T16839] mac80211_hwsim hwsim19 wlan3: entered allmulticast mode [ 1106.751663][T16839] mac80211_hwsim hwsim26 wlan4: entered allmulticast mode [ 1106.759720][T16839] mac80211_hwsim hwsim29 wlan5: entered allmulticast mode [ 1106.767832][T16839] mac80211_hwsim hwsim35 wlan6: entered allmulticast mode [ 1106.776052][T16839] bond1: entered allmulticast mode [ 1106.782107][T16839] mac80211_hwsim hwsim36 wlan7: entered allmulticast mode [ 1106.790876][T16851] usb 1-1: config index 0 descriptor too short (expected 23064, got 18) [ 1106.799465][T16839] mac80211_hwsim hwsim44 wlan8: entered allmulticast mode [ 1106.806871][T16851] usb 1-1: config 255 has too many interfaces: 233, using maximum allowed: 32 [ 1106.816009][T16839] mac80211_hwsim hwsim45 wlan9: entered allmulticast mode [ 1106.824183][T16851] usb 1-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 1106.835737][T16839] vlan2: entered allmulticast mode [ 1106.840992][T16839] mac80211_hwsim hwsim54 wlan10: entered allmulticast mode [ 1106.848366][T16851] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 233 [ 1106.858062][T16839] mac80211_hwsim hwsim57 wlan11: entered allmulticast mode [ 1106.865585][T16839] mac80211_hwsim hwsim58 wlan12: entered allmulticast mode [ 1106.875504][T16851] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=78.61 [ 1106.884832][T16851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.893144][T16839] vxlan0: left promiscuous mode [ 1106.898074][T16851] usb 1-1: Product: syz [ 1106.902232][T16851] usb 1-1: Manufacturer: syz [ 1106.904057][T16839] vxlan0: entered allmulticast mode [ 1106.906980][T16851] usb 1-1: SerialNumber: syz [ 1106.916989][T16839] bond2: entered allmulticast mode [ 1106.922459][T16839] geneve2: entered allmulticast mode [ 1106.929882][ T5962] dvb-usb: bulk message failed: -22 (3/0) [ 1106.935824][ T5962] dw2102: command 0x0e transfer failed. [ 1106.941382][ T5962] dvb-usb: bulk message failed: -22 (3/0) [ 1106.951074][T16839] batman_adv: batadv0: Interface deactivated: gretap1 [ 1106.958392][ T5962] dw2102: command 0x0e transfer failed. [ 1106.964440][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 1106.970568][T16839] gretap1: entered allmulticast mode [ 1106.976073][ T5962] dw2102: command 0x51 transfer failed. [ 1106.981632][ T5962] dvb-usb: bulk message failed: -22 (5/0) [ 1106.994514][T16830] !9: entered promiscuous mode [ 1107.003279][ T5927] syz1: Port: 1 Link DOWN [ 1107.010348][ T5962] dw2102: i2c probe for address 0x68 failed. [ 1107.041680][ T6012] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.047780][ T5169] bcm5974 5-1:0.0: could not read from device [ 1107.058357][ T5962] dvb-usb: bulk message failed: -22 (5/0) [ 1107.061676][ T6012] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.075699][ T5962] dw2102: i2c probe for address 0x69 failed. [ 1107.081694][ T5962] dvb-usb: bulk message failed: -22 (5/0) [ 1107.089176][ T5962] dw2102: i2c probe for address 0x6a failed. [ 1107.096417][ T5962] dw2102: probing for demodulator failed. Is the external power switched on? [ 1107.109952][ T5169] bcm5974 5-1:0.0: could not read from device [ 1107.159781][T16065] usb 5-1: USB disconnect, device number 84 [ 1107.185156][ T5962] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1107.215426][T14396] bcm5974 5-1:0.0: could not read from device [ 1107.341227][ T6012] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.356296][ T6012] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.121852][ T6012] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.403394][ T6012] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.486280][ T6012] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.495660][ T5938] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1108.506792][ T6012] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.537900][T16065] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1108.584565][ T5962] rc_core: IR keymap rc-tt-1500 not found [ 1108.600582][ T5962] Registered IR keymap rc-empty [ 1108.610904][ T5962] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1108.643124][ T5962] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input119 [ 1108.677882][ T5938] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1108.689109][ T5962] dvb-usb: schedule remote query interval to 250 msecs. [ 1108.706045][T16065] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1108.723739][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.742303][ T5962] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1108.754107][T16065] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 1108.775655][ T5938] usb 4-1: Product: syz [ 1108.779853][ T5938] usb 4-1: Manufacturer: syz [ 1108.798434][ T5962] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1108.808050][T16065] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1108.814807][ T5938] usb 4-1: SerialNumber: syz [ 1108.851629][T16065] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1108.864385][ T5962] usb 3-1: USB disconnect, device number 68 [ 1108.901454][T16065] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1108.915804][T16065] usb 5-1: Product: syz [ 1108.945457][T16065] usb 5-1: Manufacturer: syz [ 1108.950106][T16065] usb 5-1: SerialNumber: syz [ 1108.987321][ T5962] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1108.997167][T16065] usb 5-1: config 0 descriptor?? [ 1109.006891][T16888] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1109.065048][T16065] usb 5-1: selecting invalid altsetting 0 [ 1109.082561][ T5938] net_ratelimit: 2 callbacks suppressed [ 1109.082586][ T5938] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1109.141529][ T5938] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1109.230944][ T5938] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1109.290712][ T5938] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1109.346207][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.361459][ T5938] usb 4-1: USB disconnect, device number 93 [ 1109.402310][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.442766][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'. [ 1109.457447][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.493102][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.518854][T16898] netlink: 'syz.0.2873': attribute type 15 has an invalid length. [ 1109.533094][T16898] netlink: 'syz.0.2873': attribute type 18 has an invalid length. [ 1109.543521][ T30] audit: type=1400 audit(1766822808.047:1336): avc: denied { shutdown } for pid=16874 comm="syz.4.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1109.543847][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.672170][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.727958][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.771261][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.779465][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.787471][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.867941][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.915238][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.927439][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.955738][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1109.987776][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.114257][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.122013][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.156162][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.166098][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.174324][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.186621][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.195688][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.203837][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.212637][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.284519][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.295125][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.524231][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.572527][T16888] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1110.589932][T16907] netlink: 'syz.1.2871': attribute type 1 has an invalid length. [ 1110.871166][T16907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1111.029140][T16909] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1111.069267][ T5938] usb 5-1: USB disconnect, device number 85 [ 1111.175988][T16907] bond3: (slave dummy0): making interface the new active one [ 1111.205157][T16907] dummy0: entered promiscuous mode [ 1111.210658][T16907] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1111.374282][ T976] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1111.383503][T16922] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1111.644114][T16922] audit: out of memory in audit_log_start [ 1111.702832][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.713926][T16922] omfs: Invalid superblock (0) [ 1111.714282][ T5938] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1111.726239][ T976] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1111.726268][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.754853][ T976] usb 3-1: config 0 descriptor?? [ 1111.804146][T16851] usb 1-1: USB disconnect, device number 73 [ 1111.883111][T16909] bond3 (unregistering): (slave veth3): Releasing active interface [ 1111.907807][ T5938] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1111.971824][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.206852][ T5938] usb 5-1: config 0 descriptor?? [ 1112.213103][T16909] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1112.229065][ T5938] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1112.230019][T16909] bond3 (unregistering): Released all slaves [ 1112.518114][T16930] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2877'. [ 1112.602118][T16930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2877'. [ 1112.929413][ T30] audit: type=1400 audit(1766822811.417:1337): avc: denied { mounton } for pid=16936 comm="syz.3.2884" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1113.015916][ T5938] pwc: Failed to set LED on/off time (-71) [ 1113.035031][ T5938] pwc: send_video_command error -71 [ 1113.062361][ T5938] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1113.082651][ T5938] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1113.133360][ T5938] usb 5-1: USB disconnect, device number 86 [ 1113.165974][ T5962] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1113.325823][ T5962] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1113.351752][ T5962] usb 4-1: config 0 has no interface number 0 [ 1113.367261][ T5962] usb 4-1: config 0 interface 122 has no altsetting 0 [ 1113.383351][ T5962] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1113.393449][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.406077][ T5962] usb 4-1: Product: syz [ 1113.411798][ T5962] usb 4-1: Manufacturer: syz [ 1113.423096][ T5962] usb 4-1: SerialNumber: syz [ 1113.431511][ T5962] usb 4-1: config 0 descriptor?? [ 1113.555882][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 1113.621713][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1113.640278][T16938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.664334][T16938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.678173][ T976] usb 3-1: USB disconnect, device number 69 [ 1114.800436][ T30] audit: type=1400 audit(1766822813.297:1338): avc: denied { getopt } for pid=16944 comm="syz.0.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1114.824179][ T30] audit: type=1400 audit(1766822813.317:1339): avc: denied { write } for pid=16944 comm="syz.0.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1114.878211][ T30] audit: type=1400 audit(1766822813.317:1340): avc: denied { read } for pid=16944 comm="syz.0.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1114.985601][ T5938] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1115.230661][ T5938] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1115.396555][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.894911][T16968] PKCS8: Unsupported PKCS#8 version [ 1116.044215][ T5938] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1116.058570][ T5938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1116.059571][ T30] audit: type=1400 audit(1766822814.557:1341): avc: denied { setopt } for pid=16967 comm="syz.4.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1116.067583][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1116.067611][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1116.068887][ T5938] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1116.118642][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1116.127574][T16968] netlink: 'syz.4.2893': attribute type 10 has an invalid length. [ 1116.135772][ T5938] usb 3-1: Product: syz [ 1116.520204][T16851] usb 4-1: USB disconnect, device number 94 [ 1116.530762][T16851] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1116.541164][ T30] audit: type=1400 audit(1766822814.597:1342): avc: denied { open } for pid=16967 comm="syz.4.2893" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1116.594562][ T5938] usb 3-1: Manufacturer: syz [ 1116.606798][ T5938] cdc_wdm 3-1:1.0: skipping garbage [ 1116.627451][ T5938] cdc_wdm 3-1:1.0: skipping garbage [ 1116.701738][ T30] audit: type=1400 audit(1766822815.197:1343): avc: denied { accept } for pid=16961 comm="syz.1.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1116.742955][ T5938] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1116.749453][ T5938] cdc_wdm 3-1:1.0: Unknown control protocol [ 1116.934058][ T30] audit: type=1400 audit(1766822815.197:1344): avc: denied { write } for pid=16961 comm="syz.1.2890" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1117.010066][T16851] usb 3-1: USB disconnect, device number 70 [ 1117.518602][T16981] input: syz0 as /devices/virtual/input/input120 [ 1117.621335][ T9244] Bluetooth: hci5: Frame reassembly failed (-84) [ 1117.632087][ T9244] Bluetooth: hci5: Frame reassembly failed (-84) [ 1117.880789][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 1119.421862][T16983] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1119.430815][T16983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1119.442692][T16983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1119.454254][T16983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1119.466515][T16983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1119.639709][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1119.640131][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 1119.650586][ T30] audit: type=1400 audit(1766822818.147:1345): avc: denied { mounton } for pid=17005 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1120.218351][T17015] Cannot find add_set index 65532 as target [ 1121.419418][T17019] set match dimension is over the limit! [ 1121.478936][ T9234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1121.513236][ T9234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.714253][T17007] Bluetooth: hci6: command tx timeout [ 1121.995509][ T5884] libceph: connect (1)[c::]:6789 error -22 [ 1122.003123][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 1122.076666][T17030] ceph: No mds server is up or the cluster is laggy [ 1122.091414][ T9234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.104079][ T9234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.287762][ T9234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.371272][ T9234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.530411][ T9234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.554098][ T9234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.612256][T17044] fuse: Bad value for 'fd' [ 1122.870651][T17005] chnl_net:caif_netlink_parms(): no params data found [ 1123.174290][ T5962] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1123.474674][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 1123.500037][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1123.557209][ T5962] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1123.671147][T17005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.684352][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.694420][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.703399][ T5962] usb 1-1: Product: syz [ 1123.807548][T17007] Bluetooth: hci6: command tx timeout [ 1124.238466][T17005] bridge_slave_0: entered allmulticast mode [ 1124.244512][ T5962] usb 1-1: Manufacturer: syz [ 1124.275826][ T5962] usb 1-1: SerialNumber: syz [ 1124.285764][T17005] bridge_slave_0: entered promiscuous mode [ 1124.299430][ T5962] usb 1-1: config 0 descriptor?? [ 1124.346198][T17066] can0: slcan on ttyS3. [ 1124.365613][T17005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.394207][ T5962] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1124.408978][T17005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.421888][ T5962] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1124.429280][T17005] bridge_slave_1: entered allmulticast mode [ 1124.455291][T17067] can0 (unregistered): slcan off ttyS3. [ 1124.545824][T17005] bridge_slave_1: entered promiscuous mode [ 1124.674333][ T5962] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1125.050502][ T5962] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1125.174055][ T5962] em28xx 1-1:0.0: board has no eeprom [ 1125.274983][T17081] Cannot find add_set index 65532 as target [ 1125.468560][ T9234] bridge_slave_1: left allmulticast mode [ 1125.485453][ T5962] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1125.505430][ T9234] bridge_slave_1: left promiscuous mode [ 1125.506798][ T5962] em28xx 1-1:0.0: dvb set to bulk mode. [ 1125.541367][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.545691][ T5938] em28xx 1-1:0.0: Binding DVB extension [ 1125.593617][ T5962] usb 1-1: USB disconnect, device number 74 [ 1125.631938][ T5962] em28xx 1-1:0.0: Disconnecting em28xx [ 1125.685966][ T9234] bridge_slave_0: left allmulticast mode [ 1125.691641][ T9234] bridge_slave_0: left promiscuous mode [ 1125.731810][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.764507][ T5938] em28xx 1-1:0.0: Registering input extension [ 1125.836448][ T5962] em28xx 1-1:0.0: Closing input extension [ 1125.884319][T17007] Bluetooth: hci6: command tx timeout [ 1126.146925][ T5962] em28xx 1-1:0.0: Freeing device [ 1126.167189][T17089] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2920'. [ 1126.353608][ T30] audit: type=1400 audit(1766822824.847:1346): avc: denied { append } for pid=17094 comm="syz.0.2922" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1126.430377][ T30] audit: type=1400 audit(1766822824.927:1347): avc: denied { mount } for pid=17094 comm="syz.0.2922" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1127.558685][ T5962] SELinux: failure in sel_netif_sid_slow(), invalid network interface (104) [ 1127.697828][ T9234] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1127.955153][T17007] Bluetooth: hci6: command tx timeout [ 1128.189626][ T9234] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1128.682951][ T9234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.722313][ T9234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.832645][ T9234] bond0 (unregistering): Released all slaves [ 1129.120645][ T9234] bond1 (unregistering): Released all slaves [ 1129.133646][ T9234] bond2 (unregistering): Released all slaves [ 1129.182893][T17005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.256375][T17005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.377771][ T30] audit: type=1400 audit(1766822827.877:1348): avc: denied { shutdown } for pid=17139 comm="syz.4.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1130.105440][T17151] GUP no longer grows the stack in syz.0.2931 (17151): 200000005000-200000009000 (200000004000) [ 1130.207150][T17151] CPU: 1 UID: 0 PID: 17151 Comm: syz.0.2931 Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.207185][T17151] Tainted: [L]=SOFTLOCKUP [ 1130.207193][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1130.207206][T17151] Call Trace: [ 1130.207214][T17151] [ 1130.207222][T17151] dump_stack_lvl+0x16c/0x1f0 [ 1130.207252][T17151] gup_vma_lookup+0x1d2/0x220 [ 1130.207279][T17151] fixup_user_fault+0x26e/0x540 [ 1130.207304][T17151] ? futex_lock_pi+0x687/0x7c0 [ 1130.207333][T17151] fault_in_user_writeable+0x70/0xe0 [ 1130.207359][T17151] futex_lock_pi+0x690/0x7c0 [ 1130.207381][T17151] ? __pfx_futex_lock_pi+0x10/0x10 [ 1130.207397][T17151] ? __futex_wait+0x24b/0x2f0 [ 1130.207429][T17151] ? futex_private_hash_put+0x160/0x1b0 [ 1130.207452][T17151] ? __pfx_futex_wake_mark+0x10/0x10 [ 1130.207478][T17151] do_futex+0x11a/0x350 [ 1130.207498][T17151] ? __pfx_do_futex+0x10/0x10 [ 1130.207519][T17151] ? __vm_munmap+0x1d2/0x380 [ 1130.207538][T17151] __x64_sys_futex+0x1e0/0x4c0 [ 1130.207562][T17151] ? __pfx___x64_sys_futex+0x10/0x10 [ 1130.207583][T17151] ? xfd_validate_state+0x61/0x180 [ 1130.207599][T17151] ? __sys_setsockopt+0x1c0/0x230 [ 1130.207619][T17151] do_syscall_64+0xcd/0xf80 [ 1130.207640][T17151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.207655][T17151] RIP: 0033:0x7f806338f749 [ 1130.207668][T17151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.207683][T17151] RSP: 002b:00007f8060df2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1130.207698][T17151] RAX: ffffffffffffffda RBX: 00007f80635e6360 RCX: 00007f806338f749 [ 1130.207708][T17151] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1130.207717][T17151] RBP: 00007f8063413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1130.207726][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.207735][T17151] R13: 00007f80635e63f8 R14: 00007f80635e6360 R15: 00007ffc8eb3bbb8 [ 1130.207755][T17151] [ 1130.370186][T17154] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2934'. [ 1130.435979][T17154] unsupported nlmsg_type 40 [ 1130.444234][T17005] team0: Port device team_slave_0 added [ 1130.741571][T17005] team0: Port device team_slave_1 added [ 1130.983873][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2936'. [ 1131.636569][T17005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.195681][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.455947][T17005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.735421][T17005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.774151][T17185] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1132.780694][T17185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1132.781657][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.859150][T17005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.867360][T17185] vhci_hcd vhci_hcd.0: Device attached [ 1132.904230][T17188] vhci_hcd: connection closed [ 1132.904470][ T6226] vhci_hcd vhci_hcd.1: stop threads [ 1132.929618][ T6226] vhci_hcd vhci_hcd.1: release socket [ 1132.938987][ T6226] vhci_hcd vhci_hcd.1: disconnect device [ 1132.981015][T17192] binder: 17186:17192 unknown command 0 [ 1132.986661][T17192] binder: 17186:17192 ioctl c0306201 2000000001c0 returned -22 [ 1134.458012][T17005] hsr_slave_0: entered promiscuous mode [ 1134.479624][T17005] hsr_slave_1: entered promiscuous mode [ 1134.636219][T17210] FAULT_INJECTION: forcing a failure. [ 1134.636219][T17210] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.649045][T17210] CPU: 0 UID: 0 PID: 17210 Comm: syz.1.2943 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.649065][T17210] Tainted: [L]=SOFTLOCKUP [ 1134.649069][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.649076][T17210] Call Trace: [ 1134.649080][T17210] [ 1134.649085][T17210] dump_stack_lvl+0x16c/0x1f0 [ 1134.649104][T17210] should_fail_ex+0x512/0x640 [ 1134.649121][T17210] ? fs_reclaim_acquire+0xae/0x150 [ 1134.649138][T17210] should_failslab+0xc2/0x120 [ 1134.649154][T17210] __kmalloc_noprof+0xeb/0x910 [ 1134.649172][T17210] ? tomoyo_encode2+0x100/0x3e0 [ 1134.649190][T17210] ? tomoyo_encode2+0x100/0x3e0 [ 1134.649204][T17210] tomoyo_encode2+0x100/0x3e0 [ 1134.649221][T17210] tomoyo_encode+0x29/0x50 [ 1134.649235][T17210] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1134.649253][T17210] ? tomoyo_profile+0x47/0x60 [ 1134.649271][T17210] tomoyo_path_number_perm+0x245/0x580 [ 1134.649283][T17210] ? tomoyo_path_number_perm+0x237/0x580 [ 1134.649298][T17210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1134.649312][T17210] ? find_held_lock+0x2b/0x80 [ 1134.649341][T17210] ? find_held_lock+0x2b/0x80 [ 1134.649357][T17210] ? hook_file_ioctl_common+0x144/0x410 [ 1134.649377][T17210] ? __fget_files+0x20e/0x3c0 [ 1134.649396][T17210] security_file_ioctl+0x9b/0x240 [ 1134.649412][T17210] __x64_sys_ioctl+0xb7/0x210 [ 1134.649426][T17210] do_syscall_64+0xcd/0xf80 [ 1134.649442][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.649454][T17210] RIP: 0033:0x7feab758f749 [ 1134.649463][T17210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.649474][T17210] RSP: 002b:00007feab8461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1134.649485][T17210] RAX: ffffffffffffffda RBX: 00007feab77e5fa0 RCX: 00007feab758f749 [ 1134.649492][T17210] RDX: 0000200000000480 RSI: 00000000c0606610 RDI: 0000000000000007 [ 1134.649499][T17210] RBP: 00007feab8461090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.649505][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.649511][T17210] R13: 00007feab77e6038 R14: 00007feab77e5fa0 R15: 00007fffa10664d8 [ 1134.649526][T17210] [ 1134.649536][T17210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1135.324404][ T976] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1135.375932][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 1135.504045][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 1135.536941][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1135.768915][ T976] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 1135.795238][ T976] usb 1-1: config 4 has no interface number 0 [ 1135.832915][ T976] usb 1-1: config 4 interface 30 has no altsetting 0 [ 1135.870829][ T976] usb 1-1: string descriptor 0 read error: -22 [ 1135.886808][ T976] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1135.909500][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.946539][ T976] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1135.968721][ T30] audit: type=1400 audit(1766822834.467:1349): avc: denied { setcheckreqprot } for pid=17231 comm="syz.4.2948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1136.007646][ T976] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1136.013718][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 1136.020623][T17233] SELinux: syz.4.2948 (17233) set checkreqprot to 1. This is no longer supported. [ 1136.036839][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1136.058230][ T976] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1136.070740][ T976] usb 1-1: media controller created [ 1136.078288][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 1136.089902][ T30] audit: type=1400 audit(1766822834.587:1350): avc: denied { name_bind } for pid=17231 comm="syz.4.2948" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1136.122928][ T976] dw2102: i2c transfer failed. [ 1136.132232][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 1136.164367][ T976] dw2102: i2c transfer failed. [ 1136.232421][T17220] dvb-usb: bulk message failed: -22 (3/0) [ 1136.240774][T17220] dw2102: i2c transfer failed. [ 1136.257183][T17220] dvb-usb: bulk message failed: -22 (3/0) [ 1136.294185][T17220] dw2102: i2c transfer failed. [ 1136.308460][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 1136.319650][ T976] dw2102: i2c transfer failed. [ 1136.332161][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 1136.347430][ T976] dw2102: i2c transfer failed. [ 1136.357720][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 1136.369996][ T976] dw2102: i2c transfer failed. [ 1136.384252][ T5962] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1136.434756][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 1136.457980][ T976] dw2102: i2c transfer failed. [ 1136.488669][ T976] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1136.553575][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1136.588158][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 1136.599354][ T976] dw2102: command 0x0e transfer failed. [ 1136.606067][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 1136.612823][ T976] dw2102: command 0x0e transfer failed. [ 1136.633629][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 1136.664605][ T5962] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1136.710841][ T5962] usb 5-1: config 8 has an invalid interface number: 163 but max is 0 [ 1136.739540][ T5962] usb 5-1: config 8 has no interface number 0 [ 1136.754562][ T5962] usb 5-1: config 8 interface 163 has no altsetting 0 [ 1136.787103][ T5962] usb 5-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=72.33 [ 1136.855740][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.928297][ T5962] usb 5-1: Product: syz [ 1136.954025][ T5962] usb 5-1: Manufacturer: syz [ 1136.966334][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 1136.972965][ T5962] usb 5-1: SerialNumber: syz [ 1136.996567][ T976] dw2102: command 0x0e transfer failed. [ 1137.039859][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 1137.081762][ T976] dw2102: command 0x0e transfer failed. [ 1137.108257][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 1137.118504][ T976] dw2102: command 0x51 transfer failed. [ 1137.148620][ T976] dvb-usb: bulk message failed: -22 (5/0) [ 1137.164003][ T976] dw2102: i2c probe for address 0x68 failed. [ 1137.178580][ T976] dvb-usb: bulk message failed: -22 (5/0) [ 1137.208739][ T976] dw2102: i2c probe for address 0x69 failed. [ 1137.240921][ T976] dvb-usb: bulk message failed: -22 (5/0) [ 1137.246861][T16851] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1137.268925][ T976] dw2102: i2c probe for address 0x6a failed. [ 1137.294329][ T976] dw2102: probing for demodulator failed. Is the external power switched on? [ 1137.324031][ T976] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1137.447330][ T5962] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 1137.458774][T16851] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1137.475823][ T976] rc_core: IR keymap rc-tt-1500 not found [ 1137.481572][ T976] Registered IR keymap rc-empty [ 1137.506700][T16851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.537987][ T976] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1137.545493][ T5962] dvb-usb: bulk message failed: -22 (4/0) [ 1137.584264][T16851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1137.604063][ T5962] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1137.634186][ T5962] dvb-usb: bulk message failed: -22 (5/0) [ 1137.655096][ T976] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input122 [ 1137.684000][ T5962] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1137.684071][T16851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.872996][ T976] dvb-usb: schedule remote query interval to 250 msecs. [ 1137.873293][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1137.962428][T17258] Cannot find add_set index 65532 as target [ 1138.322136][ T976] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1138.343994][ T976] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1138.356648][T16851] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1138.443317][ T976] usb 1-1: USB disconnect, device number 75 [ 1138.456346][T16851] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1138.472769][T16851] usb 2-1: Product: syz [ 1138.494064][T16851] usb 2-1: Manufacturer: syz [ 1138.507777][ T5962] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 1138.551755][T16851] cdc_wdm 2-1:1.0: skipping garbage [ 1138.608696][T16851] cdc_wdm 2-1:1.0: skipping garbage [ 1138.703146][ T5962] usb 5-1: media controller created [ 1138.727101][T16851] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1138.733180][T16851] cdc_wdm 2-1:1.0: Unknown control protocol [ 1138.739617][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1138.814636][ T30] audit: type=1400 audit(1766822837.307:1351): avc: denied { getopt } for pid=17247 comm="syz.1.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1138.991078][ T30] audit: type=1400 audit(1766822837.487:1352): avc: denied { ioctl } for pid=17266 comm="syz.3.2954" path="socket:[60872]" dev="sockfs" ino=60872 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1139.023278][ T5962] ttusb2: set interface to alts=3 failed [ 1139.192831][ T976] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1139.276449][ T5962] DVB: Unable to find symbol tda10086_attach() [ 1139.322678][ T5962] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 1139.357025][ T5962] dvb-usb: bulk message failed: -22 (4/0) [ 1139.384652][ T5962] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1139.422276][ T5962] dvb-usb: bulk message failed: -22 (5/0) [ 1139.440197][ T5962] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1139.471171][ T5962] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 1139.494097][ T5884] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1139.555142][ T5962] usb 5-1: USB disconnect, device number 87 [ 1139.579665][ T30] audit: type=1400 audit(1766822838.077:1353): avc: denied { read write } for pid=17247 comm="syz.1.2950" name="cdc-wdm0" dev="devtmpfs" ino=4541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1139.694669][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 1139.704452][ T5884] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.741619][ T5962] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 1139.744774][ T30] audit: type=1400 audit(1766822838.077:1354): avc: denied { open } for pid=17247 comm="syz.1.2950" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1139.784468][ T5884] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1139.800915][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1139.821095][ T5884] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1139.855957][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.982793][ T5884] usb 4-1: config 0 descriptor?? [ 1140.058940][T17005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1140.096763][T17005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1140.408916][ T5884] usb 4-1: string descriptor 0 read error: -71 [ 1140.438392][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 1140.447760][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1140.465414][T17005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1140.502438][T17005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1140.537295][ T5884] usb 4-1: USB disconnect, device number 95 [ 1140.770355][T16065] usb 2-1: USB disconnect, device number 80 [ 1140.787194][T17005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.899224][T17005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.817502][T17298] netlink: 'syz.1.2957': attribute type 1 has an invalid length. [ 1141.864895][ T1924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.872036][ T1924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.127341][T17302] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1142.270532][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.277683][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.467603][ T9234] hsr_slave_0: left promiscuous mode [ 1142.484217][ T9234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.519583][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.559125][ T9234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.581148][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.639670][ T9234] veth1_vlan: left allmulticast mode [ 1142.648374][ T9234] veth1_macvtap: left promiscuous mode [ 1142.658324][ T9234] veth0_macvtap: left promiscuous mode [ 1142.674436][ T9234] veth1_vlan: left promiscuous mode [ 1142.711157][ T9234] veth0_vlan: left promiscuous mode [ 1143.978674][ T30] audit: type=1400 audit(1766822842.477:1355): avc: denied { bind } for pid=17332 comm="syz.3.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1146.490623][ T9234] team0 (unregistering): Port device team_slave_1 removed [ 1146.641756][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2966'. [ 1146.655676][ T9234] team0 (unregistering): Port device team_slave_0 removed [ 1146.672309][T17385] netlink: 'syz.1.2966': attribute type 15 has an invalid length. [ 1146.706260][T17385] netlink: 'syz.1.2966': attribute type 18 has an invalid length. [ 1148.228597][ T30] audit: type=1400 audit(1766822846.727:1356): avc: denied { bind } for pid=17399 comm="syz.4.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1148.377016][T17005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.595993][T17005] veth0_vlan: entered promiscuous mode [ 1148.627078][T17005] veth1_vlan: entered promiscuous mode [ 1148.808676][T17005] veth0_macvtap: entered promiscuous mode [ 1148.835100][T17005] veth1_macvtap: entered promiscuous mode [ 1148.867516][ T9234] IPVS: stop unused estimator thread 0... [ 1149.251318][T17005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.278754][T17005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.326575][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.363127][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.391902][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.470358][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.698098][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.729600][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.844699][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.867116][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.893013][ T30] audit: type=1400 audit(1766822848.387:1357): avc: denied { mounton } for pid=17005 comm="syz-executor" path="/root/syzkaller.J25DWf/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1149.930910][ T30] audit: type=1400 audit(1766822848.427:1358): avc: denied { mounton } for pid=17005 comm="syz-executor" path="/root/syzkaller.J25DWf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1149.960158][ T30] audit: type=1400 audit(1766822848.427:1359): avc: denied { mounton } for pid=17005 comm="syz-executor" path="/root/syzkaller.J25DWf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1150.012307][ T30] audit: type=1400 audit(1766822848.487:1360): avc: denied { mounton } for pid=17005 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1150.066332][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2969'. [ 1150.077182][ T30] audit: type=1400 audit(1766822848.487:1361): avc: denied { mount } for pid=17005 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1150.116807][ T30] audit: type=1400 audit(1766822848.487:1362): avc: denied { mounton } for pid=17005 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1150.144093][T17415] ubi31: detaching mtd0 [ 1150.580469][T17420] dummy0: left allmulticast mode [ 1150.605017][T17415] ubi31: mtd0 is detached [ 1150.686376][T17415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2969'. [ 1151.315162][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1151.326702][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1151.335133][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1151.343830][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1151.351492][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1151.908090][ T3600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.099548][ T3600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.109877][ T5884] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1152.211430][ T3600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.264002][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 1152.296251][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1152.320268][ T5884] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 1152.344128][ T5884] usb 4-1: config 8 has no interface number 0 [ 1152.364111][ T5884] usb 4-1: config 8 interface 255 has no altsetting 0 [ 1152.403061][ T5884] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1152.428900][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.898356][ T5884] usb 4-1: Product: syz [ 1152.913120][ T3600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.926803][ T5884] usb 4-1: Manufacturer: syz [ 1152.939312][ T5884] usb 4-1: SerialNumber: syz [ 1153.143125][T17425] chnl_net:caif_netlink_parms(): no params data found [ 1153.222253][T17447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.261543][T17447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.354750][ T5884] catc 4-1:8.255: Can't set altsetting 1. [ 1153.375861][ T5884] catc 4-1:8.255: probe with driver catc failed with error -5 [ 1153.403259][T17007] Bluetooth: hci1: command tx timeout [ 1153.415310][ T5884] usb 4-1: USB disconnect, device number 96 [ 1154.631767][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 1154.651758][T17480] netlink: 'syz.1.2981': attribute type 15 has an invalid length. [ 1154.694530][T17480] netlink: 'syz.1.2981': attribute type 18 has an invalid length. [ 1154.884076][T16851] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1154.946840][ T3600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.998283][ T3600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.017920][ T3600] bond0 (unregistering): (slave team0): Releasing backup interface [ 1155.029819][ T3600] team0: left allmulticast mode [ 1155.122997][T16851] usb 3-1: Using ep0 maxpacket: 32 [ 1155.284606][T16851] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1155.294410][ T3600] bond0 (unregistering): Released all slaves [ 1155.300604][T16851] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1155.326733][T16851] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1155.354326][T16851] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1155.388276][T16851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1155.427921][T16851] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1155.454115][T16851] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1155.475330][T17007] Bluetooth: hci1: command tx timeout [ 1155.482855][T16851] usb 3-1: Product: syz [ 1155.509772][T16851] usb 3-1: Manufacturer: syz [ 1155.530285][T16851] usb 3-1: SerialNumber: syz [ 1155.573445][T16851] usb 3-1: config 0 descriptor?? [ 1155.603248][T16851] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1155.625906][ T3600] bond1 (unregistering): Released all slaves [ 1155.635266][T16851] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1156.125747][T16851] usb 3-1: USB disconnect, device number 71 [ 1156.174731][T16851] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1156.334563][ T3600] tipc: Left network mode [ 1156.838397][T17495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1157.344105][T17425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.360154][T17425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.369027][T17425] bridge_slave_0: entered allmulticast mode [ 1157.390159][T17425] bridge_slave_0: entered promiscuous mode [ 1157.418903][T17425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.427189][T17425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.436152][T17425] bridge_slave_1: entered allmulticast mode [ 1157.462242][T17425] bridge_slave_1: entered promiscuous mode [ 1157.554013][T17007] Bluetooth: hci1: command tx timeout [ 1157.838465][T17425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.924486][T17425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.247505][ T5938] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1158.299911][T17425] team0: Port device team_slave_0 added [ 1158.332608][T17425] team0: Port device team_slave_1 added [ 1158.419227][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.444487][T17527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.454955][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.485836][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.512163][ T5938] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1158.543371][T17523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.563475][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.614894][ T5938] usb 2-1: config 0 descriptor?? [ 1158.683348][T17425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.698260][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.746123][T17425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.817409][T17534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.905101][T17425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.923707][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.025974][T17425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.082275][ T5938] wacom 0003:056A:0010.0042: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1159.251106][ T5938] wacom 0003:056A:0010.0042: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 1159.281148][ T5938] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0042/input/input123 [ 1159.382705][T17425] hsr_slave_0: entered promiscuous mode [ 1159.418618][T17425] hsr_slave_1: entered promiscuous mode [ 1159.436377][ T5938] usb 2-1: USB disconnect, device number 81 [ 1159.489311][T17425] debugfs: 'hsr0' already exists in 'hsr' [ 1159.511453][T17425] Cannot create hsr debugfs directory [ 1159.564338][T17537] fido_id[17537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1159.634998][T17007] Bluetooth: hci1: command tx timeout [ 1159.790922][ T30] audit: type=1400 audit(1766822858.287:1363): avc: denied { write } for pid=17543 comm="syz.4.2992" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1160.315446][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 1161.132961][ T3600] hsr_slave_0: left promiscuous mode [ 1161.282555][ T3600] hsr_slave_1: left promiscuous mode [ 1161.304763][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.609161][T16851] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1161.796858][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.946894][T16851] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1162.034157][T16851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.060077][T16851] usb 5-1: config 0 descriptor?? [ 1162.216664][T16851] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1163.225593][T17569] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2994'. [ 1163.269770][T17569] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2994'. [ 1163.554218][ T976] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1163.697924][ T3600] team0 (unregistering): Port device team_slave_1 removed [ 1163.720091][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.738771][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.759203][ T3600] team0 (unregistering): Port device team_slave_0 removed [ 1163.767241][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.786439][ T976] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1163.795737][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.817416][ T5927] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1163.836194][ T976] usb 2-1: config 0 descriptor?? [ 1163.974082][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 1163.986505][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1163.995367][ T5927] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 1164.014303][ T5927] usb 3-1: config 4 has no interface number 0 [ 1164.026591][ T5927] usb 3-1: config 4 interface 30 has no altsetting 0 [ 1164.049964][ T5927] usb 3-1: string descriptor 0 read error: -22 [ 1164.059904][ T5927] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1164.078579][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.108761][ T5927] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1164.119859][ T5927] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1164.133914][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 1164.156661][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1164.167132][ T5927] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1164.181276][ T5927] usb 3-1: media controller created [ 1164.198008][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 1164.204048][ T5927] dw2102: i2c transfer failed. [ 1164.220699][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 1164.232152][ T5927] dw2102: i2c transfer failed. [ 1164.243524][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 1164.255556][ T5927] dw2102: i2c transfer failed. [ 1164.263406][ T976] wacom 0003:056A:0010.0043: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1164.279004][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 1164.291629][ T5927] dw2102: i2c transfer failed. [ 1164.297090][ T976] wacom 0003:056A:0010.0043: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 1164.308638][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 1164.315024][ T5927] dw2102: i2c transfer failed. [ 1164.321215][ T976] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0043/input/input126 [ 1164.342836][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 1164.360884][ T5927] dw2102: i2c transfer failed. [ 1164.378959][ T5927] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1164.425771][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.478745][ T976] usb 2-1: USB disconnect, device number 82 [ 1164.492680][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 1164.511091][ T5927] dw2102: command 0x0e transfer failed. [ 1164.533300][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 1164.576145][ T5927] dw2102: command 0x0e transfer failed. [ 1164.740144][T17577] fido_id[17577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1164.916704][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 1164.926805][ T5927] dw2102: command 0x0e transfer failed. [ 1164.939966][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 1164.950328][ T5927] dw2102: command 0x0e transfer failed. [ 1164.962924][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 1164.985854][ T5927] dw2102: command 0x51 transfer failed. [ 1165.019928][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 1165.051948][ T5927] dw2102: i2c probe for address 0x68 failed. [ 1165.075518][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 1165.093009][ T5927] dw2102: i2c probe for address 0x69 failed. [ 1165.116187][ T5927] dvb-usb: bulk message failed: -22 (5/0) [ 1165.131988][ T5927] dw2102: i2c probe for address 0x6a failed. [ 1165.139773][ T5927] dw2102: probing for demodulator failed. Is the external power switched on? [ 1165.162100][ T5927] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1165.282681][ T5927] rc_core: IR keymap rc-tt-1500 not found [ 1165.290966][ T5927] Registered IR keymap rc-empty [ 1165.306200][ T5927] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1165.339903][ T5927] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input129 [ 1165.370595][ T3600] IPVS: stop unused estimator thread 0... [ 1165.380447][ T5927] dvb-usb: schedule remote query interval to 250 msecs. [ 1165.407698][ T5927] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1165.532126][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1165.669934][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 1165.845402][ T5927] usb 3-1: USB disconnect, device number 72 [ 1165.851343][ T976] dw2102: i2c transfer failed. [ 1165.960246][ T5927] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1166.614040][ T5927] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1166.867846][T17425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1166.914091][ T5927] usb 3-1: device descriptor read/64, error -71 [ 1166.972496][T17425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1167.093914][T17425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1167.164974][ T5927] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1167.258373][T16851] pwc: Failed to set LED on/off time (-71) [ 1167.285850][T16851] pwc: send_video_command error -71 [ 1167.291046][T16851] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1167.311374][T17425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1167.335138][T16851] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1167.368201][T16851] usb 5-1: USB disconnect, device number 88 [ 1167.424070][ T5927] usb 3-1: device descriptor read/64, error -71 [ 1167.584246][ T5927] usb usb3-port1: attempt power cycle [ 1167.833474][T17425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.426712][ T5927] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1168.435809][T17425] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.457305][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.464409][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.476141][ T5927] usb 3-1: device descriptor read/8, error -71 [ 1168.532948][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.540121][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.572200][T17425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1168.582756][T17425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.745686][ T5927] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1168.774795][ T5927] usb 3-1: device descriptor read/8, error -71 [ 1168.906182][ T5927] usb usb3-port1: unable to enumerate USB device [ 1168.926906][T17425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.071141][T17425] veth0_vlan: entered promiscuous mode [ 1169.105838][T17425] veth1_vlan: entered promiscuous mode [ 1169.177328][T17425] veth0_macvtap: entered promiscuous mode [ 1169.220948][T17425] veth1_macvtap: entered promiscuous mode [ 1169.263664][T17425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.318816][T17425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.374460][ T6226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.416470][ T6226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.469658][ T6226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.521402][ T6226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.750414][ T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1169.953062][ T30] audit: type=1400 audit(1766822868.447:1364): avc: denied { write } for pid=17663 comm="syz.3.3010" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1170.005807][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.017578][T16061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.046452][T16061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.096097][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.107424][T16061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.154993][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.175535][T16061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.274129][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1170.406042][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.587093][ T24] usb 3-1: config 0 descriptor?? [ 1171.044340][ T24] wacom 0003:056A:0010.0044: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1171.594429][ T24] wacom 0003:056A:0010.0044: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.2-1/input0 [ 1171.685511][ T24] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0010.0044/input/input130 [ 1171.786263][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1171.811222][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1171.828660][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1171.836970][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1171.838040][ T24] usb 3-1: USB disconnect, device number 77 [ 1171.866057][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1172.842218][ T30] audit: type=1400 audit(1766822871.337:1365): avc: denied { getopt } for pid=17706 comm="syz.1.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1172.842688][T17707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3017'. [ 1174.060100][T17007] Bluetooth: hci2: command tx timeout [ 1176.114961][T17007] Bluetooth: hci2: command tx timeout [ 1176.630165][ T6226] smc: removing ib device syz1 [ 1176.837380][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.155470][T17756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.295038][T17689] chnl_net:caif_netlink_parms(): no params data found [ 1177.302635][T17756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.412586][T17756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.717050][T17772] netlink: 'syz.4.3025': attribute type 10 has an invalid length. [ 1177.883254][T17689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.908866][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.939552][T17689] bridge_slave_0: entered allmulticast mode [ 1177.995611][T17689] bridge_slave_0: entered promiscuous mode [ 1178.037476][T17689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.060214][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.078305][T17780] QAT: Invalid ioctl 21531 [ 1178.099345][T17689] bridge_slave_1: entered allmulticast mode [ 1178.143047][T17689] bridge_slave_1: entered promiscuous mode [ 1178.243392][T17007] Bluetooth: hci2: command tx timeout [ 1178.284972][T17782] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 1178.291604][T17782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1178.322021][T17782] vhci_hcd vhci_hcd.0: Device attached [ 1178.365847][T17786] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 1178.372477][T17786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1179.172606][ T976] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1179.193628][T17791] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(20) [ 1179.197273][T17786] vhci_hcd vhci_hcd.0: Device attached [ 1179.200250][T17791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1179.231265][T17782] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 1179.237873][T17782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1179.268706][T17796] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(25) [ 1179.275324][T17796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1179.318781][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 1179.327896][T17782] vhci_hcd vhci_hcd.0: Device attached [ 1179.356843][T17791] vhci_hcd vhci_hcd.0: Device attached [ 1179.363099][T17809] netlink: 'syz.4.3033': attribute type 15 has an invalid length. [ 1179.371066][T17809] netlink: 'syz.4.3033': attribute type 18 has an invalid length. [ 1179.379447][T17807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1179.384063][T17796] vhci_hcd vhci_hcd.0: Device attached [ 1179.414489][ T7640] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1179.573984][ T7640] usb 3-1: Using ep0 maxpacket: 16 [ 1180.051070][T17786] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(32) [ 1180.057697][T17786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1180.277620][T17007] Bluetooth: hci2: command tx timeout [ 1180.287869][T17782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1180.367483][ T7640] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.377613][ T7640] usb 3-1: config 0 has no interfaces? [ 1180.383060][ T7640] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1180.398025][ T7640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.421212][T17786] vhci_hcd vhci_hcd.0: Device attached [ 1180.448163][T17791] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1180.461474][ T7640] usb 3-1: config 0 descriptor?? [ 1180.475159][T17689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.622843][T17805] vhci_hcd: connection closed [ 1180.622969][T17799] vhci_hcd: connection closed [ 1180.623186][T17797] vhci_hcd: connection closed [ 1180.633960][T17790] vhci_hcd: connection closed [ 1180.653205][ T3600] vhci_hcd vhci_hcd.1: stop threads [ 1180.664983][ T3600] vhci_hcd vhci_hcd.1: release socket [ 1180.680508][ T3600] vhci_hcd vhci_hcd.1: disconnect device [ 1180.704076][ T3600] vhci_hcd vhci_hcd.1: stop threads [ 1180.704094][T17788] vhci_hcd: connection reset by peer [ 1180.727533][ T3600] vhci_hcd vhci_hcd.1: release socket [ 1180.753157][ T3600] vhci_hcd vhci_hcd.1: disconnect device [ 1180.786099][ T3600] vhci_hcd vhci_hcd.1: stop threads [ 1180.814062][ T3600] vhci_hcd vhci_hcd.1: release socket [ 1180.836616][ T3600] vhci_hcd vhci_hcd.1: disconnect device [ 1181.121562][ T3600] vhci_hcd vhci_hcd.1: stop threads [ 1181.132355][T17689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.151930][ T3600] vhci_hcd vhci_hcd.1: release socket [ 1181.174750][ T3600] vhci_hcd vhci_hcd.1: disconnect device [ 1181.208903][ T3600] vhci_hcd vhci_hcd.1: stop threads [ 1181.244204][ T3600] vhci_hcd vhci_hcd.1: release socket [ 1181.271217][ T3600] vhci_hcd vhci_hcd.1: disconnect device [ 1181.688588][T17689] team0: Port device team_slave_0 added [ 1181.718081][T17819] vhci_hcd: connection closed [ 1181.720815][ T6012] vhci_hcd vhci_hcd.1: stop threads [ 1181.744787][T17689] team0: Port device team_slave_1 added [ 1181.767877][ T6012] vhci_hcd vhci_hcd.1: release socket [ 1181.822618][ T6012] vhci_hcd vhci_hcd.1: disconnect device [ 1182.117684][ T6226] ------------[ cut here ]------------ [ 1182.123368][ T6226] GID entry ref leak for dev syz1 index 2 ref=1 [ 1182.129837][ T6226] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#0: kworker/u8:24/6226 [ 1182.141719][ T6226] Modules linked in: [ 1182.146049][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: kworker/u8:24 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.157542][ T6226] Tainted: [L]=SOFTLOCKUP [ 1182.162239][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.172518][ T6226] Workqueue: ib-unreg-wq ib_unregister_work [ 1182.179026][ T6226] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1182.185335][ T6226] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 aa 67 4d f9 48 8d 3d 53 af 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 90 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1182.195038][ T30] audit: type=1400 audit(1766822880.697:1366): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[4513]" dev="pipefs" ino=4513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1182.205272][ T6226] RSP: 0018:ffffc900041cfac8 EFLAGS: 00010293 [ 1182.235269][ T6226] RAX: 0000000000000000 RBX: ffff8880794c5c00 RCX: 0000000000000001 [ 1182.243605][ T6226] RDX: 0000000000000002 RSI: ffff88807f6ad820 RDI: ffffffff90952e20 [ 1182.251757][ T6226] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1004074d80 [ 1182.260114][ T6226] R10: ffff8880203a6c03 R11: ffffffff812ba1ca R12: ffffed100f298b9b SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1182.268415][ T6226] R13: ffff88802acd4000 R14: 0000000000000002 R15: dffffc0000000000 [ 1182.276534][ T6226] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1182.285798][ T6226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.292709][ T6226] CR2: 000056253961ada8 CR3: 0000000020eb7000 CR4: 00000000003526f0 [ 1182.300983][ T6226] Call Trace: [ 1182.304478][ T6226] [ 1182.307391][ T6226] ib_device_release+0xef/0x1e0 [ 1182.312395][ T6226] ? __pfx_ib_device_release+0x10/0x10 [ 1182.318177][ T6226] device_release+0xa4/0x240 [ 1182.322747][ T6226] kobject_put+0x1ef/0x6f0 [ 1182.327333][ T6226] put_device+0x1f/0x30 [ 1182.331478][ T6226] process_one_work+0x9ba/0x1b20 [ 1182.336560][ T6226] ? __pfx_process_one_work+0x10/0x10 [ 1182.342069][ T6226] ? assign_work+0x1a0/0x250 [ 1182.346761][ T6226] worker_thread+0x6c8/0xf10 [ 1182.351332][ T6226] ? __pfx_worker_thread+0x10/0x10 [ 1182.356434][ T6226] kthread+0x3c5/0x780 [ 1182.360695][ T6226] ? __pfx_kthread+0x10/0x10 [ 1182.365449][ T6226] ? rcu_is_watching+0x12/0xc0 [ 1182.370189][ T6226] ? __pfx_kthread+0x10/0x10 [ 1182.374775][ T6226] ret_from_fork+0x983/0xb10 [ 1182.379364][ T6226] ? __pfx_ret_from_fork+0x10/0x10 [ 1182.384478][ T6226] ? __switch_to+0x7af/0x10d0 [ 1182.389133][ T6226] ? __pfx_kthread+0x10/0x10 [ 1182.393710][ T6226] ret_from_fork_asm+0x1a/0x30 [ 1182.398480][ T6226] [ 1182.401475][ T6226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1182.408727][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: kworker/u8:24 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.419803][ T6226] Tainted: [L]=SOFTLOCKUP [ 1182.424105][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.434151][ T6226] Workqueue: ib-unreg-wq ib_unregister_work [ 1182.440051][ T6226] Call Trace: [ 1182.443304][ T6226] [ 1182.446210][ T6226] dump_stack_lvl+0x3d/0x1f0 [ 1182.450787][ T6226] vpanic+0x640/0x6f0 [ 1182.454745][ T6226] ? gid_table_release_one+0x1ad/0x450 [ 1182.460175][ T6226] panic+0xca/0xd0 [ 1182.463869][ T6226] ? __pfx_panic+0x10/0x10 [ 1182.468263][ T6226] ? check_panic_on_warn+0x1f/0xb0 [ 1182.473350][ T6226] check_panic_on_warn+0xab/0xb0 [ 1182.478261][ T6226] __warn+0x108/0x3c0 [ 1182.482230][ T6226] __report_bug+0x2a0/0x520 [ 1182.486706][ T6226] ? gid_table_release_one+0x1ad/0x450 [ 1182.492138][ T6226] ? __pfx___report_bug+0x10/0x10 [ 1182.497153][ T6226] report_bug_entry+0xe1/0x290 [ 1182.501893][ T6226] ? gid_table_release_one+0x1b6/0x450 [ 1182.507322][ T6226] handle_bug+0x18a/0x260 [ 1182.511630][ T6226] exc_invalid_op+0x17/0x50 [ 1182.516124][ T6226] asm_exc_invalid_op+0x1a/0x20 [ 1182.520951][ T6226] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1182.526990][ T6226] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 aa 67 4d f9 48 8d 3d 53 af 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 90 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1182.546569][ T6226] RSP: 0018:ffffc900041cfac8 EFLAGS: 00010293 [ 1182.552614][ T6226] RAX: 0000000000000000 RBX: ffff8880794c5c00 RCX: 0000000000000001 [ 1182.561085][ T6226] RDX: 0000000000000002 RSI: ffff88807f6ad820 RDI: ffffffff90952e20 [ 1182.569027][ T6226] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1004074d80 [ 1182.576969][ T6226] R10: ffff8880203a6c03 R11: ffffffff812ba1ca R12: ffffed100f298b9b [ 1182.584910][ T6226] R13: ffff88802acd4000 R14: 0000000000000002 R15: dffffc0000000000 [ 1182.592855][ T6226] ? ret_from_fork_asm+0x1a/0x30 [ 1182.597780][ T6226] ? gid_table_release_one+0x1a6/0x450 [ 1182.603222][ T6226] ib_device_release+0xef/0x1e0 [ 1182.608051][ T6226] ? __pfx_ib_device_release+0x10/0x10 [ 1182.613484][ T6226] device_release+0xa4/0x240 [ 1182.618048][ T6226] kobject_put+0x1ef/0x6f0 [ 1182.622450][ T6226] put_device+0x1f/0x30 [ 1182.626578][ T6226] process_one_work+0x9ba/0x1b20 [ 1182.631496][ T6226] ? __pfx_process_one_work+0x10/0x10 [ 1182.636847][ T6226] ? assign_work+0x1a0/0x250 [ 1182.641420][ T6226] worker_thread+0x6c8/0xf10 [ 1182.646000][ T6226] ? __pfx_worker_thread+0x10/0x10 [ 1182.651085][ T6226] kthread+0x3c5/0x780 [ 1182.655128][ T6226] ? __pfx_kthread+0x10/0x10 [ 1182.659694][ T6226] ? rcu_is_watching+0x12/0xc0 [ 1182.664428][ T6226] ? __pfx_kthread+0x10/0x10 [ 1182.668993][ T6226] ret_from_fork+0x983/0xb10 [ 1182.673557][ T6226] ? __pfx_ret_from_fork+0x10/0x10 [ 1182.678640][ T6226] ? __switch_to+0x7af/0x10d0 [ 1182.683295][ T6226] ? __pfx_kthread+0x10/0x10 [ 1182.687865][ T6226] ret_from_fork_asm+0x1a/0x30 [ 1182.692611][ T6226] [ 1182.695872][ T6226] Kernel Offset: disabled [ 1182.700171][ T6226] Rebooting in 86400 seconds..