last executing test programs: 2m13.879891691s ago: executing program 0 (id=51): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) timer_create(0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) dup(0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m12.341334455s ago: executing program 0 (id=57): r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) 2m12.209298605s ago: executing program 0 (id=59): r0 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='utf8', &(0x7f0000000440)='\x00dev\a\x00\x00\x00\x00\x00h&{|\xed\x0f\xb8\x93:\x1a\xea\xf8\n\xb7\xec\x16\xb5r\v\x12\xd7\xe7\x85]OI\xdaZ\xb9\"^\xd9\x91r\x93<\xfa\xd6\xd7\x17z\x04\xe8\x05N!\x01.\xcc\x8cR\xbc\xff\'\xbf;*\xdf\xdf\xe6 \x92>\xffre\x19FZ\x94\x1c\x13h', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='pagemap\x00') r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0x8000000, 0xf000, 0x0, 0x2, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0xfb, 0x9, 0x0, 0x2, 0x7, 0x7, 0x3, 0xff}, {0x6000, 0x3000, 0xc, 0x0, 0x7, 0x9, 0x40, 0x0, 0x3, 0x9, 0x0, 0xfc}, {0xeeef0000, 0xd000, 0xf, 0xff, 0x0, 0xfe, 0xa, 0x0, 0xfe, 0x3, 0x4}, {0xdddd0000, 0xf000, 0x4, 0x0, 0xff, 0x4, 0x6, 0xb, 0x0, 0x3c}, {0xeeee8000, 0x4000, 0x0, 0x3, 0x5, 0x2, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xdddd1000, 0x0, 0x2, 0xff, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x96}, {0x1, 0x4}, {0x80a0000, 0xff}, 0x9dfeffdb, 0x0, 0xeeee8000, 0x600, 0x1, 0x5800, 0x0, [0x4000000000013, 0x0, 0x1]}) r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0xa, 0x3, 0x0, '\x00', 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m11.660135282s ago: executing program 0 (id=64): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800) move_mount(r5, 0x0, r3, &(0x7f0000000080)='./file1\x00', 0x25) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)) keyctl$clear(0x7, 0xfffffffffffffffb) 2m9.457326015s ago: executing program 0 (id=69): r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) 2m7.287592963s ago: executing program 0 (id=75): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_setup(0x4, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x84054) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010326bd7000fbdbdf251c00000004000180afb6dd08187d243a3ccb8042e6d00671"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 2m6.896326063s ago: executing program 32 (id=75): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) io_setup(0x4, &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x84054) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010326bd7000fbdbdf251c00000004000180afb6dd08187d243a3ccb8042e6d00671"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 9.21423011s ago: executing program 4 (id=577): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='.\x02\x00', 0x1000) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xa8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa8}}, 0x40000) r2 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 6.795040953s ago: executing program 4 (id=592): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async, rerun: 64) syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003280)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000001e40)=""/181, 0xb5}, {&(0x7f0000000540)=""/232, 0xe8}], 0x2, &(0x7f00000003c0)=""/103, 0x67}, 0x81}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000640)=""/96, 0x60}, {&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000003500)=""/4104, 0x1008}], 0x4}, 0xc}, {{&(0x7f0000002f00)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001840)=""/148, 0x94}, {&(0x7f0000001900)=""/76, 0x4c}, {&(0x7f0000001980)=""/113, 0x71}], 0x3, &(0x7f0000001a40)=""/143, 0x8f}, 0x8}, {{&(0x7f0000001b00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/209, 0xd1}, {&(0x7f0000001c80)=""/224, 0xe0}], 0x2, &(0x7f0000001dc0)=""/49, 0x31}, 0x4}, {{&(0x7f0000001f00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f80)=""/186, 0xba}, {&(0x7f0000001e00)=""/43, 0x2b}, {&(0x7f0000002040)=""/209, 0xd1}, {&(0x7f0000002140)=""/222, 0xde}], 0x4, &(0x7f0000002280)=""/225, 0xe1}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/130, 0x82}}, {{&(0x7f0000002500)=@can, 0x80, &(0x7f0000002740)=[{&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000002680)=""/146, 0x92}], 0x2, &(0x7f0000002780)=""/179, 0xb3}, 0x2a00}, {{&(0x7f0000002840)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000002f80)=""/246, 0xf6}, {&(0x7f00000029c0)=""/165, 0xa5}, {&(0x7f0000002a80)=""/201, 0xc9}, {&(0x7f0000002b80)=""/154, 0x9a}, {&(0x7f0000002c40)=""/107, 0x6b}, {&(0x7f0000002cc0)=""/139, 0x8b}], 0x6, &(0x7f0000002e00)=""/37, 0x25}, 0xa}, {{&(0x7f0000002e40)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000030c0)}, 0x4}, {{&(0x7f0000003100)=@rc, 0x80, &(0x7f0000003240)=[{&(0x7f0000003180)=""/142, 0x8e}], 0x1}, 0x7}], 0xa, 0x12141, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) fchown(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x44, 0xeffffffe, 0x2, 0x3}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="1800a195ac60c59d00b6feaff5685b9700001400090600000000000000001e000000c1000000"], 0x18}}, 0xc044) (async) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x700, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 6.694908614s ago: executing program 4 (id=594): io_setup(0x3, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r3, 0xb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) shmctl$SHM_UNLOCK(r3, 0xc) 6.314900874s ago: executing program 3 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x18080, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000600)=0xffffffffffffffff) bind$alg(r4, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128-aesni)\x00'}, 0x58) (async) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000006c0)=@mmap={0x3, 0x2, 0x4, 0x0, 0x8, {0x77359400}, {0x1, 0x8, 0x7, 0x74, 0x6, 0x5, ')8Hs'}, 0x1, 0x1, {}, 0x6, 0x0, r5}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) syz_emit_vhci(&(0x7f0000002e00)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0x3, 0x4, 0x1, "c6276f", 0x32, 0x1}]}}}, 0x13) (async) syz_emit_vhci(&(0x7f0000002f80)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}}}, 0xa) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x54, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0x0, 0x99, {0x81f8, 0xc}}}}, [@NL80211_ATTR_PS_STATE={0xfffffffffffffda5, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0xfffffffffffffe0c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nfc_llcp(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x27, 0x0, 0x1, 0x2, 0x1, 0xec, "dcd4c6fa8553f5cd91a5119d7f3ca6bfee3116860f686869a417dd128858ae94ff56102e5122fde89b940a34fd34f454bfbe1b9ca65395683a624e2b52d238", 0x20}, 0x60, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 6.214858317s ago: executing program 4 (id=596): shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="6100000000000000911a24844c7586074eb55697a66f5ebfd8b43983add471631c9f10c94840e59bb95b06378f4420a819f2396723dcf8621e3718e20d321da8b37e003f36276fb5a65c85cdcea91ff351df16899e8f17ff996c1627348f941e80e6c0df7e295bcfa079e5b27236a065c8bd35ae22c6e9dfc8c42615411ba921b0696c5f25298abae76b4e30dd9f5e1844b2e9f804e4d65fe9b50d44b47958efd31ec3cf"], 0x8) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000120001022bbd7000fddbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) readv(r4, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) 5.674672998s ago: executing program 2 (id=597): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@struct={0x3, 0x14, 0x0, 0x4, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) 5.635708265s ago: executing program 2 (id=598): syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x4, 0x40) fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) listen(r3, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f00000001c0)={0x10, 0x0, r7}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000580)=@abs, 0x6e) 5.49956656s ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000480)={&(0x7f0000008940)=""/4137, 0x80000001, 0x1029}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000200)={0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f0000000580)=""/101, &(0x7f0000000680)=""/83, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003700)={0x1, 0x0, [{0x200000, 0x35, &(0x7f00000002c0)=""/53}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000000008010100440000000d0000030000020900010073797a3100000000060002408809000014000480060007400000000608000640000000090500030006"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001780)}, 0x70003}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x1142, 0x0) 5.482254567s ago: executing program 4 (id=600): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000080)=""/102) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="e0100000801ac4ec34fef36dfde6b8687736545030ac2355ec4abefe929306d1c44c55bc5714aef5eda2b84bf01ca54377199094fd503cb84c6bcd74dadef5d69901d69d4da2fae16006f33bf2f1f3b6bacd6b223b3ad8ddbaca3f08912fe8a91d9c57519ec02350aa48886944a82c766d209402327fe5989808a903a7dc594ae378d0b83b39dc689066ff78319c2813150f494eb1ee75cbc5226e55abcf310031708118349f88448fc2bc67ca53a8", @ANYBLOB="63712840aa806d5cf9ce28d0cfa63c2a63160a6af30e1a2eb36f4d62b88b49866fec796e3eccc5b08e43eac493db3838f739f91a40ebe8fd9de2e1b45aeb69de282c0c3e737f980481def3b5873e7331be9449f8e4af16ae1311ce786650716ba84dd83e3adc33825f3e4a8a05a56440b9459f69f9aaa76b84b7c785375f887e141bed031df723e1d9a749460b13269a8ba0ca51e6b184092ebb5b45221d651be0e2a758770ae4", @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) 5.379087428s ago: executing program 3 (id=601): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xde7, 0x5, 0xbb], 0x80000000}}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) prctl$PR_MCE_KILL(0x43, 0x0, 0x1) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(r2, &(0x7f00000002c0)=""/85, 0x55, 0x3) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) close_range(r1, r1, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/232) 5.363575142s ago: executing program 2 (id=602): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(r0, &(0x7f0000019300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000193c0)=""/102400, 0x19000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000019380), 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7c, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '0b`', 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xfffd, [0x5]}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0xe}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x3, 0x9}, 0x2, {0x5, 0x2, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8001, 0x3, 0x9, 0xfc}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000840)={{0x1, 0xffe95e7dc2523829, 0x7, 0xb8, 'syz1\x00', 0x1}, 0x2, 0x20000000, 0x7ff, 0x0, 0x6, 0x3, 'syz0\x00', &(0x7f00000006c0)=['TIPC\x00', '#+/\x00', '\xaa\xaa\xaa\xaa\xaa', 'c:::\x00', '$-(\x00', '\x00'], 0x18}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) socket$kcm(0x10, 0x2, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r5, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0xfffd, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) 4.364832312s ago: executing program 3 (id=604): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xd7, 0x8, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x3fc, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x6, 0x403, 0x8001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x8}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4.340873139s ago: executing program 1 (id=605): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) setsockopt(r0, 0x84, 0x6, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB='dyn']) lseek(0xffffffffffffffff, 0x10001, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x33c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fffffff, 0x15}}}}, [@NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xbc84, 0x4, 0x3, 0xa6f7, 0x8, 0x8d, 0x400]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x5}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x7}, {0x5, 0x4}, {0x2, 0x6}, {0x2, 0x9}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x3}, {0x2, 0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x7}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x3}, {0x2, 0x3}, {0x4}, {0x6, 0x7}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x4, 0x9}, {0x4, 0x2}, {0x1, 0xa}, {0x2, 0x1}, {0x7, 0x5}, {0x5, 0x3}, {0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf31e, 0x7, 0x3, 0x1ff, 0x0, 0x1, 0x4, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffe8, 0xf3f, 0x3, 0x7ff, 0x1, 0x9ad, 0x1]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x1, 0x12, 0x60, 0x78, 0x36, 0x2, 0x9, 0x0, 0x9, 0x16, 0x18, 0x2, 0x48, 0x3, 0x5, 0x2, 0x30]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xfffe, 0x0, 0xc, 0x0, 0x6, 0xb, 0x3]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x60, 0x24, 0x6c, 0x3, 0x6, 0x6, 0x12, 0x44, 0x6, 0x6, 0x9, 0x3, 0x30, 0x1, 0xc, 0x3, 0x4, 0x24, 0x5, 0x36, 0x3, 0x6, 0x0, 0x0, 0x12, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x71, 0x9, 0x8, 0x4d7, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xd800, 0x1, 0xf938, 0x5, 0x97f, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x48, 0x30, 0x3, 0x4, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x9}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x6, 0x9}, {0x4}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x5}, {0x2}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x2}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x6}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa84, 0x4, 0x4, 0x69b0, 0x100, 0x9, 0xffff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1000, 0x4, 0x0, 0x5, 0xfff, 0x0, 0x4c0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb9, 0x7, 0xfcc2, 0x8, 0xf64a, 0x7fff, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x422e, 0x445, 0x6, 0x3, 0xdc, 0x100, 0xff01, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x7, 0x7ff, 0xd1, 0xb3e6, 0x200, 0x3]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x5, 0x6c, 0x18, 0x6, 0x0, 0x6c, 0x36, 0x30, 0x30, 0x2, 0x6c, 0x3, 0x9, 0x12, 0x6c, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x7}, {0x7, 0x7}, {0x4, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x1}, {0x2}, {0x4, 0x3}, {0x3, 0xa}, {0x3}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x3}, {}, {0x1, 0x1}, {}, {0x2, 0x7}, {0x0, 0x4}, {}, {0x5, 0x2}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x3, 0x16, 0x5, 0xb, 0x0, 0x18, 0xc, 0x41, 0xc, 0x48, 0x60, 0x12, 0x30, 0x1, 0xc, 0x1, 0x36, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.400419648s ago: executing program 1 (id=607): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x0, 0x1a2) read(r0, &(0x7f0000000680)=""/193, 0xc1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000003b00010000000000fbfbdf2503"], 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6e29f7d4, 0x6c}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x74}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x80000000, 0x9, 0x7ffd, 0x96, "0062007d82000000000000002240f7ffffff00"}) r5 = syz_open_pts(r2, 0x0) r6 = dup3(r5, r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) 3.369465695s ago: executing program 3 (id=608): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000007280)=[{{&(0x7f0000000180)=@ll, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/228, 0xe4}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/173, 0xad}], 0x3}, 0xc1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/116, 0x74}], 0x2, &(0x7f00000026c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000036c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003740)=""/42, 0x2a}, {&(0x7f0000003780)=""/245, 0xf5}, {&(0x7f0000003880)=""/62, 0x3e}, {&(0x7f00000038c0)=""/90, 0x5a}, {&(0x7f0000003940)=""/31, 0x1f}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/38, 0x26}, {&(0x7f00000049c0)=""/191, 0xbf}, {&(0x7f0000004a80)=""/173, 0xad}], 0x9, &(0x7f0000004c00)=""/100, 0x64}, 0x5}, {{&(0x7f0000004c80)=@xdp, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d00)=""/42, 0x2a}, {&(0x7f0000004d40)=""/219, 0xdb}], 0x2, &(0x7f0000004e80)=""/100, 0x64}, 0x7}, {{&(0x7f0000004f00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000006200)=[{&(0x7f0000004f80)=""/147, 0x93}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/17, 0x11}, {&(0x7f0000006080)=""/79, 0x4f}, {&(0x7f0000006100)=""/195, 0xc3}], 0x5, &(0x7f0000006280)=""/4096, 0x1000}, 0x1ff}], 0x5, 0x10161, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b3", 0x14) syz_open_dev$hiddev(&(0x7f0000000140), 0x2cc0, 0x18000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4004) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[0x0]) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x5) sendmsg$nl_route(r0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905822e70"], 0x0) 3.353937645s ago: executing program 2 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3.239173015s ago: executing program 5 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$rose(0xffffffffffffffff, &(0x7f00000007c0)=@full={0xb, @dev, @default, 0x0, [@default, @bcast, @null, @remote, @default]}, &(0x7f0000000840)=0x40, 0x80000) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b40)=@newtaction={0x560, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}, {0x4f8, 0x1, [@m_nat={0xe4, 0xc, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x65f0, 0x28e, 0x6, 0x2, 0xffffffff}, @local, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xccc3, 0x2, 0x6, 0x8, 0xc2}, @remote, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3a3, 0x3, 0x7, 0x5}, @rand_addr=0x64010101, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7fc4e287, 0xffffffffffffffff, 0xf59b, 0x5}, @multicast2, @remote, 0xffffff00}}]}, {0x19, 0x6, "e3e4fc6fb4c6653f296403efc96ea6ebe04fd8f36c"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x1a4, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0x4, 0xffff7fff, 0x35da1fab}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0x2, 0x8, 0x9}, @dev={0xac, 0x14, 0x14, 0x1f}, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x4, 0x3, 0x5, 0xb}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x40, 0x8, 0xffff8000, 0x9}, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, 0xff}}]}, {0xda, 0x6, "b6a72eec0847232a93af16cfe22ae7fc1504b9d7d8ab3bd67432996301c544899ef7470363dec42109440c9ba55c959f936e962c97346e5c1cbdac84e7aa9905d7c1a83578eb4273478c84ce919cdbdce0e135b1f0c61c6d1805dc90c23f736080900e05f55037940d3f4436fceb09a805a04a71d54a399e61773c73ee0bffd99f3b7acdc355c5f622a022923b314ad094810de30494b4657fe75872f114b309578fc2ba1aa7745ab5821680df91d16fbe513acceee94f3f4c4906894278dab908407043467883ea50528e550f9b8f6e77287b191ef8"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x15c, 0x17, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0x573, 0x20000000, 0x9, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x4, 0x4, 0x100, 0xffc00000}}]}, {0xf0, 0x6, "4b5bcf3fe2fc53ea0dbb00dfcca94fdb9dd116f46085ad3ad10f36069d7e109abf81146dfdbc257abf9f37d9bb246cdf41005221fff07f4ebe07c2b587bcb7c9aa4b0290930623c8908a94a7b5fca0f1e3e1d9d6d56ebcec8ac2126f7f1292ef3e100e45e5744974ac7beace9de12bc917d3c7376b4cdc74087f17a986fe7a649d6cb79e9c71c069b6270369d0e289a8b2f9810ea483b7ac1edcd0ce230edd2cd0ab48f2f1dd7aa6978aa2f9fd3b6d47d862c7d795cb59d8e53ec5a3c42f2371c7419942d4e6fa7b6ecca24949b40b7b158746d108028a16dc3be9ebd90697b725c7f7069359629e2240bb4d"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x110, 0x5, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_TYPE={0x6, 0x5, 0x77}]}, {0xd8, 0x6, "fde481747883a31eb10958cbd7543fcb4851500413b05d6fdeab7567f9580c997630f12fb5edbf4a1c18d5b5646c667588eaae90b8004ff2dbb2fe7e2cfd2293ff8e17874076a41b8529ab465fb624ef6fe7520014507128aea8bfcb800859b6e401cc3dba6363d93ebf04fc9b00f798eaddc68e3d665e01f6fdf6a9c1d1e6275ee6c9f8d34405fd74075d5a3869fa604a38085c3027a113209b549c50c0f7cde3357269ea4b2bea94633b0a16fd3b1971c5cd297483d3af1187d0c11cdef084617d949a207ebe199029c342e9c4978c58185b62"}, {0xc}, {0xc, 0x8, {0x6, 0x4}}}}]}]}, 0x560}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x6f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, r8, 0x25, 0x10, @val=@uprobe_multi={&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=[0xd], 0x0, 0x3c1e, 0x1}}, 0x40) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r5, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r9 = getpgrp(0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r11 = getpid() r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r13 = syz_open_dev$vcsa(&(0x7f0000000280), 0x4, 0x60040) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000061c0)={0x5188, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x238, 0x142, 0x0, 0x1, [@nested={0x130, 0x133, 0x0, 0x1, [@generic="dcda1de6f2499ccbddb8056d4b151162a782a02c23961d65a10d6432bfae647c3a22e720e4483c8d7507ff70ea3f348112d4f35a54ff7f00401f8757fa57130d2d135f1cc1cc88f247d583e7abf665495c699f1df449369e47ed40eb1d4975c5e7ed5defbf7b4f9fb64652957ff98b1ba1435f25fe467d131699a77428c87fcf872f658edb655621b300"/152, @generic="dd41ab34f74e1a1e27f59ffdd3caa3d6b79f52cd64b298c1be960ebd80fa24b0ccb845a7517d76c5e24e02707fe0f446340fa4a0b53bee2bc70d37331a0674378804b851d63dc51d26bba69cf661b3c9ca394186240b9f8f29f1b3e5929c6f0fdf575a5629d509101750b387533add2b65b0f1ef19cc3de54fa6ce34f52fc1e4f66296647cd040ab1d6a27fe7abc720d4219b06d"]}, @generic="5d2514d5bae7b89d0af139ef86ba8e90e6f6bfdacd5102c4f79bcff1f186df099ce700b84800fbd5b32aba715c4e5f9980e78200fd2819dc576e88d0a6a145f6c5a2cee0a1ff7afc9d001117ed1c0d8cd780ae1c133624d047c356567112a8ed47f47d7d78badd5f0f3e506a55b123279caaf8d0c30a7fca2e8206fbaa56f4abe788eedf349dab1678bd84e58542a78bf57b04265d8512872bf425886e7fb17fd45a9be2292a4ec9e4a76fb68db98993c1b2cd764dabd357e285f9307376cda0b516af05e2d61de549f7e5e7064e799e4b8ba1bd83aa20575e02577def6f22e0b139bee6e210d83fcc6e5d0df7ea064b", @typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x4f38, 0x1, 0x0, 0x1, [@nested={0x4f34, 0x14c, 0x0, 0x1, [@nested={0xc, 0x10a, 0x0, 0x1, [@nested={0x4, 0x60}, @nested={0x4, 0x92}]}, @nested={0xe4, 0x12, 0x0, 0x1, [@generic="17d799fc83af7ceed87161b9ecc89a1d8fb317dd2045d3015a342b77d8b12d250ba66fa5dd8b50d99926c7e26a63a4beecd469dd006bc5d9c87db7dd6c90fefeb045607fb0c42570c0b8ba4edcd535e709c9df184abf5d48ead040ff5a730f0ac7522fc0d945df64e86452a5a54946eed7f7cd45423a751c7351b5ba0bee1870ad2284faa0b1a15159336d8ace55a2c15da97b1cefdee5e70c5ca5391f1077b38a14f3421bbda67a23314b69ca70ac9b4877c9367f5201096ca55882069332dedf529963", @typed={0x7, 0xd5, 0x0, 0x0, @str='}@\x00'}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x49}, @nested={0x4, 0x33}]}, @generic="4d43731613a47ca4cededf43c52bf7735551c3db647f2edf6f3632705c07e5865f5d87cc9214077adbb3be72b1851b79038655dbbd51fc49ce960f0560f48462ccdfbc9bb50421e560b15cb553c70ec0a7a89dc35d424b60b466", @nested={0x141, 0x138, 0x0, 0x1, [@generic="f45bb0554211fabfa3661c7a1717b2c05675612ec54cfcb556828ba6ffe031c3d0dcc0c09b9e90d554d45f3d9bf06b4469a1e56c97193a55371ebfa7889768bb41ff422fe8c840d4a8aab7c6868d325317d5e012e9b9301f12e50b48709d05fc60cea46b317be455f06ab58dd47575393b53016066d4c4589a", @nested={0x4, 0x2e}, @nested={0xc0, 0xa3, 0x0, 0x1, [@nested={0xb9, 0x12c, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0x8e}, @nested={0x4, 0x3b}, @generic="7da8c4e5885bcc85c56d506265feb080ce43d1bd25503019b32c161f7ce082a94c38bef83d7e9d45f37c46c49a518dfec0c9e143669df1dba8247a8f84971fcb42f6456ccbfc445dc58441851fa3258b5f92a2f7b36784feae0826718d8ea9a291baaee4692561732a85dbcf2d7db72577cadc12b095e378b30d84499835a8d1008587b7e4b34628d1bd98aff4ab690f98a099d95793c4d72d1fa62f2817b346e2f09497705c76f184"]}]}]}, @typed={0x7, 0xf8, 0x0, 0x0, @str='<-\x00'}, @generic="5040ebb5710f695688b07a483aa7de0ca57fafbcdeaf88d6feba5ffde147f05090d8b4dc6a56b83aca2f3e8a22d32e3dfd7a9cc3ae239b07a55c87ea4a56d42290f7e441d8b5ed5767bde19d3647f8833290032ea7f8f48dea420705ff7fbae3ec7099ae8f23934333752fadc1a5762b6a006989519b46fabcfd57bd0b4751eb8ff7542f959303d44d2eb14d71ee716e82a8f46f182b3f00846085b3f66c4a5b449000de1f8d8947ffab83b7e9508be2970f2b120cf8f01b90fe46b412767898d08e8d0e59ba8a912056a5bc68ede5874c773a3ec58460c08931a5d7f9ff428c4ca23380f9fd119d43b97acf754fae2dd09d3d209a98", @nested={0x4ba1, 0x7d, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @pid=r9}, @nested={0x38ae, 0xdd, 0x0, 0x1, [@typed={0x8, 0x158, 0x0, 0x0, @uid=r10}, @generic="db035ff3e34b80d78d5a2339ee4ef451917feb1342dd7ae0042450383706c252baf04b14939f4f9da6204bbd72379782f97c4cf6bd7e425fd87c7d06d1916fe3b7579d02e06fa598e422faa37acfb582", @nested={0x4, 0xb0}, @generic="68a8a4a632eb67db85ee7863e0ff89dd0d298a3f280950954457d80fed7a9d9e69a509bc890082e5aba901ec9a3f9f7a0a1b64a198eebb45bffe6b88a5208c8503b4c617d6f0eb17706f369d899f920075e396e17d1ff6f2cc54c913c553b90d83a3af86653c7379fba534d283e16f7fd691d7a76d40be5c921c5163d9376bcdd0465f646acd6409755ba6a4dfa02dd6eff67d9257665d3dd55ae82410d9f5382af87e18ade2d7a98c4dd91967737d477c88c5b6afc0cb1d7a5993a8e75b1324e47c732e6b94d0487970fa257ea126a2062fe5771fbe8dce2980f55f0c0da30420815c9ed257f3b2128525fbaf9676f83f84dd636f31d20b96", @nested={0x4, 0x20}, @nested={0x4, 0x40}, @typed={0x8, 0xe1, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0xc4, 0x3, 0x0, 0x1, [@typed={0x4, 0xf7}, @typed={0xb1, 0xad, 0x0, 0x0, @binary="7838d8e4789fe43f649260c91f04a3b7e5865e7bac847fa1028767391de78d9620386acd5eaa320184065a05c89b16a97a081d01ea7690faf87c1d9229cf9a5e66760e62f7280bea4468c5b6c99088b356e6feec32a31b0b2f945ba74eb8870212bf2109aa0b5c47ac92392a1f7c73ab212f636eae66c49a32e43ec16038841e3381aa000f59ccf1a45b2eb6985b09994333bb19d1784598c94999c602f34a6718d249cd467eed7e968d87b8ec"}, @typed={0x8, 0x138, 0x0, 0x0, @fd=r2}]}, @nested={0x11f4, 0x154, 0x0, 0x1, [@nested={0xb3, 0x85, 0x0, 0x1, [@generic="9fe5655700aebaedc364615b70f9b3ea7334768f8edebd3d5994864b933e5ade720e6784cb1f5ca4f89fc9470548a747342d25780951ff6dab7f3a5f6c623f7e9ee20b05872bc4250bc528db77db04769e8b9455aef4f06abf485f0ca9dc99e446467798b9004f4c5456ab494e3c574dee804ca1f3abea1bc92ff31f5c07c22d6ddc1f08a015138219d688ea5ed1a8f2f847227e6ed9f54e73d257c2782902b2ddc8f7478d132c", @typed={0x8, 0xbf, 0x0, 0x0, @fd=r7}]}, @nested={0x133, 0xef, 0x0, 0x1, [@generic="e4f5ea102925d7afdf41e066e40e222bcee2ac1826c3d980128bfff9a12ca176e4fdc4b85e6b32a840924317779dc2caa82b4dd986c0b56a8c701a7d86928638fe09196aba1968fc780ca8bf3c66cef5cd679035822051139942501d884827", @generic="75c4", @nested={0x4, 0x139}, @typed={0x8, 0xcf, 0x0, 0x0, @u32=0xeb}, @generic="9d2bdc1838710c1396ba2ceb35af51a41b4587d84dfbd117e7d09b8cfa6b27cd729940dbfa3bbe3eda027ec53ea6c325b4620ffb67b925856b4bcf5a2ec154e87b0b65e552627d844d9993241c5df0237bb8368919808d4ccd83274ff7d8b1c840c4185c58d11449778abdc256f4ad438ca93fba05939f9fbdaf9f36e9d01362e7aa9259369c3ec0d06b7bf0247f6bd0739036e153a087edb82d87158f3e5250e356f4beac2e5c10db073a7e30a9f720cb6b2c5fc5c5c278ac1c9799cfa9083d5811"]}, @typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="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"]}, @nested={0x22f1, 0x6, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @pid=r9}, @generic="ccee05dffe839f72636fdd194ca11e0b58caf9a2bb3349cdb542c4dc970f976d5b0427df64720476cb312484a792d3e70cee43fa85d1d9427d29042508fcb2a9a2cd3203a4a7e632a3000ff684b8b3ec7ca6be338c5198ece1cfa2fd22307b65d8d6fc10433c8dec14cfb3a24a889a862ef96746caf33cc3f85f7100cf7d90cbd798c02d4f7fa8cec3239bb331f712e6976fd78bf7afa16924184a04aaef796c2e63f6652eb515a45482fb41cc25e464cb2eac9f9f117aad5d4fb7b1ad94a91f734c100f0d78dde28f0fa5cf53", @nested={0x10d2, 0xaa, 0x0, 0x1, [@generic="5598202af2f5e1279bdd7879a514e8ae1ef7ce4e66172bc13738c22cbb1fc689863a65644b86f6b7c6b961c61f4e10c426defa9cf3cb38f577337d0947c87e7e1a98b80277239fd4af57de8af8652827827ecc4db326890ecc57a5a7a6b243ac9384d03c2dd6ae13a900b69ed57d7400dcb7150917fa20dfcedc2723745ec4ebd08258cdf2fc7b0a5a2e40e09a73b8394f22bad85f826b4544a7aa2347195e63a59bb0a36573afd5f4ba2cec484da665551aff3d5ac75b14c7ba143f3a9d5ece33373af74ca1", @typed={0x8, 0x103, 0x0, 0x0, @u32=0x10001}, @generic="f5a07cbeae606c3ce12ce32bf4f16285e366ccf9f9b82b8d8cbeedf132dfa17b2192d92e003a22ef5d5bfcdbc8d3e4c1e83093a77daa4e5397e6379e8c8c5c4e4827af1015de614adfcfe14a3aa33f90648ecb6a7cd418c05ef15efa1f15ceb3d172077730a010b1f5a25c3ceb54e59a773e29ca81b7ae524bbc5554da4a61ca1b0023cc6973d90d2cf6c37b08a6668787143ceffb93f232a8b4555731cff5622483719cbf874378d539c7eccdd4bc26a713d0285bae9ca46e1107d3d453d1fc13e4416e7b13ff52e8f6efc74a6b860e964b8f2a94ca1f5736385bbbc438b5b2bd2290238e5a3f073a0d70fee2fabeb9e621cf01ce432ebeafff8e65a4fa83f3869f108017a6bb8107a7d7ddeeb1e0fac2828d918d6203b6c47bb211245c382d791f29c5586bb8fb0a1c89c58af30df0faca619c519bed53e67042944a9f5fdc718a99b7bfc8aef9431053650183f28a035dcc049211202d6fc333ad78e743dea2df3c28ba3386c5550711d1463024dc2cae559787d66f64238afd653de6a85937da057f62a2e2a0482de3f03252c306de04af42c338c23f2558b7fab4cbd322a74e9ec22a61f83db99e6b1c10939515b03447987bb92336440d2f3e1f4bde04ef2692ebc013b113c70ee5b62ab3deca613c0bc3ec4761b2797205bc1eef132dc1daf822ae65064d2ee44c04bb7bd68b2f32226cdba46456015aec3fda0a1d3218ab0da083261021ba2b0ae894e5db1e663fd85fa3d17f1a0373ed1b8499d5271321e6322c3d05682a7351a7cc5148807b1f847edf58a813c3663151809f32478e599895d48c9339f4d06e7ee4b1d465ff10d19d751e9fda6a48280835b809e82b801b7a64ff4d015a52ee289edb6c26456fd935e1e5c0128442f943b0e8ac466e05dd55d2a9c5cdc01f65c53922a89189ca818329b0f579877fcb707d8fa10b2e8e15c4212483a10f06a2f29ef35c37b073b81a974221562f17998b31df466788b8ab78388c6b19d8a04a1a9305e5564318f014a26e66fdd01d62c0008c7dfaca85087537c5558ea83ced0d6385779b42fec9f4b6a098ae01833c7dd3b1ddfb0ea1cfe2f41e1d398fc947ba149730c546e9d3684f20cb7f32c1fedf3c65e1ee03a8ad5473a2246811f33a37860ba76b73a34b7bfd4b953ca1852f15df820306a20b4213d81e5fe3203464134b3e5919695d5a67d8034a43398335127967a45a050f90e84431a0a681412617ba15b3cc6bb811a9dc68b5127d0c641285d608e5466e3432a099e1cb2f0d088437bdd9a710d0a22ff1bffcab3e02b3b06598fe191b2382414bd8aa3989dbe5cdf46f1aa469fa92a7d54152f26443b31bd9e1d2fe17ed9c724d1d08765e40e8e0bc56bb7216dd50324ea8f18ea4d60687013b5e1d30499852b6840fae2bb40d9513c4925cfe7ac8ccaef9057ae66036a2d836a71fe9e0c0f355afde514d6d9f4d1069c78e2f56394a9b18556147be076605f29b1febd9d4947c0133928d177829921a30432a0e6c999cd5559eda16b059279a3869466bc6fae00399c321ee8aeb90b60d3339c5781eb73c74613d0d733f1d697171c476fede8ee924056e436ccaf854860b9ade6e34bac44ba4196e5dabb08f3dc7ee51eb3ee7e2d1e086ceb43164cd578304cbed148a49aca431605f882369056700a86577bb85f9f17cac8197613afefd2aecc0f860ebb21481b2e31a86fd5845258575f7a62343ac45526b52f64508176df0227d580e308cb9588499c9689c2a78f33322db1475b1ae099c40aaaacce7e7b2ccc103acfe962ef6258b24b4d0c1eb143ee9f0319b14818952d596356e5892a2fb583577060e69e7f9d02c57d05046dace71d707312e0192d99b6beb48df38dbee7703e3fe04b0f0d879b50f14fac83384a35ff263fddac72413de9e357b670f607d9b79b29b465d6b5e9d6eb11bd408a76c3dd476042a84c788d64e2fb85a98df4efe596956c76d22a830d94289b34732e2d7df2c5d9754a5e3b658fbb16b39cce98a7c1f7265b6e394b368d4f98f47dec632e92dcdd89674aac67d826ec55b103e7b06c83375b1bffaff0695040cbbd5052900913456a7c99e303ac9c3fe372f525f5c36c0b9aa65f028ff2b4e86a222c3163ad95f99c1dcbb56a20facfb1a2225e2d8c0b3b462b902d8a8c4e80a6af3189aade5877113c419fa3e593abb7dbc142a4223ff5735a42bb6683485452e1549763dee654f52c8b527e8c9e62e970d1d19c896d5050819dbd7c9087928d02ea5fc12912ab8bd86eb3d486c137590ff329d646c4a5e116afd4986bd1f5c2802b52c7acaff08e6aa7cc765fce0710d5243849235bec332ebcd7a726e1a922f2d5c4f32ecf66e3f97b5c3601c6d981fe1cfb72c7d067448adcd7eefc1411d3134aded233f4060f0a1744bc09b0dbf07669603a74a6ada4cd5921437ee47e5c43a9e279f0b3777e17cb74f85112fe27bef8fc975a5aaa2b352792e6e01b714ea751634303cbc8e6ddbcabe7f83301973b6ac0dc3de0bbff94900255b090f556091deaadcca3c6036f91a3cd7a6eed4cb6254034dc26639552e4a1753847ebf307562386dee6952c3879b71be80a27668ab6e57a7c9a7bdd4eb911dc31341d961b9e9318f7a44dfa148c386a4b1f02bf4923151faa9c020de48aba00e095727b37af0633879eed3b0e60032b8de50c25780382c338834e701b7d7d398b543bb407f2a4bb5c137509dcd57b8c351a7f680a7303f4e379ce747b84cc5d75be5a11cc341c11a2a57ce985b8c6bb46a28517daed0269fbe869ecc4e3fe2fcdc70156773a36b79ac74efa1d4ace043ef48dfc51239f790f6d2a49a89ac91920fc577155dc76ef5d23dfe489709d12a1f6df1e1d3009354a3a27272028f3293791277f83ae9953a90b7a133a3107da7cacf6a659f0ce4720f3fee1f30f920d1dbb3a9a9d08c559581190e02f45e84e01682b5ef82d4bf6e2ea813b8b3b09a9c0d0744982bc2a8310663699a9042332d6f0e5cfc869bc2f1432ea698a3216c4b8cbc5a1f0d2ddf37821bd3e5f743e9fa48c4d5e3c8a5338738d02377dc9d69663d237ed7a1f7761a98d886afb7debf9d7ee3dac95e99f2e18bc6406a79a420c13c79772425a443d178ef5a6d33f69531ebd075a04f61a62d6489683896a51229d3c6505432db4af19fc76c484816a4dedd4e7e68abf735a13870a6da6e4f1e4e5d81780c21616be48765123b4f4c0dadffa7e558e415f4ebfc4785ac1515f8936c3c9e268fc023d395049214e64d50cea03819dd8e3d91e0a56a0376c5b8476ceeb093a503c6acf0a986206ad67f7f3201bd2e99399901fa4024cd617c22cd86982a6d2b05b705fc2bbc15ef82722f1ecc267bfb443985873cc65cb39bb59e3d3cc56feeda30778c2da364a0b3e0f8123a6187bd73107aa19ebb71022f0e966e7908f54b46011322f08a93ab124d5bea08b48b2a45f99e3fc256ac7140d5a1d2de584593b28f296c256a67882e0049d2b1676e0a56779eec9199cda318d3049e891384f091b29a1f1c38394f39c85df17a961ed18c5f0fd32586c924201bae5a21998ffe92f6adf7d9880e7431271370f554021f3d61b0a2806faccb8814246893a1c4a99aa52f1f43cadfe13881c963bbbdba4df6b660e25933d0e153c84a2c3fb6a08d81fab73e54950cd822a6fb37b4ce75a5defb57a3c34e21aa1768118ef878d28c60a78fd4373f6c646a4e4decf38a0c402b990ca89e9d2e187eb406a930441fb5e4da74163eddf900c3195d680ca72a0efabfa387cc1bc29599d4b2d4c5e40b5849c8a6fbbbacbe6560b4efadf12ef77820066f41ca0443475bade969f14d4cb7eced2aa5a32bf13cb3740211e13b54cc2f74816c9bcc030baa9a4bd58e0b877b3735ae2108657ec5e702ce4d635ff64c95c43ad2f040af15eca22f9b14f86dc0c90279a7abac368002dfb92d3efb62ed9785d739bd19f2871852e84fea6d7827c380332992dbdddfc11e460f380941130a40d394a8ac0375864bab9d2a0c11ed2941a8ffaac67c19f8f8a7277bbd1f4b85b79befaefb6f7b2841f459b92ddb970749dfde09d58970f724161136ded1b7a155938b1bbdeb827a63e1b92992b19c004f6ca1ad31b11565cf83a6e24a22aef276ba19804254bfb80b854c189f4c2dd4a7b04c0eec8699151907b392f47d44f14ac3e620880d3b882e3b88d85e5afd2f25029afde0f4c5ba8bccb6906c4891f07274676b00df8cf251b23fd650292ffda600af0f006cb6eba2ad863616c8fa8cb1d74cdd7967aed47e71475559aa3d4da8e62b5d84ebc262488c384fa023b3b968423bfe581d7755a4b29785848f147cc1f2fda425a22188622599b75878cf9e626dc4c3607ef6b3c6bccf22bcf9d2c6a560efcce1fb3d3ee43c253349de9d4c3815cd8673ea9c35a652c9c10abbb24132ae7478bc6fa1a23bb2eaadbb4c18f8b8ec604db6a012841c8ca9b2fa876b5cd174d656fb9e240444c69d76e4e0a8526032c5d47e1205deaffcc25d82d8a3a8aab40fae8c1a7765b4423a1a8e452a292c4b739b2f979d0127a7ff2b6481deec811ffb258cec7889d51a2f12e49e86963bcea0382cf87379c034fcfaaf212d6c6488b3446501a2a650babee6015f24efa02ecdcad296068b9d76726a416e11c332ad92f99cdfc863c32b62764dd1cb44bde9b12fa0cc46704cb17e859c570fa1e40de667ef95d1eb58b594d3da50be89fe2d8dc9a7314cbbd337b4a53ed4af044d83752a412666f88114202f19098e970077502f7cf6e8e06d80511ea109a7a0c5e0c17abcf4ed7ceed391c423f75337196b6b8d6b4488f48b8a9c5826e210982ce17f3c2a966230cb2cc5b2f40d92ab30661c835a712570b0e2f1a987d109e9fa60dc8c50970afd86d7777f7ccd5d5a4399620b1e0842b85a0efb67f5254c74090a5449259f8fc11839dedefc1c22337f0d3bb8110f67db6b8e44c1c3819fd602dd7cd1ea425d42fc6716471c5d14a3277e09f59825baae2b9cd25e332f33cb9fed3cba516cab1f92510967e886605c8719cd1a06d767f69e4c03c0d04b01f04658e791246686d13c0241eacd2d4882164b78e6467c88239e978ce4fc0a4d658aad3d8e365e1dee685a6eca6e396061dc9960ef92f0fae46ac86a7ada5757377e2bd5d41b3e59306da6d0f24155c30fe201de1997334a912f865915533874142a1610912f8cccea1a2442f5d0f5817205f1a4dfba204929ed9b4f81abc7d3370b1f33fd7e97af0aacd5163a87251d42fec8e64f77edcdb1504f98813b2f0f8f08b7111f7ac0aa7e6b45bbb7b40e1e046169580ae93724ab4dc1ecd8656878f4a7566336563513aba1080428a16bd40008c8b1fae4f0200d3ebec5981fc005be57362c96100f8b6ef066b760a35e585f1613886b51ee6dd3c7927d6de8c672e17c823e5a077f613d11cd5fe85e57e13dbfe790148997df470539fdf10bfa9aad0ac98fdde8e922d8dd5c7e8d4320f9ed9357780f243ce9bb65dbc4af3980fc930f6e92fdce5a54be0fcc3eb74ca59b14202f5b76a061afa6e2eb2b6d4951f6a71cc868ceaf691fa246c359336512c27242b8e0b7c27c47a022ceca81c980facef67b1be6052019cb3d0eca698b3a5fd4af5b4faff467771d8afef4b7432fc5e222c042a3446469bb85e114bc798f6728fb74457c6303b53509079ee29ac4a64ae6e0a583a04c68efd71373e0e6f813a85bc3d9bea77ca5c38d92b18cf9ab55cf60e5550291efeda6e4b63e41657d1a4857b9424b9e53c8e57deccead86"]}, @nested={0x1020, 0xa4, 0x0, 0x1, [@typed={0x14, 0xb2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="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", @typed={0x8, 0x47, 0x0, 0x0, @fd=r12}]}, @generic="d13970a1b63f7bcd11672743be38de50e3338ebd73c07dfa256d3c2c5ae395999f892773055bbbbb37c0574a939fea3b06bd0b112429fd886784a47a533a79c6caeb88ae3dc3d94546e7807e64d71cfad6d9fd8618624b7cf78758b4f1f998bd139e1b7c71a753d304f5fb48c34165960967d71d4a5635ca43e1b90f5f681d2201174752b941dc68c17eaead", @typed={0x8f, 0x45, 0x0, 0x0, @binary="36619bfda48dd8e447aafa8c88ab7e9ca2271b02c6d9a5e96599762f07d6e8fbedfb62eb4f631ce812be520c700f240e58aa9555f4de85aa60159c376d7d881cb34a785a5fcde08d574c745fd749b2921cbf0561e89a2928075194b69bbab57325b06c48c6c140c74c4ff0870a2a32b327140f5a99f065052a7f7d9e70282308e936f883467aa86cafdd32"}, @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@loopback}]}, @generic="93debb827f2479c5f6692dcaa3521b67e83ec67e2f7624665ab571b68110ebd03695075b70e23d5fc2ea598926ebbc47aab43c8f6417097e4b6d4f78136a5927cb6b0765c35b6d53f239b12840", @nested={0x13c, 0xa, 0x0, 0x1, [@nested={0x12d, 0xe5, 0x0, 0x1, [@typed={0x14, 0xb2, 0x0, 0x0, @ipv6=@mcast2}, @generic="53aa4bd65b171bd81b2e650432b0df18a9d6909e5d145663913bc40d49fee647958419047d55196f24614cea56a10f6dbb6399", @generic="5e4c36ae7aacf16e98a080ca08777c116ebef305702978822f4dfaa60c7a00d7bd1935111c0ea104ff4b5ecb01fc368b810c732b3b7838873ade06e6f78d95bf561557102e3fd83c4346a0d9e9dd4168add6596abcdffbe8589af3e74b534bebe565b2f86463afff881cc42faa8106f931217c79c47b520c2f5d5699525069e6c61c9a313ec8e9382e8f6f74573fa471fbd3826853af9327e9a18e4ad62eee", @nested={0x4, 0x9f}, @nested={0x4, 0xb}, @nested={0x4, 0x10c}, @typed={0xc, 0x21, 0x0, 0x0, @u64=0x9}, @generic="1253bc29eb4654aed0e4e22ceb675e7577938d806f0269f92ef8a3590e6c9a053532a0", @typed={0x8, 0x82, 0x0, 0x0, @uid=r10}]}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r13}]}, @typed={0x8, 0x4b, 0x0, 0x0, @pid}, @typed={0x8, 0xc9, 0x0, 0x0, @pid=r11}]}, @nested={0x11e9, 0x80, 0x0, 0x1, [@generic="a288d034617f3c3753e18f1912a9be5f48d369a0fc435404f6ab6428f19db1c018942794ad6766b14295585b4aef02698e287425c9994c0b9ec1c9cc8144feeb672465b4cd721dbbc6139a6804c71470e773466334536ecfdb294737e3b767037e08f4259dad48ac542ad0316da182f1dd5d3e687557902946d1da7da9a36dad5dcb79c67318", @nested={0x4, 0xc4}, @generic="7d3d3f3fb62047f5e5e02ba045d355634627ace732e22db3759dadaab3a8cfbb5574c94e54f7faade9718f5a07e0e04a1854bbffe752fb9f77c0aeef095f65bacd9017db9e1e5abdee48b712d7e28197f9dd3fb1aa2ff0c41a80387317552277d15f70c3433d6cc7f6c2b0a6027151ab69f4ac", @generic="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", @nested={0x4, 0xb0}, @generic="160c8b678b9306f38a5852eaa9fb035c1bc36e57ee2bc296520831f2c9f26d58528cccea7e53718bf1e0784a62b0f3475c1d904aefe2ab3f1618b3d1db8cc6d3e201c82614ab33b56401dd9d58b24c76aef9cd69ae06a534a5d238575cc896d5f9b2efe347737a9e24c529223e6d32fdbe49d3a09be92aab84f04aef5043bac9b3bee243f000d8398b7fe9c5295bb597a3d581b3b7eaa2cc89b7265d309be5570e3ecce2fa0ea6d399b3ca6ff537b0a56b1dc0b6972779ff9f2be40d6944f0b984c8eea2a27a8d84704ef62c196e58b8ead0e70e018754ddcf0942415821dde1", @typed={0x4, 0xc2}]}, @nested={0x96, 0xf4, 0x0, 0x1, [@generic="a1fb047ce9640f70769914b56870d0d6d8b682f570505db430cbe20f7477", @typed={0x8, 0x110, 0x0, 0x0, @pid=r11}, @nested={0x4, 0xdf}, @typed={0x9, 0x3a, 0x0, 0x0, @str='!],]\x00'}, @nested={0x4, 0x9}, @typed={0x53, 0xfe, 0x0, 0x0, @binary="76ba7dbbc97601a440c0206baeb7eba467751016e6efd79361544b265db0bd18f7b3f67d7e9be4fa6599710a44db943c4b9b5c08c2eb530d84ada7906a0c45127ca5775fdb3ee8dd4d96fecb3cd95e"}, @nested={0x4, 0x80}]}, @generic="fa", @generic="4b93b398e5d6b3a4354dceda7afeadb93c0f8b0d5ee93693ed8a8b7db7ccf44d77ce6408d9d70ecd471379cdd020c4e01ae658dce811b9980a39c51b2fba315127c251f3f17cec03bb74b82bed2df48f2f4f9319b1f251a0ba925c23af256231"]}]}]}, @nested={0x4, 0x2}]}, 0x5188}, 0x1, 0x0, 0x0, 0x48815}, 0x0) r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r15, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r15, &(0x7f0000002a00)) r16 = fcntl$getown(r4, 0x9) ptrace$setregs(0xf, r16, 0x0, &(0x7f0000000600)="713040fe667320036be0e43f7c43c6bcc6066aafcdcd4845ed514b1ca15e0919c09b18f9509ffccd59f0451fade217c400320458813e9e4df268a4012fead1e2fbdb033dfea36bffdcf93f3d66fefba0e84b46dedb3548d6cb76dfe8968626c7e9d3f2662af583a8d53cb0b069c8a7ac081cecbf9c832a4aa1b34780b636bb2d50527f7607e4d62142d84c3b05b394b8323d94bfce66a6fa5a84e9dfb7c87ae935aa23908823497a68f9ef82b70c6e83b9bb4a514103c2cd235644fcd16fe014f2434908") sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88000101}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r14, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x641b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000001) 3.131327685s ago: executing program 2 (id=611): r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$sg(0x0, 0x6f5e, 0x6e4800) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r5 = fcntl$dupfd(r4, 0x406, r4) read$FUSE(r5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000010000000900010073797a307f0000003c000000090a010400000000000000000100000508000a40000000000900020073797a32000000000900010073797a300000000008000540000000101400000749dcedf058764c3628f43e0010000100"], 0x84}}, 0x20000080) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) mlockall(0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x5, 0x8001, 0x100000000000, 0x1000001004, 0x45}, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0xfffffe63}) 3.059554163s ago: executing program 2 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000003, 0x32, r0, 0x33c0000) syz_usb_connect$uac3(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e04203040000102030109028a000301ffc010080b0002010130070904000000010130000a2401102600120d0000132403ff01040604020300000005007f00800009240702040800000009040100000102300009040101010102300009050109330040d4040a252506000000010400090402000001023000090402010101023000090582091002fa0a020a252500000000050900"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x29}], 0x1, 0x2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100003042bbd70000000", @ANYRES32=0x0, @ANYBLOB="000000000000001800128008000100767469000c000280080005007f"], 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0xffff1000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf, 0xf, 0x4, [@datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28) r4 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000002a00)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000001b40)=[{&(0x7f00000005c0)=""/192, 0xc0}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/190, 0xbe}, {&(0x7f0000001a80)=""/127, 0x7f}, {&(0x7f0000001b00)=""/7, 0x7}], 0x5, &(0x7f0000000780)=""/109, 0x6d}, 0x100}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001c40)=""/142, 0x8e}, {&(0x7f0000001d00)=""/174, 0xae}, {&(0x7f0000001dc0)=""/101, 0x65}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000001f40)=""/177, 0xb1}, {&(0x7f0000002000)=""/150, 0x96}, {&(0x7f00000020c0)=""/147, 0x93}, {&(0x7f0000002180)=""/31, 0x1f}, {&(0x7f00000021c0)=""/253, 0xfd}], 0x9, &(0x7f0000002380)=""/204, 0xcc}, 0x15ef}, {{&(0x7f0000002480)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002500)=""/20, 0x14}], 0x1, &(0x7f0000002580)=""/122, 0x7a}, 0x4}, {{&(0x7f0000002600)=@ax25={{0x3, @rose}, [@null, @rose, @null, @remote, @netrom, @netrom, @bcast, @netrom]}, 0x80, &(0x7f0000002900), 0x0, &(0x7f0000002980)=""/81, 0x51}, 0x9}], 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') 2.979723583s ago: executing program 5 (id=613): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c463d50e1600b805000000b94f0000000f01d942df0b470f0bb8010000000f01d9d9ee66baf80cb8bc65b88eef66bafc0c66ed460fc79cf4c3000000f30fc73266400f5ac5", 0x45}], 0x1, 0x2d, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=0x0, @ANYBLOB="04005b0006006500b0000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002700)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r8, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x24}}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r12 = io_uring_setup(0x3454, &(0x7f0000000440)={0x0, 0x0, 0x40, 0x0, 0xa7}) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.405683832s ago: executing program 1 (id=614): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/40) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17) shmctl$SHM_UNLOCK(r0, 0xc) mmap(&(0x7f00002a4000/0x2000)=nil, 0x2000, 0xb635773f06ebbeea, 0x40010, 0xffffffffffffffff, 0x12fed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x9, 0x4b9, 0x4f1b04e0, 0x1000}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000800)={"b9fcf882f0cbfbc05e7743e898bdfe5f1c266617a2f28e5d05c48a82043a02c9479383740f9c71e102390f6999535c22a1d85a546cc6646e66e3a7d4a048df089e4510d29d61e062771138e37ad29102f5691288cd253a834605bd55a6670f046d9830a7362b57bc0fc087656223a3e61cabdf22e487c7a46bcd123fe1f65196cc8a1431b5d98d33e9d08884fcb9ee17745eaad69e1ed37dc97f10f6c7480250847598564fa547220e1baffde8e523bb42f52bc0cbc14bd82589a3744248f11698e91fbb880e5441cfe00343b5b9b73dea3780db20c1a699a06b9c5a17231829c82888d9b31352b3a16ea2755e83172ebf6f29874ec54aeb8f40f5db0c0225fcafe80e6a04773b8fd6718ed3569b1c112c0545f51ad2932a72685c7a90d73acbff8aa3a9b4c7435f9417bc75fc4abc479f540a7dcad5df28406ee1cd11224c5bd6445ccd724be22fde9b3c250c97435bfa4b0a422104025ab2c7d6145f23725435ab281ce03e139cfd6757d0df366bdd967b7befdc22cf6a69c82b07b75232ca20d065c0c8e25327ecdabd664103cedcf1613642a79bf6d6c4c703e1c098836790c456ff5b216a171c6bf4baf69c53d9e51681ea5f9d30098e50fd8177c77708444c61519ebc115e4f56aa0c53cebcd53280a68f2cb9289ef8efd10ebb8bc597d0889f99a315b2364fb5aa092f73a81bf67c2fbd5e1467dad9c8d93c910eca0e38750769e7fb745d1a00e0d55a375bb461c3a95038aaae4243a5187ad0300002272c9fe60335d2ccba193d70158b458e3987884136f79ac68a2da4604d2413b20351aeefb46c7eda2c66f291a6571279d8d20efc57f2cefa0e1cc460d2f6b06fd15d838f7b9be2cbd58891396187e95b0ae200b37119e32949d604d2a37831c55a1375d3a37a24d1862d51ba0b93af5eae200c6d220234d3a388fd6de8fdaa7db4529a79d1a24c242495a4b01dd9c09b2206a0c07216bdb816b7593fc915b660a51bae94b4246f46d866607c2c7e7ef1b9a565895f46b25b68b9ec116e8073cdc7aaa23af67a5f3eb876927bb55fab725231c32c908fd27e63a63675f589e7bd75231d4c4df49e817e325e8deb7d22466b39ec17749209dab8aeae923eb8e56c8b17264055670f8b0e85e00dcddedfb801a41251b547b1607ee892d51833a142ff20b4294e5dd7c3d6835168f5c803352b6815f4e43a029de8e8cda24737c92f71404d0b2883191f45969252cd30301efce6a6c6299f087b97ba616b764541854643e7a66f4c18ff0500000000000000b9bbf5f17c07b92c4555d8a5e3b035bf110aa126a6d024f9be2c623832a21875aba0d18ee4363bee0599dae621c207f51c6db3d7e5ce6419e437292c8d4d56e9e4c0f4878256eb95885af65e90b1d9716133664b113200"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x130, 0x98, 0x1f0, 0x130, 0x98, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_io_uring_setup(0xec4, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r8, 0x20, 0xa9e7, 0x3, &(0x7f0000000040)={[0xfffffffffffffffa]}, 0x8) close(r7) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) process_vm_writev(r1, &(0x7f0000000180), 0x0, &(0x7f0000000280), 0x0, 0x0) 2.187481281s ago: executing program 4 (id=615): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000080)='V', 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03180037e9140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x19, 0x1, 0x0, 0x0, "397a59bfa33d61f814e40514e1344b09d046a2a9f9c04a0b804dea935bfccf6cd1255ed4d51873300e2b03d956aa3ff6164eefe282afed1725ff5e4762e6ebe3"}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f00000000c0)='syz1\x00') r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xf}, 0x8) 1.880136346s ago: executing program 5 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x48f, 0x9d, 0x18, 0xb, 0x13, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0xb0000}, 0x4008010) 1.488318391s ago: executing program 5 (id=617): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x380a, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r4, 0x800000000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x98}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.411795701s ago: executing program 1 (id=618): pselect6(0x40, &(0x7f0000000000)={0x5, 0x2, 0x9, 0x4, 0x7fff, 0x7, 0xfffffffffffffffa, 0x91a}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) syz_open_procfs(0x0, 0x0) 533.061254ms ago: executing program 1 (id=619): pselect6(0x40, &(0x7f0000000000)={0x5, 0x2, 0x9, 0x4, 0x7fff, 0x7, 0xfffffffffffffffa, 0x91a}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) (fail_nth: 1) syz_open_procfs(0x0, 0x0) 255.570763ms ago: executing program 1 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x39) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) 177.775144ms ago: executing program 5 (id=621): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x10163, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000540), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000580)={0x2, 0x0, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast1, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000040)="aadafe5f858bea306fa7229a789d02e13c96cae52361ca398babf58ac2a86b84a795a46c2c09e03585d9f8b944c790d13e81bddac15d7b357de47e7738c8af508e85b6756d532af27da94a658016347da238b4f16e1728211e57bdf0b5106ac1458ff099ee9f83bf069bb9c87b485528a99feb105fd53ea98fd9d1eea5def2c7bbf69f806c145d24e2bfbe044ec4b55e6fcefd6950411586f642e3803a9c", 0x9e}, {&(0x7f0000000100)="82f36b25", 0x4}, {&(0x7f0000000140)="c103d4f9a4a604634b63535162d1debcc1aff46ec38f672b54fddf634a80e420c138ee7da615bee33439bc1242d50d29de367e696b99f5a8543acac904a37e936dcb0e0047814594ef78b72d3b3db080a2f248aaec760ce03ee21b71c2ecf5c24a86aa50e4af83ea51884587b52454fe742ca83a2e36f5b2c499f7f6ab4c9e136e26fda0ec60aa26991316f3ffba19e6265fcaa19d5b86c956fc84152ac0ecb3851cab94805fba406688bbf1926df555f004ee26f3142f997eda7d907cc868a6d0e5be781c6b3235d5610277098a29b980851c59", 0xd4}, {&(0x7f0000000240)="1ed54d4e6cef82e67967414ebcf0e7baeba3f45a40756648fe3f931f27f77c05d0395c7f7f424505d975b051c22ae56d", 0x30}, {&(0x7f0000000280)="621deb42911bc9bdb97b7c2d7e3c40d13a1162d64abac8abdec593fdab06a35628f61e249264adc67e9c4a2cafeb5c073ef4a96b767dd9d2c9aed33d3afe7a5bf0ac3d99f8d8517b6a9529ef4e363c9b65d047ea1164f99627395d678f64d2363a1928707883b4c49ca3b8f5a59959f404423706312f8b50eef03b8cb0941d84533960f8e0f7b43d4a6ac4cdbb8eef085afcfd69c047feb14b47e9bedfbb3025398a329fd716c07aca166058fe651a65e8417c7d9d64fd139e66c4f5f66b3049bfa1f14602f451c670802188efd9cb7ace2f81e9bfae93793e61212bf56ea0922710c96ab8635d", 0xe7}, {&(0x7f0000000380)="849f3849715a6ac894a059c5a88af8a03e2bfaa808ee4eee966a67243133a006d394a7b395f88051bc6e0297b7838634c3d25527db2ce29ae6a07fda94999983a485c566fc43d7950a7b4974236bcbcc61008a1fba59718e36bff26dc0bd53034a4bd33e806dc71513b56db9db26740f3b2d53999990edc8a126a6d214ed04eac9c592e461b19a", 0x87}, {&(0x7f0000000440)="9139bba34143b876d8d9d31607", 0xd}], 0x7}}], 0x1, 0x4000) 83.06115ms ago: executing program 3 (id=622): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x42000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newsa={0x688, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@local, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x33}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xff7ffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@tmpl={0x144, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffff7}, 0xa, @in=@multicast2, 0x3503, 0x1, 0x1914f7f8cbae5d23, 0x5, 0x0, 0x0, 0x100}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in6=@loopback, 0x3502, 0x1, 0x2, 0x2, 0xd, 0x8, 0xb7ab}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in=@multicast2, 0x3504, 0x3, 0x3, 0x18, 0x3ff, 0x8, 0x1}, {{@in=@private=0xa010101, 0x4d2, 0xff}, 0xa, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x6, 0x6, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0xff}, 0xa, @in6=@local, 0x0, 0x4, 0x3, 0x86, 0x69f, 0x8d34, 0x7}]}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x81, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x4d2, 0x3c}, @in=@loopback, {0x1, 0xd, 0x1, 0x4, 0x567, 0x6, 0x28d90b5a, 0x1}, {0x101, 0x7, 0x100000001, 0xcb}, {0xfffffffb, 0x80000000, 0xed}, 0x70bd25, 0x3503, 0xa, 0x1, 0x8, 0x12}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2c, 0x70bd29, 0x70bd27, 0x70bd26, 0x2, [0x6, 0xb, 0x7, 0x98, 0x6, 0x80000001, 0x2]}}, @algo_comp={0x107, 0x3, {{'lzs\x00'}, 0x5f8, "b1cf61e8b7673a74c4098c728fb5c4ed8cca602d7ca751930b8139b0c86868d5de58ee35ce58cd2ac1cd20bfc746750d241f85c92dc7406ccaa059de9b222d502aca649e47efd8504eb9018f2652d7080062e930ecdcd8ef629117a5c22769371f533209bf2210994380e04dee611cc2de66ec6f736aaed4d7e7d49adacb84a3caf57f286c5af986c03b3aa0649a3cea818ab9a5f2d8ed84ce25098e46f5c4155be668aa43fb11c6ed73fe51a2c5fd52a77c38946ec1dedac316d891ec4ce0"}}, @extra_flags={0x8, 0x18, 0x13f}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x2, 0xcc, 0x7}}, @coaddr={0x14, 0xe, @in=@broadcast}, @algo_auth_trunc={0xb8, 0x14, {{'sha384-neon\x00'}, 0x360, 0xc0, "270ac1e540e3be4a1762123a8c23bcb4abec6b755a06488aae3eef4df9335fbb4e6d835f46825f33529640f96be5c8c1e20c0e31002e6ebde5fc67578e5e54cc2456136e4036a24b78eb3a2303e05a430cc57f78e7a15db9cd5856dd7699db2f59e79a6a03d92c1d0ff01936"}}, @migrate={0x134, 0x11, [{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x32, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@loopback, 0x6c, 0x2, 0x0, 0x3501, 0xa, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@local, @in6=@local, 0x6c, 0x1, 0x0, 0x3504, 0xa, 0xa}, {@in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@private1, 0x6c, 0x2, 0x0, 0x3502, 0x2, 0xa}]}]}, 0x688}, 0x1, 0x0, 0x0, 0x81}, 0x844) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r6 = syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) r9 = eventfd(0xd7) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r7, 0x0, 0x0, 0x4000000, 0x0, 0x0, r9}]) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402) timer_create(0x4, &(0x7f0000000300)={0x0, 0x39, 0x1, @tid=r6}, &(0x7f0000000340)=0x0) timer_gettime(r10, &(0x7f0000000540)) syz_clone(0x81020480, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 0s ago: executing program 5 (id=623): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x20, 0x9, 0x9, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x2, 0x2f, 0x0, @broadcast, @local}}}}) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000007500)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x17}, 0x4000800) (async, rerun: 32) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x7, 0x3c4, 0xff, 0x1, 0x3, 0x8f, 0xfffffff8}, 0x1c) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) sendto$packet(r2, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 3][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.654949][ T5810] Bluetooth: hci1: command 0x2016 tx timeout [ 117.664114][ T5814] Bluetooth: hci2: command 0x2016 tx timeout [ 117.711678][ T5814] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 117.722268][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.722299][ T5814] Tainted: [L]=SOFTLOCKUP [ 117.722306][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.722319][ T5814] Workqueue: hci1 hci_rx_work [ 117.722348][ T5814] Call Trace: [ 117.722354][ T5814] [ 117.722362][ T5814] dump_stack_lvl+0x100/0x190 [ 117.722397][ T5814] sysfs_warn_dup.cold+0x1c/0x28 [ 117.722423][ T5814] sysfs_create_dir_ns+0x24b/0x2b0 [ 117.722455][ T5814] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 117.722484][ T5814] ? find_held_lock+0x2b/0x80 [ 117.722509][ T5814] ? kobject_add_internal+0x25f/0x930 [ 117.722531][ T5814] ? kobject_add_internal+0x25f/0x930 [ 117.722556][ T5814] ? do_raw_spin_unlock+0x145/0x1e0 [ 117.722582][ T5814] kobject_add_internal+0x2c8/0x930 [ 117.722613][ T5814] kobject_add+0x16a/0x1e0 [ 117.722634][ T5814] ? __pfx_kobject_add+0x10/0x10 [ 117.722654][ T5814] ? class_to_subsys+0x10f/0x150 [ 117.722682][ T5814] ? kobject_put+0xb9/0x640 [ 117.722700][ T5814] ? _raw_spin_unlock+0x28/0x50 [ 117.722735][ T5814] device_add+0x294/0x1950 [ 117.722759][ T5814] ? __pfx_dev_set_name+0x10/0x10 [ 117.722785][ T5814] ? __pfx_device_add+0x10/0x10 [ 117.722808][ T5814] ? mgmt_send_event_skb+0x2fb/0x460 [ 117.722841][ T5814] hci_conn_add_sysfs+0x1a3/0x260 [ 117.722871][ T5814] le_conn_complete_evt+0x11eb/0x1f60 [ 117.722904][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 117.722938][ T5814] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 117.722967][ T5814] ? skb_pull_data+0x15f/0x1e0 [ 117.722991][ T5814] hci_le_meta_evt+0x34a/0x5f0 [ 117.723019][ T5814] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 117.723050][ T5814] hci_event_packet+0x51c/0xcd0 [ 117.723075][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 117.723103][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 117.723132][ T5814] ? kcov_remote_start+0x374/0x660 [ 117.723159][ T5814] ? lockdep_hardirqs_on+0x78/0x100 [ 117.723183][ T5814] hci_rx_work+0x451/0xfc0 [ 117.723213][ T5814] process_one_work+0xa23/0x19a0 [ 117.723246][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 117.723279][ T5814] ? __pfx_hci_rx_work+0x10/0x10 [ 117.723307][ T5814] worker_thread+0x5ef/0xe50 [ 117.723338][ T5814] ? kthread+0x13a/0x450 [ 117.723354][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 117.723373][ T5814] kthread+0x370/0x450 [ 117.723391][ T5814] ? __pfx_kthread+0x10/0x10 [ 117.723412][ T5814] ret_from_fork+0x754/0xd80 [ 117.723433][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 117.723453][ T5814] ? rcu_is_watching+0x12/0xc0 [ 117.723476][ T5814] ? __switch_to+0x7b4/0x1120 [ 117.723500][ T5814] ? __pfx_kthread+0x10/0x10 [ 117.723520][ T5814] ret_from_fork_asm+0x1a/0x30 [ 117.723556][ T5814] [ 117.723647][ T5814] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 118.002795][ T791] raw-gadget.0 gadget.5: failed to queue resume event [ 118.009652][ T5814] Bluetooth: hci1: failed to register connection device [ 118.026485][ T5814] Bluetooth: hci1: unexpected event for opcode 0x6e69 [ 118.091170][ T791] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 118.112962][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 118.120129][ T791] usb 6-1: device descriptor read/8, error -32 [ 118.243114][ T791] raw-gadget.0 gadget.5: failed to queue suspend event [ 118.254973][ T791] raw-gadget.0 gadget.5: failed to queue reset event [ 118.482188][ T791] raw-gadget.0 gadget.5: failed to queue resume event [ 118.560549][ T791] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 119.106301][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 119.122318][ T30] audit: type=1400 audit(1775988739.086:416): avc: denied { create } for pid=6959 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 119.123364][ T791] usb 6-1: device descriptor read/8, error -32 [ 119.260362][ T791] raw-gadget.0 gadget.5: failed to queue suspend event [ 119.278195][ T791] usb usb6-port1: unable to enumerate USB device [ 119.305950][ T6979] syzkaller0: entered promiscuous mode [ 119.325241][ T6979] syzkaller0: entered allmulticast mode [ 119.504231][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 119.523078][ T30] audit: type=1400 audit(1775988739.486:417): avc: denied { setopt } for pid=6983 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.531725][ T6986] syzkaller0: entered promiscuous mode [ 119.568272][ T6986] syzkaller0: entered allmulticast mode [ 119.646824][ T5814] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 119.659282][ T5814] CPU: 1 UID: 0 PID: 5814 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.659313][ T5814] Tainted: [L]=SOFTLOCKUP [ 119.659320][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.659342][ T5814] Workqueue: hci1 hci_rx_work [ 119.659372][ T5814] Call Trace: [ 119.659378][ T5814] [ 119.659385][ T5814] dump_stack_lvl+0x100/0x190 [ 119.659420][ T5814] sysfs_warn_dup.cold+0x1c/0x28 [ 119.659448][ T5814] sysfs_create_dir_ns+0x24b/0x2b0 [ 119.659479][ T5814] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 119.659508][ T5814] ? find_held_lock+0x2b/0x80 [ 119.659534][ T5814] ? kobject_add_internal+0x25f/0x930 [ 119.659556][ T5814] ? kobject_add_internal+0x25f/0x930 [ 119.659579][ T5814] ? do_raw_spin_unlock+0x145/0x1e0 [ 119.659604][ T5814] kobject_add_internal+0x2c8/0x930 [ 119.659630][ T5814] kobject_add+0x16a/0x1e0 [ 119.659651][ T5814] ? __pfx_kobject_add+0x10/0x10 [ 119.659671][ T5814] ? class_to_subsys+0x10f/0x150 [ 119.659698][ T5814] ? kobject_put+0xb9/0x640 [ 119.659717][ T5814] ? _raw_spin_unlock+0x28/0x50 [ 119.659750][ T5814] device_add+0x294/0x1950 [ 119.659772][ T5814] ? __pfx_dev_set_name+0x10/0x10 [ 119.659798][ T5814] ? __pfx_device_add+0x10/0x10 [ 119.659821][ T5814] ? mgmt_send_event_skb+0x2fb/0x460 [ 119.659853][ T5814] hci_conn_add_sysfs+0x1a3/0x260 [ 119.659883][ T5814] le_conn_complete_evt+0x11eb/0x1f60 [ 119.659916][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 119.659949][ T5814] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 119.659977][ T5814] ? skb_pull_data+0x15f/0x1e0 [ 119.660001][ T5814] hci_le_meta_evt+0x34a/0x5f0 [ 119.660028][ T5814] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 119.660059][ T5814] hci_event_packet+0x51c/0xcd0 [ 119.660084][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 119.660111][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 119.660139][ T5814] ? kcov_remote_start+0x374/0x660 [ 119.660165][ T5814] ? lockdep_hardirqs_on+0x78/0x100 [ 119.660188][ T5814] hci_rx_work+0x451/0xfc0 [ 119.660218][ T5814] process_one_work+0xa23/0x19a0 [ 119.660254][ T5814] ? __pfx_process_one_work+0x10/0x10 [ 119.660283][ T5814] ? __pfx_hci_rx_work+0x10/0x10 [ 119.660312][ T5814] worker_thread+0x5ef/0xe50 [ 119.660349][ T5814] ? kthread+0x13a/0x450 [ 119.660367][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 119.660387][ T5814] kthread+0x370/0x450 [ 119.660404][ T5814] ? __pfx_kthread+0x10/0x10 [ 119.660423][ T5814] ret_from_fork+0x754/0xd80 [ 119.660445][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 119.660464][ T5814] ? rcu_is_watching+0x12/0xc0 [ 119.660487][ T5814] ? __switch_to+0x7b4/0x1120 [ 119.660510][ T5814] ? __pfx_kthread+0x10/0x10 [ 119.660529][ T5814] ret_from_fork_asm+0x1a/0x30 [ 119.660566][ T5814] [ 119.930110][ T5814] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 119.945774][ T5814] Bluetooth: hci1: failed to register connection device [ 119.953904][ T5814] Bluetooth: hci1: unexpected event for opcode 0x6e08 [ 120.054084][ T791] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 120.127137][ T5880] kernel read not supported for file /video37 (pid: 5880 comm: kworker/1:4) [ 120.210527][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.220381][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 120.228649][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.237414][ T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.247913][ T791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.259777][ T791] usb 3-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 120.269443][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.280871][ T791] usb 3-1: Product: syz [ 120.285175][ T791] usb 3-1: Manufacturer: syz [ 120.289953][ T791] usb 3-1: SerialNumber: syz [ 120.380804][ T29] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 120.393274][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.403786][ T29] usb 5-1: Product: syz [ 120.408183][ T29] usb 5-1: Manufacturer: syz [ 120.413302][ T29] usb 5-1: SerialNumber: syz [ 120.518900][ T30] audit: type=1400 audit(1775988740.476:418): avc: denied { create } for pid=6980 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 120.565490][ T791] usb 3-1: unit 5 not found! [ 120.603446][ T791] usb 3-1: USB disconnect, device number 10 [ 120.632276][ T29] mdc800 5-1:39.0: probe fails -> wrong Number of Configuration [ 120.647469][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.676674][ T29] usb 5-1: USB disconnect, device number 9 [ 121.070618][ T6826] raw-gadget.0 gadget.5: failed to queue disconnect event [ 121.209198][ T7009] syzkaller0: entered promiscuous mode [ 121.214765][ T7009] syzkaller0: entered allmulticast mode [ 121.223936][ T7009] FAULT_INJECTION: forcing a failure. [ 121.223936][ T7009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.237213][ T7009] CPU: 1 UID: 0 PID: 7009 Comm: syz.4.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.237240][ T7009] Tainted: [L]=SOFTLOCKUP [ 121.237246][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.237256][ T7009] Call Trace: [ 121.237262][ T7009] [ 121.237268][ T7009] dump_stack_lvl+0x100/0x190 [ 121.237302][ T7009] should_fail_ex.cold+0x5/0xa [ 121.237333][ T7009] _copy_from_iter+0x1f4/0x1690 [ 121.237360][ T7009] ? __pfx__copy_from_iter+0x10/0x10 [ 121.237380][ T7009] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 121.237409][ T7009] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 121.237436][ T7009] skb_copy_datagram_from_iter+0x11f/0x720 [ 121.237467][ T7009] packet_sendmsg+0x2476/0x53c0 [ 121.237490][ T7009] ? avc_has_perm+0x120/0x1e0 [ 121.237517][ T7009] ? __lock_acquire+0x4a5/0x2630 [ 121.237539][ T7009] ? sock_has_perm+0x258/0x2f0 [ 121.237563][ T7009] ? __pfx_sock_has_perm+0x10/0x10 [ 121.237587][ T7009] ? __pfx_packet_sendmsg+0x10/0x10 [ 121.237622][ T7009] ____sys_sendmsg+0x9e1/0xb70 [ 121.237641][ T7009] ? __pfx_packet_sendmsg+0x10/0x10 [ 121.237666][ T7009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.237695][ T7009] ___sys_sendmsg+0x190/0x1e0 [ 121.237716][ T7009] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.237764][ T7009] __sys_sendmsg+0x170/0x220 [ 121.237788][ T7009] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.237829][ T7009] do_syscall_64+0x106/0xf80 [ 121.237845][ T7009] ? clear_bhb_loop+0x40/0x90 [ 121.237867][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.237885][ T7009] RIP: 0033:0x7faf9f79c819 [ 121.237899][ T7009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.237916][ T7009] RSP: 002b:00007fafa06f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.237934][ T7009] RAX: ffffffffffffffda RBX: 00007faf9fa15fa0 RCX: 00007faf9f79c819 [ 121.237945][ T7009] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 121.237956][ T7009] RBP: 00007fafa06f1090 R08: 0000000000000000 R09: 0000000000000000 [ 121.237966][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.237976][ T7009] R13: 00007faf9fa16038 R14: 00007faf9fa15fa0 R15: 00007fff2ddd1aa8 [ 121.238000][ T7009] [ 121.632202][ T7013] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 121.771588][ T7018] vivid-007: ================= START STATUS ================= [ 121.789464][ T7018] vivid-007: Enable Output Cropping: true [ 121.805768][ T7018] vivid-007: Enable Output Composing: true [ 121.820294][ T7018] vivid-007: Enable Output Scaler: true [ 121.832025][ T7018] vivid-007: Tx RGB Quantization Range: Automatic [ 121.848035][ T7018] vivid-007: Transmit Mode: HDMI [ 121.859074][ T7018] vivid-007: Hotplug Present: 0x00000000 [ 121.874022][ T7018] vivid-007: RxSense Present: 0x00000000 [ 121.887147][ T7018] vivid-007: EDID Present: 0x00000000 [ 121.903563][ T7018] vivid-007: ================== END STATUS ================== [ 121.960521][ T791] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.000330][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.054198][ T5814] Bluetooth: hci1: command 0x2016 tx timeout [ 122.122283][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.131819][ T791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 122.139380][ T791] usb 3-1: can't read configurations, error -61 [ 122.150296][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 122.157563][ T29] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.167430][ T29] usb 5-1: config 0 has no interface number 0 [ 122.180521][ T29] usb 5-1: config 0 interface 184 has no altsetting 0 [ 122.200587][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.209962][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.222944][ T29] usb 5-1: Product: syz [ 122.227104][ T29] usb 5-1: Manufacturer: syz [ 122.240794][ T29] usb 5-1: SerialNumber: syz [ 122.384633][ T791] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 122.395715][ T29] usb 5-1: config 0 descriptor?? [ 122.567577][ T7024] syz.3.284 (7024): drop_caches: 2 [ 122.647873][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.707765][ T791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 122.756829][ T791] usb 3-1: can't read configurations, error -61 [ 122.797556][ T791] usb usb3-port1: attempt power cycle [ 122.880586][ T1161] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 122.904639][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.914905][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.983257][ T30] audit: type=1400 audit(1775988742.946:419): avc: denied { create } for pid=7016 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.007404][ T30] audit: type=1400 audit(1775988742.976:420): avc: denied { write } for pid=7016 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.031607][ T1161] usb 2-1: device descriptor read/64, error -71 [ 123.181293][ T30] audit: type=1400 audit(1775988743.146:421): avc: denied { setopt } for pid=7028 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.181739][ T7029] FAULT_INJECTION: forcing a failure. [ 123.181739][ T7029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.204584][ T791] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 123.242835][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.257384][ T791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 123.260550][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.3.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.260574][ T7029] Tainted: [L]=SOFTLOCKUP [ 123.260579][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.260587][ T7029] Call Trace: [ 123.260592][ T7029] [ 123.260598][ T7029] dump_stack_lvl+0x100/0x190 [ 123.260626][ T7029] should_fail_ex.cold+0x5/0xa [ 123.260646][ T7029] _copy_from_user+0x2e/0xd0 [ 123.260664][ T7029] copy_msghdr_from_user+0x9f/0x4f0 [ 123.260682][ T7029] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.260703][ T7029] ? rcu_is_watching+0x12/0xc0 [ 123.260721][ T7029] ? ___sys_sendmsg+0x19d/0x1e0 [ 123.260736][ T7029] ? kfree+0x2ec/0x6b0 [ 123.260758][ T7029] ___sys_sendmsg+0x106/0x1e0 [ 123.260776][ T7029] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.260812][ T7029] ? __pfx___might_resched+0x10/0x10 [ 123.260834][ T7029] __sys_sendmmsg+0x205/0x430 [ 123.260858][ T7029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 123.260886][ T7029] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.260910][ T7029] ? fput+0x79/0x100 [ 123.260928][ T7029] ? ksys_write+0x1ac/0x250 [ 123.260941][ T7029] ? __pfx_ksys_write+0x10/0x10 [ 123.260959][ T7029] __x64_sys_sendmmsg+0x9c/0x100 [ 123.260980][ T7029] ? lockdep_hardirqs_on+0x78/0x100 [ 123.260994][ T7029] do_syscall_64+0x106/0xf80 [ 123.261008][ T7029] ? clear_bhb_loop+0x40/0x90 [ 123.261026][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.261041][ T7029] RIP: 0033:0x7f30f7f9c819 [ 123.261053][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.261067][ T7029] RSP: 002b:00007f30f8dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.261082][ T7029] RAX: ffffffffffffffda RBX: 00007f30f8215fa0 RCX: 00007f30f7f9c819 [ 123.261091][ T7029] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 123.261100][ T7029] RBP: 00007f30f8dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 123.261108][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.261117][ T7029] R13: 00007f30f8216038 R14: 00007f30f8215fa0 R15: 00007fff03e70028 [ 123.261138][ T7029] [ 123.280318][ T1161] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 123.293193][ T791] usb 3-1: can't read configurations, error -61 [ 123.470339][ T1161] usb 2-1: device descriptor read/64, error -71 [ 123.528135][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 123.543168][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.598765][ T6826] syz.5.222 (6826) used greatest stack depth: 18984 bytes left [ 123.613712][ T791] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 123.646870][ T791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.660642][ T1161] usb usb2-port1: attempt power cycle [ 123.670758][ T791] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 123.701275][ T791] usb 3-1: can't read configurations, error -61 [ 123.733365][ T791] usb usb3-port1: unable to enumerate USB device [ 123.912819][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 124.032186][ T1161] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 124.039915][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 124.051075][ T1161] usb 2-1: device descriptor read/8, error -71 [ 124.053436][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 124.067612][ T29] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 124.084559][ T7039] overlayfs: missing 'lowerdir' [ 124.091664][ T7037] overlayfs: missing 'lowerdir' [ 124.102185][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.118735][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.142480][ T5814] Bluetooth: hci1: command 0x2016 tx timeout [ 124.290417][ T1161] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 124.310720][ T1161] usb 2-1: device descriptor read/8, error -71 [ 124.330317][ T5823] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 124.420571][ T1161] usb usb2-port1: unable to enumerate USB device [ 124.471091][ T5823] usb 6-1: device descriptor read/64, error -71 [ 124.710382][ T5823] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 125.213954][ T1161] usb 5-1: USB disconnect, device number 10 [ 125.240334][ T5823] usb 6-1: device descriptor read/64, error -71 [ 125.273472][ T30] audit: type=1400 audit(1775988745.236:422): avc: denied { setopt } for pid=7050 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.370364][ T5823] usb usb6-port1: attempt power cycle [ 125.408265][ T7055] tipc: Enabled bearer , priority 0 [ 125.416057][ T7055] syzkaller0: entered promiscuous mode [ 125.439746][ T7055] syzkaller0: entered allmulticast mode [ 125.493540][ T7055] syzkaller0: MTU too low for tipc bearer [ 125.502339][ T7055] tipc: Disabling bearer [ 125.808883][ T5823] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 125.814635][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 125.828045][ T7060] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 125.920661][ T5823] usb 6-1: device descriptor read/8, error -71 [ 125.963280][ T30] audit: type=1400 audit(1775988745.916:423): avc: denied { write } for pid=7056 comm="syz.3.295" path="socket:[16492]" dev="sockfs" ino=16492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.987215][ T30] audit: type=1400 audit(1775988745.926:424): avc: denied { setopt } for pid=7061 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.096021][ T7065] syzkaller1: entered promiscuous mode [ 126.101541][ T7065] syzkaller1: entered allmulticast mode [ 126.969231][ T5814] Bluetooth: hci1: command 0x2016 tx timeout [ 127.359377][ T5823] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 127.375442][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.384098][ T7067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16665 sclass=netlink_route_socket pid=7067 comm=syz.4.298 [ 127.397250][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.589097][ T5823] usb 6-1: device descriptor read/8, error -71 [ 127.710560][ T5823] usb usb6-port1: unable to enumerate USB device [ 128.326976][ T7075] IPVS: Scheduler module ip_vs_sip not found [ 128.381936][ T1161] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 128.603660][ T7085] FAULT_INJECTION: forcing a failure. [ 128.603660][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 128.639160][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.3.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.639187][ T7085] Tainted: [L]=SOFTLOCKUP [ 128.639193][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.639203][ T7085] Call Trace: [ 128.639209][ T7085] [ 128.639215][ T7085] dump_stack_lvl+0x100/0x190 [ 128.639255][ T7085] should_fail_ex.cold+0x5/0xa [ 128.639279][ T7085] should_failslab+0xc2/0x120 [ 128.639298][ T7085] __kmalloc_cache_noprof+0x7a/0x6f0 [ 128.639321][ T7085] ? genl_start+0x1e8/0x970 [ 128.639339][ T7085] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 128.639365][ T7085] genl_start+0x1e8/0x970 [ 128.639388][ T7085] __netlink_dump_start+0x60e/0x990 [ 128.639420][ T7085] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 128.639442][ T7085] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 128.639468][ T7085] ? rcu_is_watching+0x12/0xc0 [ 128.639490][ T7085] ? cap_capable+0x107/0x460 [ 128.639510][ T7085] ? __pfx_genl_start+0x10/0x10 [ 128.639527][ T7085] ? __pfx_genl_dumpit+0x10/0x10 [ 128.639544][ T7085] ? __pfx_genl_done+0x10/0x10 [ 128.639564][ T7085] ? bpf_lsm_capable+0x9/0x10 [ 128.639582][ T7085] ? security_capable+0x80/0x260 [ 128.639604][ T7085] ? ns_capable+0xd2/0xf0 [ 128.639628][ T7085] genl_rcv_msg+0x471/0x800 [ 128.639651][ T7085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.639672][ T7085] ? __pfx_l2tp_nl_cmd_session_dump+0x10/0x10 [ 128.639707][ T7085] netlink_rcv_skb+0x159/0x420 [ 128.639724][ T7085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.639745][ T7085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.639773][ T7085] ? netlink_deliver_tap+0x1ae/0xcc0 [ 128.639804][ T7085] genl_rcv+0x28/0x40 [ 128.639821][ T7085] netlink_unicast+0x5aa/0x870 [ 128.639841][ T7085] ? __pfx_netlink_unicast+0x10/0x10 [ 128.639868][ T7085] netlink_sendmsg+0x8b0/0xda0 [ 128.639890][ T7085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.639905][ T7085] ? __might_fault+0x30/0x140 [ 128.639939][ T7085] ____sys_sendmsg+0x9e1/0xb70 [ 128.639957][ T7085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.639976][ T7085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.640007][ T7085] ___sys_sendmsg+0x190/0x1e0 [ 128.640029][ T7085] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.640081][ T7085] __sys_sendmsg+0x170/0x220 [ 128.640106][ T7085] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.640149][ T7085] do_syscall_64+0x106/0xf80 [ 128.640166][ T7085] ? clear_bhb_loop+0x40/0x90 [ 128.640187][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.640205][ T7085] RIP: 0033:0x7f30f7f9c819 [ 128.640220][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.640236][ T7085] RSP: 002b:00007f30f8dcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.640266][ T7085] RAX: ffffffffffffffda RBX: 00007f30f8215fa0 RCX: 00007f30f7f9c819 [ 128.640277][ T7085] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 128.640287][ T7085] RBP: 00007f30f8dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 128.640297][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.640306][ T7085] R13: 00007f30f8216038 R14: 00007f30f8215fa0 R15: 00007fff03e70028 [ 128.640331][ T7085] [ 128.971965][ T1161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.990776][ T1161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.040204][ T1161] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 129.052560][ T1161] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 129.080302][ T1161] usb 3-1: Manufacturer: syz [ 129.142506][ T1161] usb 3-1: config 0 descriptor?? [ 129.157703][ T5814] Bluetooth: hci1: command 0x2016 tx timeout [ 129.173834][ T7094] netlink: 88 bytes leftover after parsing attributes in process `syz.5.305'. [ 129.280327][ T5915] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.308439][ T7098] netlink: 64 bytes leftover after parsing attributes in process `syz.3.308'. [ 129.385901][ T7090] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.394733][ T7090] overlayfs: missing 'lowerdir' [ 129.400534][ T7098] syzkaller1: entered promiscuous mode [ 129.405990][ T7098] syzkaller1: entered allmulticast mode [ 129.445886][ T5915] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 129.455142][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.572213][ T7098] Bluetooth: MGMT ver 1.23 [ 129.579000][ T5915] usb 2-1: Product: syz [ 129.579033][ T30] audit: type=1400 audit(1775988749.536:425): avc: denied { getopt } for pid=7096 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.583219][ T5915] usb 2-1: Manufacturer: syz [ 129.583235][ T5915] usb 2-1: SerialNumber: syz [ 129.671354][ T1161] cougar 0003:060B:700A.0004: item fetching failed at offset 2/5 [ 129.698670][ T1161] cougar 0003:060B:700A.0004: parse failed [ 129.710385][ T1161] cougar 0003:060B:700A.0004: probe with driver cougar failed with error -22 [ 129.912383][ T29] usb 3-1: USB disconnect, device number 15 [ 130.024921][ T30] audit: type=1400 audit(1775988749.986:426): avc: denied { name_bind } for pid=7109 comm="syz.5.311" src=20131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 130.158036][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 130.773571][ T7118] F2FS-fs: Conflicting test_dummy_encryption options [ 130.784119][ T30] audit: type=1400 audit(1775988750.746:427): avc: denied { firmware_load } for pid=7115 comm="syz.4.312" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 130.909825][ T30] audit: type=1400 audit(1775988750.786:428): avc: denied { write } for pid=7115 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.993378][ T7121] netlink: 52 bytes leftover after parsing attributes in process `syz.5.313'. [ 131.018456][ T7121] bridge1: entered promiscuous mode [ 131.025266][ T7121] bridge1: entered allmulticast mode [ 131.037521][ T7124] FAULT_INJECTION: forcing a failure. [ 131.037521][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 131.053263][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.2.314 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.053287][ T7124] Tainted: [L]=SOFTLOCKUP [ 131.053293][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 131.053302][ T7124] Call Trace: [ 131.053307][ T7124] [ 131.053311][ T7124] dump_stack_lvl+0x100/0x190 [ 131.053332][ T7124] should_fail_ex.cold+0x5/0xa [ 131.053347][ T7124] should_failslab+0xc2/0x120 [ 131.053363][ T7124] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 131.053387][ T7124] ? skb_clone+0x190/0x400 [ 131.053415][ T7124] skb_clone+0x190/0x400 [ 131.053438][ T7124] netlink_deliver_tap+0xaed/0xcc0 [ 131.053458][ T7124] netlink_unicast+0x650/0x870 [ 131.053471][ T7124] ? __pfx_netlink_unicast+0x10/0x10 [ 131.053487][ T7124] netlink_sendmsg+0x8b0/0xda0 [ 131.053501][ T7124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.053515][ T7124] ? __might_fault+0x30/0x140 [ 131.053546][ T7124] ____sys_sendmsg+0x9e1/0xb70 [ 131.053562][ T7124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.053579][ T7124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.053598][ T7124] ___sys_sendmsg+0x190/0x1e0 [ 131.053611][ T7124] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.053639][ T7124] __sys_sendmsg+0x170/0x220 [ 131.053661][ T7124] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.053699][ T7124] do_syscall_64+0x106/0xf80 [ 131.053715][ T7124] ? clear_bhb_loop+0x40/0x90 [ 131.053732][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.053743][ T7124] RIP: 0033:0x7f136559c819 [ 131.053752][ T7124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.053762][ T7124] RSP: 002b:00007f13637f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.053773][ T7124] RAX: ffffffffffffffda RBX: 00007f1365815fa0 RCX: 00007f136559c819 [ 131.053779][ T7124] RDX: 0000000000044040 RSI: 00002000000005c0 RDI: 0000000000000004 [ 131.053785][ T7124] RBP: 00007f13637f6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.053793][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.053803][ T7124] R13: 00007f1365816038 R14: 00007f1365815fa0 R15: 00007ffef163ffe8 [ 131.053826][ T7124] [ 132.054828][ T7133] could not allocate digest TFM handle sha224-generic [ 132.076217][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 132.143198][ T7143] NILFS (nullb0): couldn't find nilfs on the device [ 132.218464][ T30] audit: type=1400 audit(1775988752.116:429): avc: denied { map } for pid=7137 comm="syz.2.319" path="socket:[16630]" dev="sockfs" ino=16630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.262991][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 132.316721][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 132.379553][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 132.409378][ T30] audit: type=1400 audit(1775988752.366:430): avc: denied { ioctl } for pid=7146 comm="syz.5.321" path="socket:[16366]" dev="sockfs" ino=16366 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 132.471670][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.529219][ T5915] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 132.563083][ T7163] tipc: Enabling of bearer rejected, failed to enable media [ 132.574532][ T5915] usb 2-1: USB disconnect, device number 14 [ 132.625011][ T30] audit: type=1400 audit(1775988752.586:431): avc: denied { append } for pid=7160 comm="syz.1.325" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.676004][ T7166] fuse: Bad value for 'fd' [ 132.902389][ T7167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.222007][ T30] audit: type=1400 audit(1775988753.176:432): avc: denied { mounton } for pid=7176 comm="syz.5.330" path="/36/file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 133.365878][ T7183] FAULT_INJECTION: forcing a failure. [ 133.365878][ T7183] name failslab, interval 1, probability 0, space 0, times 0 [ 133.399325][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.5.330 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.399352][ T7183] Tainted: [L]=SOFTLOCKUP [ 133.399358][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 133.399369][ T7183] Call Trace: [ 133.399375][ T7183] [ 133.399382][ T7183] dump_stack_lvl+0x100/0x190 [ 133.399414][ T7183] should_fail_ex.cold+0x5/0xa [ 133.399439][ T7183] ? fuse_io_alloc+0x92/0x150 [ 133.399464][ T7183] should_failslab+0xc2/0x120 [ 133.399484][ T7183] __kmalloc_noprof+0xe0/0x850 [ 133.399516][ T7183] fuse_io_alloc+0x92/0x150 [ 133.399544][ T7183] fuse_direct_io+0x339/0x2590 [ 133.399581][ T7183] ? __pfx_fuse_direct_io+0x10/0x10 [ 133.399603][ T7183] ? lockdep_init_map_type+0x5c/0x250 [ 133.399626][ T7183] fuse_direct_IO+0x7fe/0xf10 [ 133.399651][ T7183] ? __pfx_aio_complete_rw+0x10/0x10 [ 133.399676][ T7183] ? __pfx_fuse_direct_IO+0x10/0x10 [ 133.399694][ T7183] ? generic_write_check_limits+0x1ef/0x280 [ 133.399729][ T7183] ? __pfx_down_write+0x10/0x10 [ 133.399756][ T7183] fuse_direct_write_iter+0x4bb/0x810 [ 133.399778][ T7183] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 133.399800][ T7183] ? __lock_acquire+0x4a5/0x2630 [ 133.399835][ T7183] fuse_file_write_iter+0x5c5/0x990 [ 133.399859][ T7183] aio_write+0x3ba/0x920 [ 133.399884][ T7183] ? __pfx_aio_write+0x10/0x10 [ 133.399906][ T7183] ? __lock_acquire+0x4a5/0x2630 [ 133.399939][ T7183] ? __might_fault+0xc5/0x140 [ 133.399971][ T7183] ? io_submit_one+0x1142/0x1fb0 [ 133.399993][ T7183] io_submit_one+0x1142/0x1fb0 [ 133.400018][ T7183] ? __lock_acquire+0x4a5/0x2630 [ 133.400041][ T7183] ? __pfx_io_submit_one+0x10/0x10 [ 133.400073][ T7183] ? __might_fault+0xc5/0x140 [ 133.400104][ T7183] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 133.400128][ T7183] __x64_sys_io_submit+0x1b1/0x3a0 [ 133.400155][ T7183] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 133.400178][ T7183] ? fput+0x79/0x100 [ 133.400216][ T7183] do_syscall_64+0x106/0xf80 [ 133.400232][ T7183] ? clear_bhb_loop+0x40/0x90 [ 133.400257][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.400275][ T7183] RIP: 0033:0x7f2735b9c819 [ 133.400289][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.400305][ T7183] RSP: 002b:00007f2736a39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 133.400322][ T7183] RAX: ffffffffffffffda RBX: 00007f2735e16090 RCX: 00007f2735b9c819 [ 133.400333][ T7183] RDX: 0000200000000780 RSI: 0000000000000001 RDI: 00007f2736a10000 [ 133.400343][ T7183] RBP: 00007f2736a39090 R08: 0000000000000000 R09: 0000000000000000 [ 133.400353][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.400363][ T7183] R13: 00007f2735e16128 R14: 00007f2735e16090 R15: 00007ffe612f4a38 [ 133.400388][ T7183] [ 134.041820][ T7200] [U]  [ 134.044695][ T7200] [U] K{ [ 134.047730][ T7200] [U] t 1ŠFfˊ`GJgo/mC [ 134.055238][ T7200] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 134.071147][ T7200] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 134.081744][ T7200] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 134.122474][ T7200] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 134.146118][ T7200] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 134.157701][ T7200] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 134.169653][ T7200] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 134.259041][ T7200] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 134.267510][ T7200] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 134.281024][ T7200] [U] 22Ʃx?0;3u [ 134.285155][ T7200] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 134.310031][ T7200] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 134.319279][ T7200] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 134.327838][ T7200] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 134.333958][ T7200] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 134.346239][ T7200] [U] ec [ 134.349321][ T7200] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 134.446531][ T7202] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 134.796768][ T30] audit: type=1400 audit(1775988754.746:433): avc: denied { read write } for pid=7203 comm="syz.5.337" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 134.953413][ T30] audit: type=1400 audit(1775988754.746:434): avc: denied { open } for pid=7203 comm="syz.5.337" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 135.023275][ T30] audit: type=1400 audit(1775988754.756:435): avc: denied { setopt } for pid=7203 comm="syz.5.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.081141][ T7212] bridge_slave_0: left allmulticast mode [ 135.095199][ T7212] bridge_slave_0: left promiscuous mode [ 135.113807][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.122677][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 135.134856][ T7212] bridge_slave_1: left allmulticast mode [ 135.143757][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 135.152887][ T7212] bridge_slave_1: left promiscuous mode [ 135.158502][ T7219] netlink: 'syz.4.339': attribute type 12 has an invalid length. [ 135.160442][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.179260][ T7212] bond0: (slave bond_slave_0): Releasing backup interface [ 135.188170][ T7212] bond0: (slave bond_slave_1): Releasing backup interface [ 135.198544][ T7212] team0: Port device team_slave_0 removed [ 135.206495][ T7212] team0: Port device team_slave_1 removed [ 135.213226][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.220916][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.231342][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.232893][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 135.239790][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.257680][ T7212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.284817][ T7221] team0: Mode changed to "loadbalance" [ 135.300388][ T5915] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 135.552886][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.559737][ T5915] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 135.568977][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.579716][ T5915] usb 3-1: config 0 descriptor?? [ 135.718093][ T7229] FAULT_INJECTION: forcing a failure. [ 135.718093][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.732887][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.3.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.732903][ T7229] Tainted: [L]=SOFTLOCKUP [ 135.732907][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.732913][ T7229] Call Trace: [ 135.732917][ T7229] [ 135.732921][ T7229] dump_stack_lvl+0x100/0x190 [ 135.732941][ T7229] should_fail_ex.cold+0x5/0xa [ 135.732956][ T7229] _copy_from_user+0x2e/0xd0 [ 135.732971][ T7229] bpf_prog_test_run_xdp+0x1284/0x1670 [ 135.732994][ T7229] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.733015][ T7229] ? fput+0x79/0x100 [ 135.733029][ T7229] ? __bpf_prog_get+0x97/0x2a0 [ 135.733044][ T7229] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.733061][ T7229] __sys_bpf+0x1725/0x4b90 [ 135.733075][ T7229] ? __pfx___sys_bpf+0x10/0x10 [ 135.733086][ T7229] ? proc_fail_nth_write+0x9f/0x220 [ 135.733104][ T7229] ? find_held_lock+0x2b/0x80 [ 135.733131][ T7229] ? find_held_lock+0x2b/0x80 [ 135.733152][ T7229] ? ksys_write+0x190/0x250 [ 135.733166][ T7229] ? __mutex_unlock_slowpath+0x15c/0x790 [ 135.733178][ T7229] ? __fget_files+0x215/0x3d0 [ 135.733197][ T7229] ? fput+0x79/0x100 [ 135.733211][ T7229] ? ksys_write+0x1ac/0x250 [ 135.733221][ T7229] ? __pfx_ksys_write+0x10/0x10 [ 135.733233][ T7229] __x64_sys_bpf+0x7b/0xc0 [ 135.733245][ T7229] ? lockdep_hardirqs_on+0x78/0x100 [ 135.733254][ T7229] do_syscall_64+0x106/0xf80 [ 135.733264][ T7229] ? clear_bhb_loop+0x40/0x90 [ 135.733277][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.733288][ T7229] RIP: 0033:0x7f30f7f9c819 [ 135.733297][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.733307][ T7229] RSP: 002b:00007f30f8dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.733317][ T7229] RAX: ffffffffffffffda RBX: 00007f30f8215fa0 RCX: 00007f30f7f9c819 [ 135.733324][ T7229] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 135.733330][ T7229] RBP: 00007f30f8dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 135.733336][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.733342][ T7229] R13: 00007f30f8216038 R14: 00007f30f8215fa0 R15: 00007fff03e70028 [ 135.733356][ T7229] [ 136.004421][ T7231] FAULT_INJECTION: forcing a failure. [ 136.004421][ T7231] name failslab, interval 1, probability 0, space 0, times 0 [ 136.018469][ T7231] CPU: 1 UID: 0 PID: 7231 Comm: syz.3.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.018486][ T7231] Tainted: [L]=SOFTLOCKUP [ 136.018490][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.018496][ T7231] Call Trace: [ 136.018500][ T7231] [ 136.018504][ T7231] dump_stack_lvl+0x100/0x190 [ 136.018532][ T7231] should_fail_ex.cold+0x5/0xa [ 136.018554][ T7231] should_failslab+0xc2/0x120 [ 136.018571][ T7231] __kmalloc_cache_noprof+0x7a/0x6f0 [ 136.018592][ T7231] ? hwsim_update_pib.isra.0+0x57/0x4e0 [ 136.018611][ T7231] hwsim_update_pib.isra.0+0x57/0x4e0 [ 136.018626][ T7231] hwsim_hw_channel+0x126/0x360 [ 136.018638][ T7231] ? nl802154_pre_doit+0x398/0xd10 [ 136.018655][ T7231] ieee802154_set_channel+0x278/0x590 [ 136.018675][ T7231] nl802154_set_channel+0x285/0x4f0 [ 136.018697][ T7231] genl_family_rcv_msg_doit+0x214/0x300 [ 136.018718][ T7231] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 136.018744][ T7231] ? bpf_lsm_capable+0x9/0x10 [ 136.018755][ T7231] ? security_capable+0x80/0x260 [ 136.018773][ T7231] genl_rcv_msg+0x560/0x800 [ 136.018787][ T7231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.018798][ T7231] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 136.018817][ T7231] ? __pfx_nl802154_set_channel+0x10/0x10 [ 136.018835][ T7231] ? __pfx_nl802154_post_doit+0x10/0x10 [ 136.018857][ T7231] ? __lock_acquire+0x4a5/0x2630 [ 136.018877][ T7231] netlink_rcv_skb+0x159/0x420 [ 136.018891][ T7231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.018904][ T7231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.018920][ T7231] ? netlink_deliver_tap+0x1ae/0xcc0 [ 136.018939][ T7231] genl_rcv+0x28/0x40 [ 136.018950][ T7231] netlink_unicast+0x5aa/0x870 [ 136.018969][ T7231] ? __pfx_netlink_unicast+0x10/0x10 [ 136.018995][ T7231] netlink_sendmsg+0x8b0/0xda0 [ 136.019015][ T7231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.019029][ T7231] ? __might_fault+0x30/0x140 [ 136.019050][ T7231] ____sys_sendmsg+0x9e1/0xb70 [ 136.019061][ T7231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.019073][ T7231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.019091][ T7231] ___sys_sendmsg+0x190/0x1e0 [ 136.019112][ T7231] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.019163][ T7231] __sys_sendmsg+0x170/0x220 [ 136.019183][ T7231] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.019212][ T7231] do_syscall_64+0x106/0xf80 [ 136.019222][ T7231] ? clear_bhb_loop+0x40/0x90 [ 136.019235][ T7231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.019251][ T7231] RIP: 0033:0x7f30f7f9c819 [ 136.019265][ T7231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.019279][ T7231] RSP: 002b:00007f30f8dcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.019294][ T7231] RAX: ffffffffffffffda RBX: 00007f30f8215fa0 RCX: 00007f30f7f9c819 [ 136.019304][ T7231] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 136.019313][ T7231] RBP: 00007f30f8dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 136.019320][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.019326][ T7231] R13: 00007f30f8216038 R14: 00007f30f8215fa0 R15: 00007fff03e70028 [ 136.019340][ T7231] [ 136.168366][ T30] audit: type=1400 audit(1775988756.086:436): avc: denied { setopt } for pid=7214 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.412955][ T5915] hid_parser_main: 227 callbacks suppressed [ 136.412975][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.426300][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.433434][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.440880][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.447832][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.448875][ T7235] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.345'. [ 136.477441][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.501842][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.646776][ T7237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.753349][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.760695][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.788885][ T5915] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 136.799235][ T5915] hid_mf 0003:0079:1846.0005: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 136.811469][ T5915] hid_mf 0003:0079:1846.0005: Invalid report, this should never happen! [ 136.820421][ T5915] hid_mf 0003:0079:1846.0005: Force feedback init failed. [ 136.837388][ T5915] usb 3-1: USB disconnect, device number 16 [ 136.871177][ T7241] fido_id[7241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.901384][ T7200] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 136.963496][ T7244] FAULT_INJECTION: forcing a failure. [ 136.963496][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 136.969822][ T7240] syzkaller0: entered promiscuous mode [ 136.976162][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.3.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.976184][ T7244] Tainted: [L]=SOFTLOCKUP [ 136.976190][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.976198][ T7244] Call Trace: [ 136.976204][ T7244] [ 136.976210][ T7244] dump_stack_lvl+0x100/0x190 [ 136.976238][ T7244] should_fail_ex.cold+0x5/0xa [ 136.976258][ T7244] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 136.976282][ T7244] should_failslab+0xc2/0x120 [ 136.976299][ T7244] __kmalloc_noprof+0xe0/0x850 [ 136.976325][ T7244] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 136.976348][ T7244] genl_family_rcv_msg_doit+0xc7/0x300 [ 136.976367][ T7244] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 136.976392][ T7244] ? bpf_lsm_capable+0x9/0x10 [ 136.976407][ T7244] ? security_capable+0x80/0x260 [ 136.976430][ T7244] genl_rcv_msg+0x560/0x800 [ 136.976450][ T7244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.976467][ T7244] ? __pfx_ieee802154_llsec_getparams+0x10/0x10 [ 136.976493][ T7244] ? __lock_acquire+0x4a5/0x2630 [ 136.976513][ T7244] netlink_rcv_skb+0x159/0x420 [ 136.976528][ T7244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.976546][ T7244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.976569][ T7244] ? netlink_deliver_tap+0x1ae/0xcc0 [ 136.976595][ T7244] genl_rcv+0x28/0x40 [ 136.976610][ T7244] netlink_unicast+0x5aa/0x870 [ 136.976628][ T7244] ? __pfx_netlink_unicast+0x10/0x10 [ 136.976651][ T7244] netlink_sendmsg+0x8b0/0xda0 [ 136.976669][ T7244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.976683][ T7244] ? __might_fault+0x30/0x140 [ 136.976711][ T7244] ____sys_sendmsg+0x9e1/0xb70 [ 136.976726][ T7244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.976742][ T7244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.976769][ T7244] ___sys_sendmsg+0x190/0x1e0 [ 136.976787][ T7244] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.976832][ T7244] __sys_sendmsg+0x170/0x220 [ 136.976853][ T7244] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.976888][ T7244] do_syscall_64+0x106/0xf80 [ 136.976903][ T7244] ? clear_bhb_loop+0x40/0x90 [ 136.976921][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.976937][ T7244] RIP: 0033:0x7f30f7f9c819 [ 136.976950][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.976964][ T7244] RSP: 002b:00007f30f8dcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.976978][ T7244] RAX: ffffffffffffffda RBX: 00007f30f8215fa0 RCX: 00007f30f7f9c819 [ 136.976988][ T7244] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000004 [ 136.976997][ T7244] RBP: 00007f30f8dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 136.977005][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.977014][ T7244] R13: 00007f30f8216038 R14: 00007f30f8215fa0 R15: 00007fff03e70028 [ 136.977036][ T7244] [ 137.277411][ T7240] syzkaller0: entered allmulticast mode [ 139.467123][ T7271] SELinux: security_context_str_to_sid (,) failed with errno=-22 [ 140.435946][ T7279] [U]  [ 140.438713][ T7279] [U] K{ [ 140.487288][ T7279] [U] t 1ŠFfˊ`GJgo/mC [ 140.579682][ T7279] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 140.608156][ T7279] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 140.619565][ T7279] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 140.631779][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 140.664441][ T30] audit: type=1400 audit(1775988760.566:437): avc: denied { accept } for pid=7278 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.716704][ T30] audit: type=1400 audit(1775988760.666:438): avc: denied { checkpoint_restore } for pid=7289 comm="syz.1.361" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.879007][ T7279] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 141.120938][ T7279] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 141.132391][ T7279] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 141.144351][ T7279] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< rejected, failed to enable media [ 142.500816][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'. [ 142.520865][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 142.542845][ T5915] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.670306][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 142.671141][ T30] audit: type=1400 audit(1775988762.516:439): avc: denied { create } for pid=7325 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.678901][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 142.712621][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.727890][ T9] usb 3-1: Product: syz [ 142.732119][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 142.737624][ T9] usb 3-1: Manufacturer: syz [ 142.743349][ T9] usb 3-1: SerialNumber: syz [ 142.815911][ T30] audit: type=1400 audit(1775988762.776:440): avc: denied { getopt } for pid=7322 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.744679][ T5915] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 143.753835][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.762502][ T5915] usb 2-1: Product: syz [ 143.766675][ T5915] usb 2-1: Manufacturer: syz [ 144.060070][ T5915] usb 2-1: SerialNumber: syz [ 144.082343][ T30] audit: type=1400 audit(1775988764.026:441): avc: denied { create } for pid=7315 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.174250][ T30] audit: type=1400 audit(1775988764.026:442): avc: denied { getopt } for pid=7315 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.472218][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.498779][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.593838][ T30] audit: type=1400 audit(1775988764.546:443): avc: denied { write } for pid=7337 comm="syz.5.375" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.691243][ T5915] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 144.711600][ T5915] usb 2-1: USB disconnect, device number 15 [ 145.628117][ T5888] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 145.916512][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 145.921530][ T5888] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 145.958343][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.893170][ T6670] kernel read not supported for file /dsp1 (pid: 6670 comm: kworker/1:7) [ 146.901759][ T30] audit: type=1400 audit(1775988765.996:444): avc: denied { bind } for pid=7362 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.143802][ T5888] usb 5-1: config 0 descriptor?? [ 147.151696][ T5888] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 147.185251][ T30] audit: type=1400 audit(1775988767.146:445): avc: denied { ioctl } for pid=7368 comm="syz.2.383" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 147.190897][ T9] usb 3-1: USB disconnect, device number 17 [ 147.443050][ T5888] gp8psk: usb in 128 operation failed. [ 147.700876][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 147.721670][ T7384] netlink: 'syz.5.387': attribute type 1 has an invalid length. [ 147.729304][ T7384] netlink: 224 bytes leftover after parsing attributes in process `syz.5.387'. [ 147.923139][ T30] audit: type=1400 audit(1775988767.876:446): avc: denied { wake_alarm } for pid=7385 comm="syz.2.390" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.034570][ T5888] gp8psk: usb in 146 operation failed. [ 148.040055][ T5888] gp8psk: failed to get FW version [ 148.590424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.716927][ T5888] gp8psk: usb in 149 operation failed. [ 148.749250][ T5888] gp8psk: failed to get FPGA version [ 148.758328][ T5888] gp8psk: usb in 138 operation failed. [ 148.765260][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 148.787536][ T5888] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 148.824042][ T5888] usb 5-1: USB disconnect, device number 11 [ 148.837267][ T30] audit: type=1400 audit(1775988768.796:447): avc: denied { mount } for pid=7396 comm="syz.2.393" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.074168][ T7402] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[7402] [ 149.100372][ T30] audit: type=1400 audit(1775988769.046:448): avc: denied { ioctl } for pid=7396 comm="syz.2.393" path="socket:[18618]" dev="sockfs" ino=18618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.475161][ T7403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.751722][ T7405] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 149.827615][ T7412] netlink: 72 bytes leftover after parsing attributes in process `syz.2.397'. [ 150.023069][ T5888] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 150.036654][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 150.090370][ T29] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 150.206999][ T5888] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.218949][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.241675][ T5888] usb 6-1: Product: syz [ 150.252143][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.255597][ T29] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 150.272090][ T5888] usb 6-1: Manufacturer: syz [ 150.276273][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.276675][ T5888] usb 6-1: SerialNumber: syz [ 150.296962][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.297286][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 150.312024][ T29] usb 2-1: config 0 descriptor?? [ 150.325999][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.335101][ T29] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 150.342485][ T5888] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.360617][ T9] usb 5-1: SerialNumber: syz [ 150.368170][ T791] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 150.391897][ T9] usb 5-1: 0:2 : does not exist [ 150.451307][ T1161] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 150.603609][ T1161] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 150.637162][ T1161] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 150.652264][ T1161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.669084][ T1161] usb 3-1: config 0 descriptor?? [ 150.724209][ T29] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 150.796560][ T30] audit: type=1400 audit(1775988770.756:449): avc: denied { create } for pid=7409 comm="syz.5.396" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.828061][ T5888] usb 5-1: USB disconnect, device number 12 [ 151.134653][ T30] audit: type=1400 audit(1775988771.086:450): avc: denied { execute } for pid=7409 comm="syz.5.396" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.560315][ T791] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 151.568413][ T29] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 151.577751][ T791] ath9k_htc: Failed to initialize the device [ 151.592091][ T1161] usbhid 3-1:0.0: can't add hid device: -71 [ 151.612034][ T1161] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.616769][ T791] usb 6-1: ath9k_htc: USB layer deinitialized [ 151.641840][ T1161] usb 3-1: USB disconnect, device number 18 [ 152.189607][ T7442] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 152.200187][ T7442] sch_fq: defrate 3 ignored. [ 152.208202][ T7442] tipc: Started in network mode [ 152.213654][ T7442] tipc: Node identity c2c21918099b, cluster identity 4711 [ 152.222054][ T7442] tipc: Enabled bearer , priority 0 [ 152.233770][ T7442] tipc: Resetting bearer [ 152.248543][ T7441] tipc: Disabling bearer [ 152.270544][ T1161] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 152.369706][ T7446] netlink: 72 bytes leftover after parsing attributes in process `syz.2.409'. [ 152.443353][ T7444] vivid-007: ================= START STATUS ================= [ 152.453393][ T7444] vivid-007: Enable Output Cropping: true [ 152.459312][ T7444] vivid-007: Enable Output Composing: true [ 152.465145][ T7444] vivid-007: Enable Output Scaler: true [ 152.470717][ T7444] vivid-007: Tx RGB Quantization Range: Automatic [ 152.477151][ T7444] vivid-007: Transmit Mode: HDMI [ 152.482677][ T7444] vivid-007: Hotplug Present: 0x00000000 [ 152.488320][ T7444] vivid-007: RxSense Present: 0x00000000 [ 152.493969][ T7444] vivid-007: EDID Present: 0x00000000 [ 152.499336][ T7444] vivid-007: ================== END STATUS ================== [ 152.520973][ T1161] usb 5-1: Using ep0 maxpacket: 32 [ 152.527475][ T1161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.538566][ T1161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.660906][ T1161] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 152.771916][ T1161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.917539][ T1161] usb 5-1: config 0 descriptor?? [ 152.937267][ T5915] usb 6-1: USB disconnect, device number 19 [ 153.185722][ T7454] lo speed is unknown, defaulting to 1000 [ 153.191868][ T7454] lo speed is unknown, defaulting to 1000 [ 153.207119][ T7454] lo speed is unknown, defaulting to 1000 [ 153.227486][ T7454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.260323][ T7454] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 153.409672][ T7454] lo speed is unknown, defaulting to 1000 [ 153.423202][ T7454] lo speed is unknown, defaulting to 1000 [ 153.434319][ T7454] lo speed is unknown, defaulting to 1000 [ 153.445733][ T7454] lo speed is unknown, defaulting to 1000 [ 153.456903][ T7454] lo speed is unknown, defaulting to 1000 [ 153.588298][ T30] audit: type=1400 audit(1775988773.546:451): avc: denied { unlink } for pid=6183 comm="syz-executor" name="file5" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.612925][ T6670] usb 2-1: USB disconnect, device number 16 [ 153.758147][ T7466] tmpfs: Unknown parameter 'grpq' [ 153.795735][ T7466] ISOFS: Unable to identify CD-ROM format. [ 153.815905][ T7466] netlink: 'syz.5.412': attribute type 10 has an invalid length. [ 153.833775][ T7466] team0: Device ipvlan1 failed to register rx_handler [ 153.881273][ T1161] hid_parser_main: 27 callbacks suppressed [ 153.881291][ T1161] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x4 [ 153.898437][ T1161] savu 0003:1E7D:2D5A.0006: unknown global tag 0xd [ 153.907270][ T1161] savu 0003:1E7D:2D5A.0006: item 0 1 1 13 parsing failed [ 153.950849][ T791] IPVS: starting estimator thread 0... [ 153.962213][ T1161] savu 0003:1E7D:2D5A.0006: parse failed [ 154.033944][ T1161] savu 0003:1E7D:2D5A.0006: probe with driver savu failed with error -22 [ 154.042932][ T7468] IPVS: using max 41 ests per chain, 98400 per kthread [ 154.115003][ T791] usb 5-1: USB disconnect, device number 13 [ 154.168739][ T6670] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.400297][ T6670] usb 2-1: Using ep0 maxpacket: 8 [ 154.410126][ T6670] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 154.419263][ T6670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.429834][ T6670] usb 2-1: Product: syz [ 154.435998][ T6670] usb 2-1: Manufacturer: syz [ 154.440712][ T6670] usb 2-1: SerialNumber: syz [ 154.735103][ T30] audit: type=1400 audit(1775988774.696:452): avc: denied { set_context_mgr } for pid=7472 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.761186][ T7476] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.867573][ T7476] syz_tun: refused to change device tx_queue_len [ 154.874471][ T7476] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 154.901548][ T30] audit: type=1400 audit(1775988774.756:453): avc: denied { create } for pid=7475 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.966657][ T7486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.982274][ T6670] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 154.991536][ T6670] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 155.021276][ T6670] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 155.035765][ T7487] sctp: [Deprecated]: syz.5.420 (pid 7487) Use of int in max_burst socket option deprecated. [ 155.035765][ T7487] Use struct sctp_assoc_value instead [ 155.067801][ T6670] usb 2-1: USB disconnect, device number 17 [ 155.128795][ T7489] netlink: 72 bytes leftover after parsing attributes in process `syz.4.421'. [ 155.350367][ T30] audit: type=1400 audit(1775988775.176:454): avc: denied { module_request } for pid=7488 comm="syz.4.421" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 155.866008][ T30] audit: type=1400 audit(1775988775.806:455): avc: denied { create } for pid=7504 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.885777][ T30] audit: type=1400 audit(1775988775.816:456): avc: denied { execute } for pid=7504 comm="syz.2.425" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 156.005902][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 156.058494][ T7512] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 156.070695][ T7512] sch_fq: defrate 3 ignored. [ 156.077065][ T7512] tipc: Enabled bearer , priority 0 [ 156.086008][ T7512] tipc: Resetting bearer [ 156.099495][ T7511] tipc: Disabling bearer [ 156.150319][ T5888] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 156.302301][ T5888] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.320425][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.339603][ T5888] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.480451][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.488695][ T5888] usb 2-1: Product: syz [ 156.493110][ T5888] usb 2-1: Manufacturer: syz [ 156.498545][ T5888] usb 2-1: SerialNumber: syz [ 156.514670][ T5888] usb 2-1: config 0 descriptor?? [ 156.530448][ T6670] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 156.541169][ T5888] usb 2-1: selecting invalid altsetting 0 [ 156.730715][ T6670] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.746467][ T6670] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 156.781541][ T6670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.830491][ T6670] usb 3-1: Product: syz [ 156.837045][ T6670] usb 3-1: Manufacturer: syz [ 156.842340][ T6670] usb 3-1: SerialNumber: syz [ 156.874453][ T6670] usb 3-1: selecting invalid altsetting 1 [ 156.893452][ T6670] usb 3-1: unit 6 not found! [ 157.098118][ T5888] usb 2-1: USB disconnect, device number 18 [ 157.115364][ T7514] netlink: 52719 bytes leftover after parsing attributes in process `syz.2.430'. [ 157.435457][ T6670] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 157.465408][ T6670] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 157.496336][ T30] audit: type=1400 audit(1775988777.456:457): avc: denied { connect } for pid=7520 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.519967][ T6670] usb 3-1: selecting invalid altsetting 1 [ 157.528207][ T6670] usb 3-1: unit 6 not found! [ 157.535101][ T6670] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 157.545133][ T6670] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 157.584987][ T6670] usb 3-1: selecting invalid altsetting 1 [ 157.593727][ T6670] usb 3-1: unit 6 not found! [ 157.604423][ T6670] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 157.628416][ T6670] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 157.643419][ T6670] usb 3-1: USB disconnect, device number 19 [ 157.668764][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.867134][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.875335][ T30] audit: type=1400 audit(1775988777.766:458): avc: denied { kexec_image_load } for pid=7526 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.898403][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 157.927206][ T24] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 157.997054][ T24] usb 4-1: USB disconnect, device number 11 [ 158.020376][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 158.027406][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.040926][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.050040][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.105219][ T29] usb 5-1: Product: syz [ 158.119284][ T29] usb 5-1: Manufacturer: syz [ 158.133403][ T29] usb 5-1: SerialNumber: syz [ 158.161344][ T29] usb 5-1: config 0 descriptor?? [ 158.181352][ T29] smsc95xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 158.203369][ T29] smsc95xx 5-1:0.0: probe with driver smsc95xx failed with error -22 [ 158.360820][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.382279][ T1161] usb 5-1: USB disconnect, device number 14 [ 158.520359][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 158.530768][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.541250][ T24] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 158.556801][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.569940][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.578791][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.594659][ T24] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 158.649912][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.667528][ T24] usb 4-1: config 0 descriptor?? [ 158.667935][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'. [ 158.685434][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 158.790376][ T29] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 158.817915][ T24] usb 4-1: USB disconnect, device number 12 [ 158.971866][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 158.981478][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 158.991607][ T29] usb 6-1: config 1 has an invalid interface number: 8 but max is 2 [ 159.000051][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.010259][ T29] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.019187][ T29] usb 6-1: config 1 has no interface number 0 [ 159.028063][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 159.050364][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.059811][ T29] usb 6-1: Product: syz [ 159.121061][ T7548] Device name cannot be null; rc = [-22] [ 160.229708][ T29] usb 6-1: Manufacturer: syz [ 160.234391][ T29] usb 6-1: SerialNumber: syz [ 160.443544][ T29] usb 6-1: USB disconnect, device number 20 [ 160.488058][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.721046][ T5888] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 160.743640][ T7564] netlink: 136 bytes leftover after parsing attributes in process `syz.1.445'. [ 160.788570][ T7565] kvm: pic: non byte write [ 160.807251][ T30] audit: type=1400 audit(1775988780.766:459): avc: denied { connect } for pid=7567 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.885786][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.896675][ T5888] usb 5-1: config 0 has no interfaces? [ 160.902252][ T5888] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 160.911475][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.928701][ T5888] usb 5-1: config 0 descriptor?? [ 161.025559][ T30] audit: type=1400 audit(1775988780.986:460): avc: denied { write } for pid=7572 comm="syz.5.448" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.070332][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 161.137131][ T1161] usb 5-1: USB disconnect, device number 15 [ 161.222339][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 161.232427][ T10] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 161.241614][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.249659][ T10] usb 2-1: Product: syz [ 161.254359][ T10] usb 2-1: Manufacturer: syz [ 161.258990][ T10] usb 2-1: SerialNumber: syz [ 161.474176][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.484631][ T10] usb 2-1: USB disconnect, device number 19 [ 161.823908][ T7580] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 162.272333][ T7590] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 163.574664][ T7593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7593 comm=syz.5.454 [ 163.876626][ T30] audit: type=1400 audit(1775988783.786:461): avc: denied { ioctl } for pid=7598 comm="syz.1.458" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 164.403049][ T7607] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 164.403049][ T7607] Ue[%#s' [ 164.426480][ T30] audit: type=1400 audit(1775988784.366:462): avc: denied { mounton } for pid=7581 comm="syz.2.451" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 164.506606][ T30] audit: type=1400 audit(1775988784.466:463): avc: denied { lock } for pid=7609 comm="syz.4.459" path="socket:[19202]" dev="sockfs" ino=19202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 164.540375][ T29] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 164.601895][ T7613] netlink: 72 bytes leftover after parsing attributes in process `syz.5.460'. [ 164.704474][ T29] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 164.718863][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.765807][ T29] usb 2-1: config 0 has no interface number 0 [ 164.797251][ T29] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 164.826836][ T29] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.882265][ T29] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 164.891596][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.899608][ T29] usb 2-1: Product: syz [ 164.910421][ T29] usb 2-1: Manufacturer: syz [ 164.920431][ T29] usb 2-1: SerialNumber: syz [ 164.932506][ T29] usb 2-1: config 0 descriptor?? [ 165.170328][ T5888] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 165.276303][ T7640] Malformed UNC in devname [ 165.276303][ T7640] [ 165.284399][ T7640] CIFS: VFS: Malformed UNC in devname [ 165.344102][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.364794][ T29] usb 2-1: USB disconnect, device number 20 [ 165.377097][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.387857][ T5888] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 165.486806][ T7646] netlink: 'syz.3.470': attribute type 39 has an invalid length. [ 165.501314][ T30] audit: type=1400 audit(1775988785.436:464): avc: denied { link } for pid=7641 comm="syz.3.470" name="#7" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.523307][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.576374][ T30] audit: type=1400 audit(1775988785.436:465): avc: denied { rename } for pid=7641 comm="syz.3.470" name="#8" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 165.731712][ T5888] usb 5-1: config 0 descriptor?? [ 165.980255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 166.077212][ T7656] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 166.113882][ T7656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.145063][ T7658] erspan0: entered allmulticast mode [ 166.166108][ T7658] bond1: (slave erspan0): making interface the new active one [ 166.192493][ T7658] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 167.626885][ T7661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 167.677957][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 167.683997][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 167.694354][ T5888] usb 5-1: USB disconnect, device number 16 [ 168.107528][ T7674] syzkaller0: entered promiscuous mode [ 168.114474][ T7674] syzkaller0: entered allmulticast mode [ 168.128162][ T7674] tipc: Started in network mode [ 168.134833][ T7674] tipc: Node identity d64e0810af51, cluster identity 3 [ 168.143045][ T7674] tipc: Enabled bearer , priority 0 [ 168.159360][ T7674] tipc: Resetting bearer [ 168.167319][ T7673] tipc: Resetting bearer [ 168.177858][ T7673] tipc: Disabling bearer [ 168.860424][ T1161] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.098558][ T7686] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 169.311903][ T1161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.353197][ T1161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.478805][ T1161] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.494353][ T1161] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.513024][ T1161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.534174][ T1161] usb 5-1: config 0 descriptor?? [ 169.640376][ T24] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 169.666278][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 169.753002][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.486'. [ 169.762300][ T7698] netlink: 'syz.5.486': attribute type 1 has an invalid length. [ 169.771866][ T30] audit: type=1400 audit(1775988789.736:466): avc: denied { connect } for pid=7697 comm="syz.5.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.844140][ T24] usb 4-1: No LPM exit latency info found, disabling LPM. [ 169.853247][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 169.874660][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 4 [ 169.887273][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 169.907687][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 169.917036][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.925363][ T24] usb 4-1: Product: 愺蝹㴍觓꒲碽礀㺰⦓梹솸潍귮說₥펃뾈箅ൊㄕ酭◝훯變ᖛ䒝㦾螺䡲憒镬鬽旨玈墧뾾攫隃嗄欪뗠鍜쎛㦩꒞〻鎜゚鎶춀о畏㧏㱹詌爔蒁㙗ᑅ꾈莲뀤⓿旫⯢⿹㤢奧兒蜌剞뽭Ⴍ㈭㱊瘞鰊䋳䱊調ㆌ吹푥Ᲊᶊ庐Ɗ﮿펣鶚 [ 169.959622][ T24] usb 4-1: Manufacturer: ⠉ [ 169.964476][ T24] usb 4-1: SerialNumber: 匍巭嘇䨹ᡳ뇂⪚쉟緎⸭莊魏訷耠㢥퐌㤐룇芓ṹ噞ᝠ赣즃쬝ퟎ䩆얩⅕푟鷍엂崷R锻Ო὏偖뵫ዟ晍ꄚ [ 170.249912][ T1161] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 170.640353][ T1161] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 170.714713][ T24] usb 4-1: low speed audio streaming not supported [ 170.727122][ T24] usb 4-1: low speed audio streaming not supported [ 170.781773][ T24] usb 4-1: USB disconnect, device number 13 [ 170.800284][ T1161] usb 6-1: Using ep0 maxpacket: 32 [ 170.825598][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.843804][ T1161] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 170.853480][ T1161] usb 6-1: config 0 has no interface number 0 [ 170.865074][ T1161] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 170.886429][ T7715] netlink: 'syz.2.490': attribute type 39 has an invalid length. [ 170.924442][ T1161] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 170.957672][ T1161] usb 6-1: config 0 interface 196 has no altsetting 0 [ 170.972225][ T1161] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 170.981338][ T1161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.995312][ T1161] usb 6-1: Product: syz [ 171.005671][ T1161] usb 6-1: Manufacturer: syz [ 171.021092][ T1161] usb 6-1: SerialNumber: syz [ 171.036293][ T1161] usb 6-1: config 0 descriptor?? [ 171.053313][ T7704] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 171.280286][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 171.455574][ T29] usb 5-1: USB disconnect, device number 17 [ 171.638241][ T24] usb 2-1: config 0 has an invalid descriptor of length 251, skipping remainder of the config [ 171.650708][ T30] audit: type=1400 audit(1775988791.586:467): avc: denied { read } for pid=7703 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.669776][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.695501][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.714454][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.726843][ T7724] random: crng reseeded on system resumption [ 171.728243][ T30] audit: type=1400 audit(1775988791.686:468): avc: denied { write } for pid=7703 comm="syz.5.488" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.785251][ T30] audit: type=1400 audit(1775988791.746:469): avc: denied { ioctl } for pid=7703 comm="syz.5.488" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.786282][ T7726] bridge_slave_0: left allmulticast mode [ 171.820557][ T7726] bridge_slave_0: left promiscuous mode [ 171.826510][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.833565][ T7727] netlink: 56 bytes leftover after parsing attributes in process `syz.3.493'. [ 171.859346][ T7726] bridge_slave_1: left allmulticast mode [ 171.870696][ T7726] bridge_slave_1: left promiscuous mode [ 171.948780][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.958453][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.968806][ T7726] bond0: (slave bond_slave_0): Releasing backup interface [ 171.979042][ T7726] bond0: (slave bond_slave_1): Releasing backup interface [ 171.989242][ T7726] team0: Port device team_slave_0 removed [ 171.997873][ T7726] team0: Port device team_slave_1 removed [ 172.004215][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.013457][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.031835][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.038255][ T30] audit: type=1400 audit(1775988791.996:470): avc: denied { append } for pid=7729 comm="syz.2.495" name="sg0" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.065454][ T24] usb 2-1: Product: syz [ 172.068952][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 172.079775][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.087331][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.097362][ T7726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.229632][ T24] usb 2-1: Manufacturer: syz [ 173.596692][ T7734] infiniband syz2: set down [ 173.601352][ T7734] infiniband syz2: added ipvlan0 [ 173.609869][ T7734] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 173.612630][ T7734] infiniband syz2: Couldn't open port 1 [ 173.641501][ T7734] RDS/IB: syz2: added [ 173.645750][ T7734] smc: adding ib device syz2 with port count 1 [ 173.652040][ T7734] smc: ib device syz2 port 1 has pnetid S (user defined) [ 174.370269][ T24] usb 2-1: SerialNumber: syz [ 174.388078][ T24] usb 2-1: config 0 descriptor?? [ 174.397098][ T24] usb 2-1: can't set config #0, error -71 [ 174.412008][ T24] usb 2-1: USB disconnect, device number 21 [ 175.570476][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 175.651900][ T30] audit: type=1400 audit(1775988795.606:471): avc: denied { setopt } for pid=7759 comm="syz.3.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.986859][ T7747] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 176.017497][ T30] audit: type=1400 audit(1775988795.946:472): avc: denied { mount } for pid=7744 comm="syz.1.499" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.264103][ T1161] ipheth 6-1:0.196: Unable to find endpoints [ 176.296679][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.313594][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 176.395560][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 176.954069][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.964290][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.021415][ T5915] usb 6-1: USB disconnect, device number 21 [ 177.041767][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.374818][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.383827][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.595226][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 177.959492][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 178.052815][ T7788] syzkaller0: entered promiscuous mode [ 178.066956][ T7788] syzkaller0: entered allmulticast mode [ 178.085761][ T7788] tipc: Enabled bearer , priority 0 [ 178.107657][ T7788] tipc: Resetting bearer [ 178.121853][ T7787] tipc: Resetting bearer [ 178.181946][ T7787] tipc: Disabling bearer [ 178.498633][ T7792] overlay: Bad value for 'uuid' [ 178.525467][ T30] audit: type=1400 audit(1775988798.486:473): avc: denied { connect } for pid=7791 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.246108][ T1161] usb 3-1: USB disconnect, device number 20 [ 179.276135][ T7800] netlink: 72 bytes leftover after parsing attributes in process `syz.2.515'. [ 180.202098][ T30] audit: type=1400 audit(1775988800.146:474): avc: denied { mount } for pid=7814 comm="syz.2.516" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 180.270308][ T30] audit: type=1400 audit(1775988800.146:475): avc: denied { mounton } for pid=7814 comm="syz.2.516" path="/103/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 180.354339][ T30] audit: type=1400 audit(1775988800.266:476): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 180.496857][ T30] audit: type=1400 audit(1775988800.366:477): avc: denied { ioctl } for pid=7822 comm="syz.1.520" path="socket:[20289]" dev="sockfs" ino=20289 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.531363][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 180.537378][ T51] Bluetooth: hci2: command 0x2016 tx timeout [ 180.537574][ T5817] Bluetooth: hci1: command 0x2016 tx timeout [ 180.544472][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 180.571018][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 180.571348][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.5.519'. [ 180.710505][ T7834] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 180.755957][ T10] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 180.769408][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.798727][ T10] usb 5-1: Product: syz [ 180.801030][ T7836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 180.832135][ T10] usb 5-1: Manufacturer: syz [ 180.950431][ T10] usb 5-1: SerialNumber: syz [ 180.968202][ T10] usb 5-1: config 0 descriptor?? [ 180.983003][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 180.991202][ T30] audit: type=1400 audit(1775988800.946:478): avc: denied { read } for pid=5166 comm="acpid" name="mouse1" dev="devtmpfs" ino=3041 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.015133][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.025196][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 181.034633][ T10] usb 5-1: media controller created [ 181.053759][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.124446][ T30] audit: type=1400 audit(1775988800.946:479): avc: denied { open } for pid=5166 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3041 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.147958][ T30] audit: type=1400 audit(1775988800.946:480): avc: denied { ioctl } for pid=5166 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3041 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.197640][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.522'. [ 181.227494][ T10] DVB: Unable to find symbol mt352_attach() [ 181.240306][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 181.249924][ T30] audit: type=1800 audit(1775988801.206:481): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.522" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 181.392275][ T10] DVB: Unable to find symbol nxt6000_attach() [ 181.434354][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 181.453356][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.470316][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 181.492064][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 181.520276][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.647545][ T7851] random: crng reseeded on system resumption [ 181.780570][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 181.809350][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 181.839391][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 181.871174][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 181.882676][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 181.887535][ T10] usb 5-1: USB disconnect, device number 18 [ 181.903275][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.923756][ T24] usb 3-1: Product: syz [ 181.939415][ T24] usb 3-1: Manufacturer: syz [ 181.987479][ T24] usb 3-1: SerialNumber: syz [ 182.030966][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 182.383810][ T24] usb 3-1: config 0 descriptor?? [ 182.434543][ T24] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 182.717068][ T7863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7863 comm=syz.3.532 [ 182.973569][ T30] audit: type=1400 audit(1775988802.926:482): avc: denied { write } for pid=7864 comm="syz.5.530" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 183.051337][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 183.051760][ T7870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.327246][ T7870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.850318][ T791] usb 3-1: USB disconnect, device number 21 [ 184.020534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 184.940168][ T5819] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 184.980289][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 185.013923][ T7901] netlink: 'syz.3.539': attribute type 30 has an invalid length. [ 185.202864][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.218746][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 185.238610][ T24] usb 2-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 185.264485][ T7896] netlink: 'syz.3.539': attribute type 30 has an invalid length. [ 185.272310][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.309939][ T24] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 185.353602][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.369986][ T30] audit: type=1400 audit(1775988805.326:483): avc: denied { ioctl } for pid=7906 comm="syz.2.540" path="socket:[20905]" dev="sockfs" ino=20905 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.543621][ T24] usb 2-1: Product: syz [ 185.548117][ T24] usb 2-1: Manufacturer: syz [ 185.554994][ T24] usb 2-1: SerialNumber: syz [ 185.598639][ T30] audit: type=1400 audit(1775988805.556:484): avc: denied { setopt } for pid=7895 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.713463][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 185.978750][ T30] audit: type=1400 audit(1775988805.936:485): avc: denied { getopt } for pid=7918 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.581165][ T24] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 187.602332][ T24] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 187.640845][ T791] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 187.676373][ T24] usb 2-1: USB disconnect, device number 22 [ 187.750532][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 187.803780][ T791] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 187.839195][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.886057][ T791] usb 3-1: Product: syz [ 187.896059][ T791] usb 3-1: Manufacturer: syz [ 187.905852][ T791] usb 3-1: SerialNumber: syz [ 187.915982][ T10] usb 5-1: config 1 has an invalid interface number: 108 but max is 1 [ 187.924412][ T10] usb 5-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 187.943778][ T791] usb 3-1: config 0 descriptor?? [ 188.035787][ T791] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 188.046026][ T10] usb 5-1: config 1 has no interface number 1 [ 188.048137][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.066202][ T791] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 188.075483][ T10] usb 5-1: too many endpoints for config 1 interface 108 altsetting 32: 121, using maximum allowed: 30 [ 188.075521][ T10] usb 5-1: config 1 interface 108 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 121 [ 188.075547][ T10] usb 5-1: config 1 interface 108 has no altsetting 0 [ 188.077535][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.513598][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.527513][ T10] usb 5-1: Product: syz [ 188.531820][ T10] usb 5-1: Manufacturer: syz [ 188.536409][ T10] usb 5-1: SerialNumber: syz [ 188.541191][ T30] audit: type=1400 audit(1775988808.206:486): avc: denied { accept } for pid=7955 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.570759][ T791] usb 3-1: media controller created [ 188.572905][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 188.592912][ T30] audit: type=1800 audit(1775988808.556:487): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.548" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 188.594148][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.638561][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.708057][ T791] DVB: Unable to find symbol mt352_attach() [ 188.729257][ T7961] netlink: 'syz.5.554': attribute type 1 has an invalid length. [ 188.763230][ T7961] bond1: entered promiscuous mode [ 188.768308][ T7961] bond1: entered allmulticast mode [ 188.882378][ T791] DVB: Unable to find symbol nxt6000_attach() [ 188.888546][ T791] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 188.909519][ T7961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.070195][ T791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 189.088294][ T791] dvb-usb: schedule remote query interval to 1000 msecs. [ 189.096250][ T791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 189.107495][ T791] dvb-usb: bulk message failed: -22 (7/0) [ 189.117439][ T791] dvb-usb: bulk message failed: -22 (7/0) [ 189.134853][ T791] usb 3-1: USB disconnect, device number 22 [ 189.308992][ T791] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 190.025431][ T10] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 190.032357][ T10] cdc_ncm 5-1:1.0: bind() failure [ 190.048917][ T10] usb 5-1: USB disconnect, device number 19 [ 190.450328][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 190.590337][ T5915] usb 2-1: device descriptor read/64, error -71 [ 190.751068][ T7997] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 190.857158][ T791] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 191.050285][ T791] usb 6-1: Using ep0 maxpacket: 8 [ 191.334784][ T791] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 191.354578][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.373994][ T791] usb 6-1: Product: syz [ 191.385210][ T791] usb 6-1: Manufacturer: syz [ 191.416235][ T7997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.527566][ T5915] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 191.546790][ T8000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.557922][ T8000] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.571310][ T8000] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 191.596188][ T791] usb 6-1: SerialNumber: syz [ 192.299232][ T791] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 192.308176][ T791] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 192.312688][ T5915] usb 2-1: device descriptor read/64, error -71 [ 192.329840][ T791] usb 6-1: USB disconnect, device number 22 [ 192.460573][ T5915] usb usb2-port1: attempt power cycle [ 192.532877][ T30] audit: type=1400 audit(1775988812.496:488): avc: denied { ioctl } for pid=8014 comm="syz.2.570" path="socket:[21158]" dev="sockfs" ino=21158 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.610176][ T8015] team0 (unregistering): Port device team_slave_0 removed [ 192.631358][ T8015] team0 (unregistering): Port device team_slave_1 removed [ 192.730315][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 192.830299][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 193.071759][ T5915] usb 2-1: device descriptor read/8, error -71 [ 193.095760][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.284094][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 193.438084][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 193.623037][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.638930][ T10] usb 4-1: config 0 descriptor?? [ 193.674887][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 193.681582][ T30] audit: type=1400 audit(1775988813.636:489): avc: denied { execute } for pid=8024 comm="syz.5.572" path="/90/file0/cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 193.710692][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 193.721557][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 193.863377][ T8012] dvb-usb: bulk message failed: -22 (2/0) [ 193.887667][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 193.900373][ T10] usb 4-1: media controller created [ 193.907334][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.916794][ T30] audit: type=1400 audit(1775988813.886:490): avc: denied { getopt } for pid=8028 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.937548][ T30] audit: type=1400 audit(1775988813.906:491): avc: denied { setopt } for pid=8028 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.960076][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 193.967070][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 193.989607][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 194.015811][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 194.053203][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 194.089290][ T10] usb 4-1: USB disconnect, device number 14 [ 194.113467][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 194.175530][ T8034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.576'. [ 194.500448][ T5915] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.735916][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 194.746589][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 194.794773][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 194.889962][ T8047] netlink: 108 bytes leftover after parsing attributes in process `syz.3.579'. [ 194.902323][ T30] audit: type=1400 audit(1775988814.846:492): avc: denied { bind } for pid=8038 comm="syz.3.579" lport=14839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.009561][ T5915] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 195.032285][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.058845][ T5915] usb 5-1: Product: syz [ 195.068412][ T30] audit: type=1400 audit(1775988814.846:493): avc: denied { node_bind } for pid=8038 comm="syz.3.579" saddr=172.20.20.57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 195.090296][ T5915] usb 5-1: Manufacturer: syz [ 195.095183][ T5915] usb 5-1: SerialNumber: syz [ 195.102859][ T5915] usb 5-1: config 0 descriptor?? [ 195.108506][ T8037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.184714][ T8037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.316031][ T5915] usb 5-1: ucan: probing device on interface #0 [ 195.357863][ T30] audit: type=1400 audit(1775988815.306:494): avc: denied { map } for pid=8055 comm="syz.3.583" path="socket:[21211]" dev="sockfs" ino=21211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.410293][ T30] audit: type=1400 audit(1775988815.306:495): avc: denied { read } for pid=8055 comm="syz.3.583" path="socket:[21211]" dev="sockfs" ino=21211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.478137][ T8059] syzkaller0: entered promiscuous mode [ 195.484246][ T8059] syzkaller0: entered allmulticast mode [ 195.494610][ T8059] tipc: Enabled bearer , priority 0 [ 195.507994][ T8057] tipc: Resetting bearer [ 195.516707][ T5915] usb 5-1: ucan: device protocol version 0 is not supported [ 195.534208][ T5915] usb 5-1: ucan: probe failed; try to update the device firmware [ 195.562699][ T8057] tipc: Disabling bearer [ 195.724045][ T5915] usb 5-1: USB disconnect, device number 20 [ 196.259833][ T30] audit: type=1400 audit(1775988816.216:496): avc: denied { connect } for pid=8077 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.700471][ T5915] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 196.850409][ T30] audit: type=1800 audit(1775988816.806:497): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.594" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 196.870267][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 196.930788][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.946618][ T5915] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 197.025710][ T1161] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 197.110332][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.121821][ T5915] usb 6-1: config 0 descriptor?? [ 197.147031][ T5915] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 197.240651][ T1161] usb 2-1: Using ep0 maxpacket: 8 [ 197.293408][ T1161] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 197.334831][ T8106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.342258][ T8106] IPv6: NLM_F_CREATE should be set when creating new route [ 197.507083][ T30] audit: type=1400 audit(1775988817.326:498): avc: denied { write } for pid=8103 comm="syz.4.596" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 197.507549][ T1161] usb 2-1: config 0 has no interface number 0 [ 197.561477][ T1161] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.574831][ T1161] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 197.595594][ T5888] usb 6-1: USB disconnect, device number 23 [ 197.620750][ T1161] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.652012][ T1161] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.665820][ T1161] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.680440][ T1161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.703969][ T1161] usb 2-1: config 0 descriptor?? [ 197.726091][ T1161] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 197.839758][ T8110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.852190][ T8110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.598'. [ 197.875733][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 197.903914][ T3499] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.924670][ T3499] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.967633][ T3499] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.000535][ T3499] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.015117][ T5915] usb 2-1: USB disconnect, device number 27 [ 198.015118][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 198.056336][ T5915] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 198.073146][ T8089] ldusb: No device or device unplugged -19 [ 198.310802][ T1161] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.797788][ T8132] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x13 [ 199.022004][ T1161] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 199.056010][ T1161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.074046][ T1161] usb 5-1: Product: syz [ 199.087791][ T1161] usb 5-1: Manufacturer: syz [ 199.094359][ T1161] usb 5-1: SerialNumber: syz [ 199.102205][ T1161] usb 5-1: config 0 descriptor?? [ 199.221994][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 199.222024][ T30] audit: type=1400 audit(1775988819.176:501): avc: denied { setopt } for pid=8138 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.136661][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 200.378889][ T8160] netlink: 10976 bytes leftover after parsing attributes in process `syz.5.610'. [ 200.394505][ T8160] openvswitch: netlink: Flow key attr not present in new flow. [ 200.680344][ T5888] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 200.770319][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.843125][ T5888] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 200.857211][ T5888] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 200.871128][ T5888] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 200.880195][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.888287][ T5888] usb 3-1: Product: syz [ 200.892941][ T5888] usb 3-1: Manufacturer: syz [ 200.897693][ T5888] usb 3-1: SerialNumber: syz [ 200.921447][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 200.945587][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 200.968791][ T24] usb 4-1: config 0 has no interface number 0 [ 200.986492][ T24] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 112 [ 201.016155][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 201.044771][ T30] audit: type=1800 audit(1775988820.996:502): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.614" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 201.074611][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.105319][ T24] usb 4-1: Product: syz [ 201.109522][ T24] usb 4-1: Manufacturer: syz [ 201.114207][ T24] usb 4-1: SerialNumber: syz [ 201.124360][ T24] usb 4-1: config 0 descriptor?? [ 201.199195][ T1161] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 201.206316][ T8154] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 201.230270][ T1161] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 201.237748][ T1161] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 201.265872][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 201.322142][ T1161] usb 5-1: USB disconnect, device number 21 [ 201.330167][ T24] em28xx 4-1:0.132: Video interface 132 found: bulk [ 201.475357][ T8169] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.567016][ T8176] 9pnet_virtio: no channels available for device syz [ 201.575046][ T30] audit: type=1400 audit(1775988821.536:503): avc: denied { sqpoll } for pid=8168 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 201.591173][ T8169] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 201.660291][ T1161] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 201.810242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 202.010490][ T1161] usb 5-1: device descriptor read/64, error -71 [ 202.251830][ T1161] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 202.551165][ T1161] usb 5-1: device descriptor read/64, error -71 [ 202.680589][ T1161] usb usb5-port1: attempt power cycle [ 202.700545][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 202.833583][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 202.845163][ T29] kernel read not supported for file /dsp1 (pid: 29 comm: kworker/1:1) [ 202.890443][ T24] em28xx 4-1:0.132: board has no eeprom [ 202.961232][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 202.971505][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 202.980638][ T29] em28xx 4-1:0.132: Registering V4L2 extension [ 203.020281][ T1161] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 203.052144][ T1161] usb 5-1: device descriptor read/8, error -71 [ 203.088858][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 203.113414][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 203.128723][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 203.137977][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 203.218024][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 203.228764][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 203.265497][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 203.276342][ T5823] usb 4-1: USB disconnect, device number 15 [ 203.276495][ T29] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-19) [ 203.300311][ T1161] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 203.314512][ T5823] em28xx 4-1:0.132: Disconnecting em28xx [ 203.331744][ T1161] usb 5-1: device descriptor read/8, error -71 [ 203.358122][ T30] audit: type=1400 audit(1775988823.316:504): avc: denied { read } for pid=8199 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.382242][ T8201] 9p: Bad value for 'rfdno' [ 203.393381][ T29] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 203.402095][ T29] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 203.426289][ T29] em28xx 4-1:0.132: No AC97 audio processor [ 203.446500][ T1161] usb usb5-port1: unable to enumerate USB device [ 203.455692][ T30] audit: type=1400 audit(1775988823.346:505): avc: denied { read write } for pid=8199 comm="syz.5.621" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 203.460797][ T29] usb 4-1: Decoder not found [ 203.591283][ T29] em28xx 4-1:0.132: failed to create media graph [ 203.604361][ T30] audit: type=1400 audit(1775988823.346:506): avc: denied { open } for pid=8199 comm="syz.5.621" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 203.610881][ T29] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 203.692560][ T30] audit: type=1400 audit(1775988823.346:507): avc: denied { read write } for pid=8199 comm="syz.5.621" dev="sockfs" ino=22637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.752392][ T29] em28xx 4-1:0.132: Remote control support is not available for this card. [ 203.761146][ T8210] ================================================================== [ 203.769183][ T8210] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 203.776618][ T8210] Read of size 8 at addr ffff8880291c8790 by task v4l_id/8210 [ 203.784039][ T8210] [ 203.786338][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 203.786354][ T8210] Tainted: [L]=SOFTLOCKUP [ 203.786358][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.786364][ T8210] Call Trace: [ 203.786368][ T8210] [ 203.786372][ T8210] dump_stack_lvl+0x100/0x190 [ 203.786391][ T8210] print_report+0x156/0x4c9 [ 203.786406][ T8210] ? __virt_addr_valid+0x239/0x430 [ 203.786423][ T8210] ? v4l2_fh_init+0x27d/0x2c0 [ 203.786439][ T8210] kasan_report+0xdf/0x1e0 [ 203.786450][ T8210] ? v4l2_fh_init+0x27d/0x2c0 [ 203.786468][ T8210] v4l2_fh_init+0x27d/0x2c0 [ 203.786484][ T8210] v4l2_fh_open+0x64/0xa0 [ 203.786500][ T8210] em28xx_v4l2_open+0x11e/0x570 [ 203.786516][ T8210] v4l2_open+0x1d2/0x490 [ 203.786525][ T8210] ? __pfx_v4l2_open+0x10/0x10 [ 203.786534][ T8210] chrdev_open+0x234/0x6a0 [ 203.786546][ T8210] ? __pfx_chrdev_open+0x10/0x10 [ 203.786557][ T8210] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 203.786572][ T8210] do_dentry_open+0x6d8/0x1660 [ 203.786586][ T8210] ? __pfx_chrdev_open+0x10/0x10 [ 203.786599][ T8210] vfs_open+0x82/0x3f0 [ 203.786612][ T8210] path_openat+0x208c/0x31a0 [ 203.786626][ T8210] ? __pfx_path_openat+0x10/0x10 [ 203.786641][ T8210] do_file_open+0x20e/0x430 [ 203.786653][ T8210] ? __pfx_do_file_open+0x10/0x10 [ 203.786669][ T8210] ? alloc_fd+0x476/0x790 [ 203.786682][ T8210] ? do_getname+0x191/0x390 [ 203.786696][ T8210] do_sys_openat2+0x10d/0x1e0 [ 203.786709][ T8210] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.786725][ T8210] __x64_sys_openat+0x12d/0x210 [ 203.786739][ T8210] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.786754][ T8210] ? do_user_addr_fault+0x8d6/0x12f0 [ 203.786768][ T8210] do_syscall_64+0x106/0xf80 [ 203.786777][ T8210] ? clear_bhb_loop+0x40/0x90 [ 203.786790][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.786801][ T8210] RIP: 0033:0x7fb9cd0a7407 [ 203.786810][ T8210] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 203.786820][ T8210] RSP: 002b:00007fff366b59a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 203.786831][ T8210] RAX: ffffffffffffffda RBX: 00007fb9cd79d880 RCX: 00007fb9cd0a7407 [ 203.786837][ T8210] RDX: 0000000000000000 RSI: 00007fff366b6f1b RDI: ffffffffffffff9c [ 203.786844][ T8210] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 203.786850][ T8210] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 203.786856][ T8210] R13: 00007fff366b5bf0 R14: 00007fb9cd904000 R15: 0000561474ab24d8 [ 203.786866][ T8210] [ 203.786870][ T8210] [ 204.042839][ T8210] Allocated by task 29: [ 204.046961][ T8210] kasan_save_stack+0x30/0x50 [ 204.051615][ T8210] kasan_save_track+0x14/0x30 [ 204.056266][ T8210] __kasan_kmalloc+0xaa/0xb0 [ 204.060833][ T8210] em28xx_v4l2_init.cold+0x94/0x3503 [ 204.066085][ T8210] em28xx_init_extension+0x13a/0x200 [ 204.071342][ T8210] request_module_async+0x61/0x80 [ 204.076336][ T8210] process_one_work+0xa23/0x19a0 [ 204.081242][ T8210] worker_thread+0x5ef/0xe50 [ 204.085803][ T8210] kthread+0x370/0x450 [ 204.089840][ T8210] ret_from_fork+0x754/0xd80 [ 204.094408][ T8210] ret_from_fork_asm+0x1a/0x30 [ 204.099142][ T8210] [ 204.101435][ T8210] Freed by task 29: [ 204.105208][ T8210] kasan_save_stack+0x30/0x50 [ 204.109859][ T8210] kasan_save_track+0x14/0x30 [ 204.114508][ T8210] kasan_save_free_info+0x3b/0x70 [ 204.119503][ T8210] __kasan_slab_free+0x5f/0x80 [ 204.124232][ T8210] kfree+0x1f6/0x6b0 [ 204.128097][ T8210] kref_put.isra.0+0x56/0x90 [ 204.132658][ T8210] em28xx_v4l2_init.cold+0x280/0x3503 [ 204.137996][ T8210] em28xx_init_extension+0x13a/0x200 [ 204.143250][ T8210] request_module_async+0x61/0x80 [ 204.148243][ T8210] process_one_work+0xa23/0x19a0 [ 204.153147][ T8210] worker_thread+0x5ef/0xe50 [ 204.157706][ T8210] kthread+0x370/0x450 [ 204.161753][ T8210] ret_from_fork+0x754/0xd80 [ 204.166310][ T8210] ret_from_fork_asm+0x1a/0x30 [ 204.171045][ T8210] [ 204.173337][ T8210] The buggy address belongs to the object at ffff8880291c8000 [ 204.173337][ T8210] which belongs to the cache kmalloc-8k of size 8192 [ 204.187356][ T8210] The buggy address is located 1936 bytes inside of [ 204.187356][ T8210] freed 8192-byte region [ffff8880291c8000, ffff8880291ca000) [ 204.201292][ T8210] [ 204.203588][ T8210] The buggy address belongs to the physical page: [ 204.210143][ T8210] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x291c8 [ 204.218876][ T8210] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 204.227343][ T8210] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 204.234855][ T8210] page_type: f5(slab) [ 204.238807][ T8210] raw: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 204.247357][ T8210] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 204.255910][ T8210] head: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 204.264553][ T8210] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 204.275026][ T8210] head: 00fff00000000003 ffffea0000a47201 00000000ffffffff 00000000ffffffff [ 204.283666][ T8210] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 204.292302][ T8210] page dumped because: kasan: bad access detected [ 204.298679][ T8210] page_owner tracks the page as allocated [ 204.304364][ T8210] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5455, tgid 5455 (rcS), ts 31228764336, free_ts 31189392527 [ 204.324133][ T8210] post_alloc_hook+0x153/0x170 [ 204.328872][ T8210] get_page_from_freelist+0x111d/0x3140 [ 204.334390][ T8210] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 204.340258][ T8210] new_slab+0xa6/0x6b0 [ 204.344298][ T8210] refill_objects+0x26b/0x400 [ 204.348945][ T8210] __pcs_replace_empty_main+0x1ab/0x660 [ 204.354466][ T8210] __kmalloc_cache_noprof+0x493/0x6f0 [ 204.359810][ T8210] tomoyo_init_log+0xc4f/0x20c0 [ 204.364635][ T8210] tomoyo_supervisor+0x506/0x1340 [ 204.369630][ T8210] tomoyo_env_perm+0x191/0x200 [ 204.374367][ T8210] tomoyo_find_next_domain+0x13d7/0x2010 [ 204.379971][ T8210] tomoyo_bprm_check_security+0x12d/0x1d0 [ 204.385661][ T8210] security_bprm_check+0x87/0x1e0 [ 204.390658][ T8210] bprm_execve+0x84b/0x1680 [ 204.395134][ T8210] do_execveat_common.isra.0+0x4a5/0x580 [ 204.400739][ T8210] __x64_sys_execve+0x93/0xd0 [ 204.405817][ T8210] page last free pid 5190 tgid 5190 stack trace: [ 204.412108][ T8210] __free_frozen_pages+0x7e1/0x10d0 [ 204.417284][ T8210] qlist_free_all+0x47/0xe0 [ 204.421785][ T8210] kasan_quarantine_reduce+0x1a0/0x1f0 [ 204.427240][ T8210] __kasan_slab_alloc+0x69/0x90 [ 204.432063][ T8210] kmem_cache_alloc_noprof+0x241/0x6e0 [ 204.437514][ T8210] do_getname+0x35/0x390 [ 204.441736][ T8210] __x64_sys_unlink+0x36/0x70 [ 204.446385][ T8210] do_syscall_64+0x106/0xf80 [ 204.450945][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.456808][ T8210] [ 204.459106][ T8210] Memory state around the buggy address: [ 204.464712][ T8210] ffff8880291c8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.472742][ T8210] ffff8880291c8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.480779][ T8210] >ffff8880291c8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.488812][ T8210] ^ [ 204.493369][ T8210] ffff8880291c8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.501405][ T8210] ffff8880291c8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.509445][ T8210] ================================================================== [ 204.534381][ T8210] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 204.541579][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 204.552065][ T8210] Tainted: [L]=SOFTLOCKUP [ 204.556374][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 204.566405][ T8210] Call Trace: [ 204.569663][ T8210] [ 204.572572][ T8210] dump_stack_lvl+0x100/0x190 [ 204.577235][ T8210] vpanic+0x552/0x970 [ 204.581195][ T8210] ? __pfx_vpanic+0x10/0x10 [ 204.585678][ T8210] ? v4l2_fh_init+0x27d/0x2c0 [ 204.590338][ T8210] panic+0xd1/0xe0 [ 204.594036][ T8210] ? __pfx_panic+0x10/0x10 [ 204.598431][ T8210] ? v4l2_fh_init+0x27d/0x2c0 [ 204.603090][ T8210] ? preempt_schedule_common+0x42/0xc0 [ 204.608970][ T8210] ? check_panic_on_warn+0x1f/0x90 [ 204.614066][ T8210] check_panic_on_warn.cold+0x19/0x34 [ 204.619418][ T8210] end_report.part.0+0x3a/0x90 [ 204.624163][ T8210] kasan_report.cold+0xe/0x18 [ 204.628826][ T8210] ? v4l2_fh_init+0x27d/0x2c0 [ 204.633490][ T8210] v4l2_fh_init+0x27d/0x2c0 [ 204.637978][ T8210] v4l2_fh_open+0x64/0xa0 [ 204.642291][ T8210] em28xx_v4l2_open+0x11e/0x570 [ 204.647128][ T8210] v4l2_open+0x1d2/0x490 [ 204.651347][ T8210] ? __pfx_v4l2_open+0x10/0x10 [ 204.656088][ T8210] chrdev_open+0x234/0x6a0 [ 204.660483][ T8210] ? __pfx_chrdev_open+0x10/0x10 [ 204.665399][ T8210] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 204.671709][ T8210] do_dentry_open+0x6d8/0x1660 [ 204.676448][ T8210] ? __pfx_chrdev_open+0x10/0x10 [ 204.681367][ T8210] vfs_open+0x82/0x3f0 [ 204.685417][ T8210] path_openat+0x208c/0x31a0 [ 204.689990][ T8210] ? __pfx_path_openat+0x10/0x10 [ 204.694908][ T8210] do_file_open+0x20e/0x430 [ 204.699389][ T8210] ? __pfx_do_file_open+0x10/0x10 [ 204.704396][ T8210] ? alloc_fd+0x476/0x790 [ 204.708710][ T8210] ? do_getname+0x191/0x390 [ 204.713197][ T8210] do_sys_openat2+0x10d/0x1e0 [ 204.717855][ T8210] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.723043][ T8210] __x64_sys_openat+0x12d/0x210 [ 204.727877][ T8210] ? __pfx___x64_sys_openat+0x10/0x10 [ 204.733233][ T8210] ? do_user_addr_fault+0x8d6/0x12f0 [ 204.738502][ T8210] do_syscall_64+0x106/0xf80 [ 204.743071][ T8210] ? clear_bhb_loop+0x40/0x90 [ 204.747728][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.753602][ T8210] RIP: 0033:0x7fb9cd0a7407 [ 204.757999][ T8210] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 204.777583][ T8210] RSP: 002b:00007fff366b59a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 204.785975][ T8210] RAX: ffffffffffffffda RBX: 00007fb9cd79d880 RCX: 00007fb9cd0a7407 [ 204.793925][ T8210] RDX: 0000000000000000 RSI: 00007fff366b6f1b RDI: ffffffffffffff9c [ 204.801874][ T8210] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 204.810431][ T8210] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 204.818385][ T8210] R13: 00007fff366b5bf0 R14: 00007fb9cd904000 R15: 0000561474ab24d8 [ 204.826338][ T8210] [ 204.829585][ T8210] Kernel Offset: disabled [ 204.833879][ T8210] Rebooting in 86400 seconds..