last executing test programs: 10.317439551s ago: executing program 2 (id=3992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 10.02110443s ago: executing program 4 (id=3996): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='fscache_access_cache\x00', r1, 0x0, 0x8000000000000007}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4, r7}) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x1d, 0x2, 0x6) syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) 9.775162233s ago: executing program 2 (id=3997): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/147, 0x93) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004400)={0x2020}, 0x2020) (fail_nth: 3) 8.526940068s ago: executing program 4 (id=3999): syz_clone3(&(0x7f0000000400)={0x800, 0x0, 0x0, &(0x7f0000000140), {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7, 0xffff}}}, 0x24}}, 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DISCONNECT(r3, 0xab08) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000400), 0x2000011a) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffff8, @local, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000200)="d81655262c2b7d088cfe72618f7305f4ffadaa459ea4190445db064dd7d7e96c2ad6747fa001f278efdd413809d0eab4a85e8b56ed6d83e174c8d83e843743bc28a05f50adb13d2be29ac40472c2e90020b0dad33eaa5a96c52107", 0x5b}, {&(0x7f0000000080)="64a837e3226a744d66b2a5ae4fc53bdbb8129aeb741ed6c7bb0f20ddf1c93212d3fb460637c85a4d7b24ecc5a29ec7", 0x2f}], 0x2, &(0x7f0000000f40)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @dstopts={{0x1040, 0x29, 0x37, {0x0, 0x204, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x6, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}}]}}}], 0x1068}}], 0x2, 0x4000010) 8.526350069s ago: executing program 2 (id=4000): dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003"], 0x7c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 5.137866402s ago: executing program 3 (id=4012): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket(0x2b, 0x1, 0x1) bind$inet6(r5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5e) 4.715122836s ago: executing program 0 (id=4013): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) sendmsg$NFT_BATCH(r3, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="2b72646d6120accf1dbe7909239f8eb702133329b4239b6c52836d6a0434b2c9d7a6a3d2f93e0e737163ea1b0951b7c06ae8638e16c47f3fa9721aa2e0eeff16a1eb014e4c3cca9c4154fcb56b3b1362c9ff60b349b145c44957f6f75698"], 0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 4.691090323s ago: executing program 1 (id=4014): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) recvmsg(r0, &(0x7f0000001200)={&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000001180)=[{&(0x7f0000000100)=""/104, 0x68}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/29, 0x1d}, 0x100) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000001240)={{0x3, @netrom}, [@default, @null, @null, @remote, @default, @null]}, &(0x7f00000012c0)=0x48, 0x800) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000001300)={0x0, @null, @netrom={'nr', 0x0}, 0x40, 'syz0\x00', @default, 0x6, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @default]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0xa244b000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001680)={'erspan0\x00', &(0x7f00000015c0)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x1, 0x80, {{0x24, 0x4, 0x2, 0x8, 0x90, 0x66, 0x0, 0x9d, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x16}, {[@rr={0x7, 0x23, 0xf1, [@remote, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @empty, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xad, [@private=0xa010101, @loopback]}, @cipso={0x86, 0x3b, 0x2, [{0x0, 0xc, "84afff722568fe41c723"}, {0x7, 0xb, "3da498f08ebf3355dd"}, {0x5, 0xa, "e5a6e466b2fbf676"}, {0x5, 0xf, "ad2f7b086caa7f5b89503dbf28"}, {0x2, 0x5, "a589d0"}]}, @timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0xd, [{@multicast2, 0x8}]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000003c80)=[{{&(0x7f0000001380)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001580)=[{&(0x7f00000013c0)="9aab181d2cb2316172ff990dcbf1fa232a1aa281b9a6eaeb2c7ba713ae3a469a95264e6ce6b0e6075b2dd1fc7d325730", 0x30}, {&(0x7f0000001400)="431f13d117c964d936764823643839b8faeaa84eb3149413517282c035e893d27e53a24406ac0c5a8f13a469b603fc668ae57f9dc0bdaba4901504f785d5e2ecfc6df5a20d40dfcd4a920c4047d61e4b082b85f14344bb869087d215192564902265d8d9a356b02dc65d5aed1667d94309b83c", 0x73}, {&(0x7f0000001480)="72e0d883cc29d14f56d7158f207aaa1dd7ba7f02dee4b3dd12cd6773a599f716d359d5a50e0ec7b3986640fc889de101e15a87b110af871d0703a22caa41cbb750ac4db423bd21abcfe47924dd5b4c091bf07b65b0ffd3c48d852a7780b8fb39d6032756cf942b2fd3669d50ae4339feeea2d1d45122ebf4b8b6f4c454b3a6e0169b4ff7c8e27c0f10d5e598685c727350d08eac6439a176a2f9abda353fa865812b69cb351750dd5844bc760c121b899f638a0e497f64b8089797d53dd2c0b413f1163bbfbd29fa97731f0c6cbac9deb2c3ef4d58d10fc969762dff2830e5a3bc0763872fdb8e1e98b47cce47e3f63fde0b99f0", 0xf4}], 0x3, &(0x7f00000016c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x68}}, {{&(0x7f0000001740)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000003b00)=[{&(0x7f0000001780)="51f6324bdf798a0c072f0f0b640fa3e28cc1ad068fd358", 0x17}, {&(0x7f00000017c0)="1a6b2057ebbd35cab26a55354dc3a6cc14bb386537f2dcadfb857bf131d96160f51107bd150d0fe0", 0x28}, {&(0x7f0000001800)="1d9a74703fd3f6c03d9d4e4c0c33c72be09b09b62939cd2456d1e60c7b0fbb3c7dcbbc2ab6ccbcb77ee9e9e2697838d3bc94d137e3baec001f6c007f4fe328eda36bb51c445dcc5d11dbbbdaf7bb10b43b0f95856194c620b2e06c73bdf581809ef46162354f4ea4f1650815d6ac1e6832fe6963252f9bc22c65e766c63e5ba55c46ff7293e887ca8178a47b75e6beb4c3fb716c0c9308ab37378497eedd3dc79b16f186caf51021a069fe01fc62ed522ddc459aa00dce6be658d4a70debb3fe23d3707f898b1136b07a3cd4595aba7bbb08a8a4bbacdd534706e2c0985a9d092474e4e659537fad6256dee0b594fcfd5565d5fbc07806f16f048ec76cfac7a6bb21a3ef03ebe79cdf2e3ef6c9b4f8af84057e7a501ff2565d0dd86bcbc9f2062f453200bb71b8168bdb6dd2187657f2984a53c72db11710b5e8b60ce41940985dc71db0b8c9fd57f0579240eabe1d0f8301dd219e5e0071958b8e19fc148ee30a58d18e56fd4db604dd01f47de9c3c51fc1a68bf2428c6cd78323339986ab908d9afdab2b48f3bbb98fc34f2903e2f395ea0632c77041674c856c38355a8ca21a75f767e37e02af19bc52a7441d59463346954c0f1a33d04a9fa55a289cb36fad802d8e9ef9ddc1defc4e84564e0d5887f36dac2b1ecde276aac5b8c8d705650ecfd080375ad1fa4f3f9035ef16764f42a1a842213d2128f750612a924804af475992c3bcbfa595e7654d8a2d124c8b4cd1340102126c7c34f77f35281593713a900cae8a5c8302f940999a19d259c65f590e5a1a26920f024911388583cc8c3f5bf01fdbe9e97d48a7c56308699531c936297ea6cad1ba6dfe677300570c3baaf8711df5941f3d0fe4d89a4dc3406e7f130ffac82421a387ebea7d0438264191dcec5c58aff90b55c0658cabd25967245ed2e06618481328b90f123352f1865f4b064a8f93ce5342076064f4450fc7b1b0fb59fcaa9eb49085300f9cc59ef73a94a8cb9c5ebf243653b47b064705e56d16e452be39bb0926c56215c2b2f46a9f86660195b3e94e5b1a253a9f868bc961803cdd143f050832d3d67e132ddd116533277338325ec192f5525e8d7f9b318c8cf333d08b2b8cedbb0c5b75e010705ebc50bd8c14491cf770ccd88fe3904f79e335c85a68b0cb08dc0031f5b7db7d3a433f67ad99d4f466e02ac6cd828021f21456b198e2db5981d76f325ed00f51536c262d6a8d66b0e9acf43127f80790412873c23ce8ea7c4be750a3633fc96fb3b113ca6b803bad7ef5be03f45b2abf8be5a3190e6fc0aff40bcd4aa6ec6ab62f420f8baa636f386bbbfaf9d1506175873c6ca4a9900563ded0215c7882291920833f52564960a392917aaef95f8bbdb9e1209b0d29ca96a859874e02b1d792806ac2109ab2f57499ea148c19a4a68a54a5b82d72d71a35d4c7535b952b29a53f59e8205b16ef1fc5847a1b9c6c731157fb80378e6b02a96037507bfb40ee49b2b91b912cad4d09883c3f63aa83389764cc697cdc5af6bfc6bc2994af95499f1f4a636c222b62ff0a9812f0486b061d1fe38560a4cfc2cc45c80abc0fd132c77a85d713703d77c2becf619c44aa5b5c22886d283fd6099ba868e11c47bb6a41214ed6fd1fbfeae4bce5816975bd0529c8c10c2ef1fe903df78f2e4386c0e76a1a7c057f03f7ed0957b96fd6b33c1d34ed58c1b5557b1edd36d32efa51dd8b0c6df95a6239c8cd1547b66a6e1fb9f0a82c2f7d077677ece88e7c0f7ee71fa01d99a53e784b07341f570ee632205c19fcf1534b2828e3c61d2ea8fc48de0a2b05d55bef48c1402a5d3d342b47a0a4f3da553ab2e4caf9cb80a5f69317e13a64aea600c61c954e9039fc15b257c200265b5f960cdacbe8b673cfeb5201159eedd71ecacdfe2fc6a851daecf7c81a3a5eab205b2777ac283494d2e117251e267d6c514656bd93039054c19727983bab03be546eb8a89f9cc9647ecb2bd67c551bba197346fa3c89f3000b74417000d70ae42456163166cf8bf2c0bd177720513a406c0828bac8c6f2f71d2156fbc606e2da7f712d9d61de516fe0c6ebcda6c38d71a113852b43bc2c07892a0456f3586ecd35e1bb964a244419fc975aceaee928a45a40fae988b2246ade4c8003da12de2c023dbf4ce80bb6282b25588d1e8b13483f01def58b971c31d828a2ce984080b242420098d8c7a4092d5f90a4c9cabe145d948c092e2a9c5e121fa48d776df71d8fc79cd44560e438928363b5099a93a7c622a7a78cc05d4f5ee4786ba6bb28427dd7f840d64afc7d192d478cf443e09d04087b838e9c47fa194dfdb3919238d567d17ee52995acf18c121222d92af4b6786f00e555eca552a1bd2ed559b5ed7f8782ef22543248babd3508f1054a772a2e87c2385dc9cf958ad2ad5fe2276f5a24f269cd898b9238bf28dd66ccf8ce5c5f57859edbd9a1103e41633078021fb0f90f3bc5024d57d4706a474b115e998f1b0cdedb56340901fe7e01d08cb412f166666fece718ef1cfa0c9006c3c27cf9a807bcc244d6140de29afb0cc93cc000a100b73471a97553050723f3ab244cedab9ca43960a6dcebc098ceb05dba72eb43db9c03801a132bdb219e8bad188a91c2cd3fe7dc7a7f3c4679b68411229784fa114acf8a52de8bf85b2c5676d1c0fd9d6d1fba8000a739b14575e831e81e35d8b7ed457c591cecf0ad65deeef540ded62eed1433b9cfa9063e69d523ff85544d8449cccd0b60753ef3bf4473478d0b4955811ee8fd8423a6b4fd222c64f5978555ff6f60915da277a2f8cb856094c0a07bb0fcd01ae054cfe6c01911d0b722cb18ff253aa53d1fdc6918e08593bd39233f09784ef64e6248b1db48231c42bee6313d44abe127cabf15f52222c6f57ff98f2037b2da0f0c3d5007560ca59cfc6bd5a51ea19545f4d4ce68a1cf57ad6114272cfaf09eb0fe7d0a5d164c1af182ce6732ef5ea5c0d9831b677c99865fcd2b3ec424b5a585f1785b24789e8c448ccf811928f392a3ab619f06d510246bd686d807d567a684b7b49a29c597f683023f9e05f881240ad49942ea3fb2effc7cca64c01b7019b82e0c953adc4be612cfa67203337418f1612c69f4726fb6a64c76f42bd68d2b5bbe59b65f65ff9b890ae241955768e47a9d51ee40f2660c02f99f01d88d0ba88c77f07456895dbe35fc911f60d9927d0b6c66e208994306862f91ccfd5412e0f8dfdc0a3f7295731344bb12625eab97b00b9851a2e1929b467046a96a9a0d7a77b29d6c74d84991201971625caac34512cf351bb6d44fdb02fc53f17380f742a6843638fee1a4ef08a77050ec2e4847722069c5566f74e5aa0d8ead42892467a7be5884ebf331ab77c5339b2aac3da4c280fe0861e83a1a86ec948c445efe07a085455cabcf12d0250cd63d0c787fdcf989bed78ed4eae3e42f9fe4d7669f5e10ca6d67f247fa25da3f586667413684459350aa21e7f4d577d59de65adfaef45438dae3ed0595063ba15ec0c3b6296bb6531a860cd536bf99277702fb16580f1e2be2c6d772da8542dab08d4755e728957c245553447e9e9d0b2a7f339392612611abd0b72b99c95bd3b4db98ca60725536d29b4eb2b9237e5c9a3d314a5b2fba57bf9574ce458832ccc64518cb2c6b1cef549538fa38de51c194215e2dc4a399e2b5f535c8a406fdce145216ae26356182ee4e18847561282be67ac83a2496aabbd2450e798cb7a3903eccf2ed6b4b3166d34ea70dba262a715554d3dd864db1ffd0055f6e8dd716f1c239aae5f444fc7553aefe7b27c03239330238fc162fda77941ceedaefdc65b396d1d4360c5f3894e5d4e48bce59f2067e1c8b1ce7bb76bdee7423bf7438624657b70e4d72519fb5d8e1b8fe2a00ddc17965962a5dad236bee434ba4ccbac2d9c57dfa7d3b62e4b76ecc068962d6010c3f70a8b86f9f56a1125f329e2a916e437e2eb3a7ab84c2537b9f4327e23f16d2c7dfb125f5bc31afec31014e4e432e619e2f959a2fd6cd0b450088dadb4881d2ce9fd32473b8e30c63aa1e96b86edae3e1f4fbf0aacf0f00c4be8f78cf2a358f9a11a7288e1e153e8d2dc0aef788a6e43e48d873d2d5a2420d7526a115d327e93aa8660068e2fdced34826f19fda3f9cd3b1fe9622991ce61b87daae4990d36ae336baa2289ac832ad528fa36b2f67a38a203180448950443dea8b62c099e9f461d95bf89eb41d9019d1c71537461f26a1a9c9c9c1a93b74c64f5d5ed9fa25f6d29b150d5412d6e51283b0cbce500db3ff86de15065737e1427d183587b1ea61bd9de49adc4c2d511f601400af3c165973a7b2de3cb432a74c33472674a2660b29d80d619bffbd9d3769a5d82e1de074938a96da91ac104b35f907380ee76ba5639a45eeaa4e01afd21c7362601d23325f16f5bb4c08350862b6ee9d345579056214888e52d1e1bad07cea28422afde96a32dc089be354e7dadbdf7ad176e44022709334a38c2c62d881446c2947a0ee2f5273936c84d251630c435fcff09cd4bd32dfc239bb7bd2dc504f7eb5465ee7bcfae4e0d88a1cb681c6d70405945b4d1e525b5517ef4523894c641819642927c054c7c643cf1bf1dec0df813b62b7747a74864f1673a80c7a25bdeb35f0ebe8307d81095151872a9311ffd88b008a41b53883f445e1ceccfe30570711ed64813391d4f1f914e0122503ebe35aa2439476fec4999ab272201c70f2bb5fd7e9bdc338257fb23bb5957eef67d0d90bdf5ada29b4f388b417fe8f819dd3f2d0c031235e1781518e06707cd8a6d538612a62a307cf645aa3aa47689455192ea299f73315bc341315255d5913a4cd6858fcc5c91c58d2c4cd924019db2a2dbd00d78370b70bc30a70987262605b1fb4aa196e8d0276e74b509136fc82a2fccea9d37ec9b8238a9248bc40916bc91ea8ebd5f9f9642373feedc8a9e34174cf8cab799a95f6c62d2aba315298b0ed79eb414e63d027552fa9419eef3a05b17e5c7bfe8b26790ba8e83359c39354d4067b085bcf1eea20a9a41984357c23b46b07f2a41461e7b9c77e96260cb68a9318a0fbe2c65a8e8a72a517a4fae4ed1823297ac8e53d3fc78542d527387079ceccb585cebb59d8457a928920c8192fbb3620e6bfdfe0b83fbb4ac0965a7ca7b72585dc327ece08f8f4cd7ee025d091d956124fbb9d0955e60b198d4af77aafbbcabb94aec2d041775834d0b25cc6ffecd3ea49cd8f4f5ff6e97fd419c83a2014381529a53b1db6a6b5110c206a8fd5c3bc3dd8dd798582bdc3f08058f3edeb1fd75248af36925246755b73038cbd7b930b49a6d4402bd66cbe5653d5a385c3bb464571ec9b0b292b6ab9571c0ad3dc1c16c18b2f7db644bac1b47b9302fb7e65806ff950bcbe053b446464063513e3d28a4ddaf017c903cbf833c1d005fb5328baff633fc267bc3cd0b6c3b9af591ba2ad7cca22a21a2155ce42c10883bac36e5485e1ee4359c38fdef8ebe2a15e2d6403bda16dfe39dae297cb19b3b4da18074637aa28751763ad859d198c948ad3aec913ea5d6510a3f9f208ae910628bc7433f855e4329ccdee80be8cae66676c6b1ba1a45271faf5c02993e966314c2ecfc6decaa3a7b904537f9e96d3a84ad7f40608d65ac9993537f743187c9c4236abfc1d673a808154e718669ac8c08842044d7aeb40e24c4f86598b81d05ca06148fb64466b9e5c84a8318ce994ee7eaff179461df45c5316ec35da51c97e6b2ffcd1c1dbfabd802d2c061145b18f849e7a332a43771975e290ce8d20a497a1dd027b7522d3e9", 0x1000}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="d23ea56e2e57070d1b551745e8708e88c6b58346d2ca9fb444cb34907ac940370e1cff4ec380ec12de8b78d29ca85b0fc4a581af6b01dc2c8385a051539e47d2561603e00b34717c04e03e41debc9665fb8384e14ba15e54258c143a8d8538225e516ebb5a6ec38f3de8c7d6dea3aa4ca74535ee307263bdfecfce80cdb207f90ad713bbaf4d6ccc5844ff7de6da5357c7d8b27f1ace8370b56e1c5c06e49027feed60699c9f42", 0xa7}, {&(0x7f00000038c0)="a4b8cc020d6b7547f2ba4c001944b4af854771bb2742caf40e8bb19ab5b84ed8d9a548ad87e7cd6073b93d9674ca98ee11268dec501f3e5fa5c2026e0cdb0c8bb4cdf21b6e7196bb2d8406097374d86acf020db404e71abad34e071455cdb6879aae2c82ff8251fc3eea20d65ac59a9eb38dc0c3baeafe28c56e30ea166a7a22532865aab9186a96871da3a2386a2280baa7ce70e61003a15c5b028b31e0a5fddc56b8d909472392d9ce24c456648c9fd699d4de00b20f23ba1af76ef50f50a17c499aa625be239b15f967ec", 0xcc}, {&(0x7f00000039c0)="d7c3f2b8070aa7a0a457239cde546d2b8b75c5449940a7fc6ce3ae5b4e1fca5627cc73f23293fe01a3bb54a22c7000", 0x2f}, {&(0x7f0000003a00)="044c297c42cc36b40e4b6bbef02db7bda2d24b305fc49131fa50c32022f907a92f1e05674760a0446c87a7ec563874b8169991f4f1dbc40b5f5afc1662ab8fd332d5a0ee2d8234417141df08eebeaf682e2e4251d979c5ef5e4732c62331af14eac425860d3e4a44ef5629cc04395a28bc0a5e1c5a43054e13d208117de68a8cca052620425c53d1", 0x88}, {&(0x7f0000003ac0)="f393d1615474568ab93cb5ad4c1f19ce6f705ef75fa158c2", 0x18}], 0x9, &(0x7f0000003bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x89, 0x0, 0xc, [0x2, 0x0, 0x1800, 0xfffffff7, 0x1298, 0xb505, 0x974d, 0xc, 0x3, 0xc]}, @timestamp_prespec={0x44, 0x3c, 0xa2, 0x3, 0x0, [{@broadcast}, {@private=0xa010102, 0x86e}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x46da}, {@empty, 0x6}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x4}, {@local, 0x2}]}]}}}], 0x90}}], 0x2, 0x20008010) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000003d00)) sendto$packet(r3, &(0x7f0000003d40)="7bd3b7f786a6ec6851014dd5f5890be21add130070699145e9bab6be8ba946d2a96cf8b01ab656455ea10116d3eb53f4001e852f4790c4fb50f8e23253298d4347db2efa6d555da9b38157a979c471e8b9c6912b9a3da517d2d8c3b422dd80f16b106d30a482c44e65ef2d019b77fb009d5b2fad97a1cc", 0x77, 0x80, &(0x7f0000003dc0)={0x11, 0xf7, r2, 0x1, 0x4, 0x6, @random="b0d4cf2295a2"}, 0x14) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000003e00), 0x4000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000004000)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f00)={0xa0, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5000}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "78063a80629b72585265d0ff7f837082"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x44}, @NL80211_ATTR_PMK={0x14, 0xfe, "025e8321aec6161988bfa87d39402a86"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x42}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7fff}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x96b}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "cba207aab9c0a947b46b8fd1ffb0a403"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) r7 = getpid() r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004040), 0x1e000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) fchdir(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000004140)={&(0x7f0000004080), 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x20, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r9 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r9, 0x0) r10 = semget(0x3, 0x0, 0x148) semctl$IPC_RMID(r10, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000004180)={0x4, 0x0, 0x2, "43ba1196b380ccfc986ad0a6b6ef8b1101a8accf94959ba86bad572ef735c81d", 0x59455247}) prlimit64(r7, 0xc, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f00000041c0)=0x4, 0x4) syz_io_uring_setup(0x2a67, &(0x7f0000004200)={0x0, 0x24c8, 0x40, 0x0, 0x256}, &(0x7f0000004280), &(0x7f00000042c0)) semctl$SEM_INFO(r10, 0x1, 0x13, &(0x7f0000004300)=""/95) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000007d40)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007d00)={&(0x7f00000043c0)={0x393c, r5, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8000, 0x4d}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x3914, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x3904, 0x4, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x2c, 0x2, "af3c407579d1aafb2d71940fd9958b1f274788dc5c1b340b8b81176692c1e9cca3f29b981329ee64"}, @NL80211_PKTPAT_PATTERN={0x1d, 0x2, "904520ffae827c20492d8dd5236e9ccc4bf293776b7267e657"}, @NL80211_PKTPAT_PATTERN={0x9e, 0x2, "0ea679826dac10e53530c00624fe9dced7c7012d48e78189340a7dcc32334c264c7475719a602f3d26af6e6346f5aa83680dc1be3928e8a25f662ac9b38a024a49e37597729be7e3fad779ae94c5eb1e514367b11bd5f12b431be18c4e74be4fac8afdcf8a3c2bb8a5cf0db62e84a294848845618b8b49783cfc74d8d26cb1de475e616bc0111a42ebe543681c6b42d1e7c94f0915501c990127"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1d, 0x1, "e9a3bed3a5f8f5d9418f4b32fd6fec63806a016bf0bb1c7933"}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0xe7, 0x2, "d87233f0f125b8c12673570d6c7df0061c3f1865247d9d74dd04ec4c152c835ad6b135a8e454136629ae63ff72607403dc378d0e81ec2967ae46de3b0e1e1618be3d6328f5cf41aa9e590033ac15e8197fd5471ae8d3174f17266cd0937df46c8a1e7e8b36d188eacd9e765b3d32c818a3fc8ab2ecc8a3dfe91a849cb61886d167fffdd91c43baa79a9e2430641187f158946712ac90cd4a506b84b30b6a7835979b3fecdf15599285b64e24ea9f42f10962cc0f0fe47a7c778959be632eb7b587b9d147706f1c2a27b6eb372bd84ac0ba800c1b4107e8a63bb3a2d0b7ac8ed007af6a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_PATTERN={0x2d, 0x2, "ceed202017a424aa6ca2bdab527ceca6c3d055e011ae0bdc1e20e358f551d85d4d8f862c3a5a62c437"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0x63, 0x1, "9490f41ca55b9b2295bf10e209f99f7258aad6123bb2d6eed48732ba7f16fc03fc3a65068297fa7233f349efaa0d35d46b8826a32547aefc426d3a19bd2f45e669a76b8dd042ff708dd34c0b615a4025b619900ad2a8a430fefb8eebca52cd"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa, 0x2, "98bf04fd1be1"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffff54}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd9, 0x1, "c0dcfb92770c5d1288e4506f8c95c299e7c4c65bfef030fe169bb05f327fdc355a3b7c6a1e9d5201c97503d562996ab5c63753c5b0725af3d74676d6bd20fd7f65de9c30cdbc01f6f908822643c6f28cc8826c08ce0d7dbc6cbed78b0739714c547ff2a66e2af9a812eada85d7f89181bdcf799ffcd3a8d44aae04ec122b5ff83c8f5d037c579d105d061350db8916572938813d1843b96d7ec6adcb4b6fd3733dab87c38608087c7bd3e466e33b1462ce5b47c3959321154dcb3b5bd35e975aa422ea55f481ba549dd522c27c306074c169d41918"}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "8b090fd7f4b97c83cccba226207be8a969c1b5d33fc680e37f954b68616513e76e7dfa075c2ef41a0495737242d824d5dad24074bcbf8d7b71eeb53f262a2be1db22785d6578d0de4bf8b509b7cf7e9bae384fc397ddf5d9a09b83aedaf221096ae70e29370016a2"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x14}]}, {0x1248, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x5f, 0x1, "43e8026a4e3552ab6d09400cc5c6313c3572f477a9d378a88e777b35dddd99024368cc6be6a019007928f9831c6fb37f36a5515e6eba0eeea910e517b779e7082d5687d40171fba0ba7cd4a423fac396355a258a7e202c81817e19"}, @NL80211_PKTPAT_MASK={0x5d, 0x1, "55d82173ed10756ec492930182c61ffd7441e88d793b4ff5ba38b3de729add5576329532a5862affe61914aa2c53b6413580089b458926d3f7b5b6e9d24d392092afdbf3586bc2091331080923bb92175ea88021883a294c42"}, @NL80211_PKTPAT_MASK={0xba, 0x1, "72b265f821e5339ab4e176a70c7bc15ee35729266fc6edca2ba26560725202193324d6165ab2356aa4205c5779f315cf41eb19841b9e2ced072b98db83ccc728768985b6ec58f572f6330e7d0df7b3c9e3283972f6e4f7eb9231cf9c0bb6f73052d12253a928afad03c9f3e6547a309acbb86ca2ce800acfc7b17bbf338ecaa7577d1b281c8fb88d5488ad16e4747bde0135d8ad18c86388693de8dc7331788002f332b092b79278d50171bf38d2a0870f44305df86c"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ff}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_MASK={0xb7, 0x1, "bd9c5532ef096fa661fbfa9284a233655a8d43ee5ee84c780506051e1dfd0a417573d4adf35473bb0ba916ab5fafb6d54544dc5b6b8d791d02b7e5108558e589a97f8cbf84ca296f6d473dc8f082973957e85e41c71610222d636e60d8bc2eb9f3d018eb1c9eff2eca38bd709e269f189df83998812233969c2caa5ee46527a182b7d13b9e71863abd056e9905fb52c1d57c32d92a2d39411aee5cb422945824a3c217a51f2edcc44da4d3c47eb81226ccb793"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x200}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x80, 0x2, "d08dedebb8179067b794e29545ee2a3788c8f0587d57d4dae6efeb3cd0a3690a65a46ffeeb61a5184203c98aabeff70839475252536092da2320bd8264015aecd0b8136950c4ba7f04e1043f3bb09995b79e5a993ba1d00fcd13b567dbcacf0badb59d5555b80e42e8419b321f6a187f3c9469657a76b53ed1a4d138"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x123d}, @NL80211_PKTPAT_MASK={0x35, 0x1, "ef4cc7833b195fbb9c5523f2ec72f6dc7c60bcb24d645f878f3f3350c07d16cd1b53e38c32cac1b44e4c927c092519244c"}]}, {0x1a0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa6, 0x2, "b04abbc02c8d55e37321c1522aca073895f655407905a29fee9aa8fe013da4a1ae5a0854151b1702489c4e554715fcc52a29f55fcc5ef40a8017dd19647429415b61047aaaa87779a797f71b5eeb8439889c6400f6520851160c46ad8373534cffbdde234c8bd8e74a4d628c164f5b49c40c619ee3539db0ccb786dd1b3541c7a43c50eaaa57e9d583373ff493d33d2058ce0c87243301fdd96b47073651ee3badb9"}, @NL80211_PKTPAT_MASK={0xf4, 0x1, "3119aadd5c2bb53414c3f890d228b4d46e8473d421d8b0386429736c0bf21c114d9305bbe728a27d16dd1443f8a663217577908c1bc6456ccf529b28cb21c03c171edbde7c89472444d51862a0779adfa311fcf3302296895a6d8cbd527b3515330aa1d34f273e0f028807ea7a205d6ece90bfc181f502c4a9331df55817fedb3870bddc949d694e0093c030f598d2e93ee70ed490051a6b5e30254720a1da27e4aa45165a7e6286f67ef65d9e4e6b8e1fc6c5d4e0ab9057fe06557626c20a9b01dd3302fbe8fd007c082804786544818424911eaa5099334ee1e7a52bbb9bc6ce4cb3d717ea72ada53de11e16262876"}]}, {0x200c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1004, 0x2, "13fab15bbccaed32e99edc1137dd27ea89080f23c2995f30040c83746eb9fe9f6ee787db62fc27c1d7d366fbfcd0f5e68d74c6f8c3d424b7e4ca76662c84825619c5dd8d5d017b0eb2315d2a945921372d65f8d7cf75da6d7493edbf7289c077f4837b1fb32f49088c73a86ff43a5a9313254c21db6a32a178c36fc71eff263c3f38dac7e8e1a9e7f07a5dd719f5b01b29f972b8d3b1299dcf446cd3d1ba0f7eaa8d4b497c5f1b08a8c323dc979774844a4994d7931db2a6d83ff2fc2113d1b23e22eaf431dfafe019f09ee7e4254e5446cf7cc862f936aadb343f9f8aac5b855c3e1f90688d1ed279d934a715c45c4440b30320c61cddab65174b412ccd0faab88bc68ea0cf0eba8a4e420835126f67ee094dbaadd3d634e06c122f5e379b050dd693e80b0ce7c2bc1b5bdfbe32c65f3d523a248c2fb3ad9ef308a8c3a00c46d137ccafcd470c63ab779db48785538edd3df8df8a376dc316e9834b66421286dc46c2edc7008f854ad1bea2f4874cb807c7ac30f422b3bdddad4c59a75864cdff1f18683229fd375d60eb124535dc3b8038de3de85e5839740b41a343e9484c44f51b32f5ebcf047b4cceb3f8159027e14a05e6291f7018fcd9e5b966f20501429dc5c9ecc62754792866300c249cd89db9434863ff6f6fa19ae6a1ab8d586c499ee67ba49a6af38770d2a9ee8b3f1bb552d6f27aa6742ca70ade4f1274f5818b6055de47aac722c2c096aec7234b050757d9321cbf96d48e6af9d2603318c5de14cc5755aeb00936db551030da3fc40a853cd8698f3079e1676cf5120d13ad05690dd6eb5a7b6685b6dd7b5668deee65e75ef52690b6fbba307227868a7266898f98b4a9786a5662f3fbbb298e2c9c8eeb6a848727319491ce452c5cf227bba08ea20e2c1be38a9144a848299d3ff242c617db3d57e0e102d3c61896c78bf5005ec53c3f646c0b6bd136d5fc652075b13ccceaa8d0584498690b413cb98c85ab5c6ab8157328fc8ca448d9f4c08519278ebea0341e68a018e8f085303361db1077812c2a0ce75fe9ff7100965ca88265bb57b92ccd383a38f344a363fd09e9a9009b535195ae1cefcae775e787f93fcb1f37e8fcfa519f61b4bdb8c198d68a28f24c0b11cca0afc52d52ddf8af875f945bdd2f518b598c3e767be0bc8b609c022916a4658761aa52150f82ba6f5154610989d3f3c806e17ed1f70a496512967a2c75ffc5354b4149fd39a73af5f26170d649458780ac4ac3742359f2c593397222d375906fe9eeafecad045f2252650ddbb32e3ddfc9817e9aec6be936e4102a0f75e52249bb8c599f884d9dea556933f93d5074ac2783f5ef1d9c180eecfdbc742993eb3755a215560c00c88872934c588d5fdac83005a9d8fef032588e85383ff7f1c93256c60104fb35ba0c6ee213eeb5698a83465c6b2ba2b5eadea8ec7781ee4ca4fcd2b38606a73db8f425eb34aee6c472c2aeabf5d5844d67ec893bdc90e924af244fcac8c7e5c9dc5d7173446b3baf0b803b414aaccefd6a511bd1fd7bd682cabb7fe0fd101f696bfca615eed91c904bd9b409b4306522f6aff1ddb5b7e7d17ebaeac8a2147fbf2e956a1aed545e92be5b0adaab43cf9adb53bad1753d2e9ff4388ae3261884533432899dbfaefa3d05c0e8ca551be1c01273d057ce1bb29e89b9464f375b1542d4c72449f889049c76d84575bdccc70ed81050dff9cbaee7c9de038977f0aa462a44aa7be927f8b1bb1ccbe6715b8368f2f0441222ee66b97bbd53c1495220278e724bd14b501a3448aa14589ac71c92fc46026f40d92bf4cef78fb22da1019e1b0b545a29446b961dfd406a1c9247e3f64579d1489e67fc389abe3a4f3eaf780eed05b0ca9b311e4317c567b3b84c15fc3d3981eac59765bbf2e02541bcad655a13d3818d5434035002f5b7d441b4836675e650168a2c6e26f9f5a3d39ba54daaf0efbcfded9fe4cbcf5a4c7d5fcc4158041f920c395f6f5f5e0bcf07fe21c84962b24f2c536c7f2b4dc4c859a1f841de94ce8bc7d55360c4676b3ae0659e9c2f64c7326057efa5678f9bc4202f665ea7e65d9f756e88c9d1c1198f72f7740104ca71c0b6421035677629c6fe9a499d0bbe7e1d9dbd9d8920a50a7bd31e60e38b455551edd61da498443fd15b36bd0a5d738275e0c1363d7e04376df82215b97c52af35687e299fa1f57a84a14b3e19ac070911cf53d857ce729f55c12992106c68d8c529d5fe41c568a068124d2ee2d19d733eefc18cfa509adec66baeed07226b1f4d70a02f22e9024f4b51e372974303004b027ba1d9ff22b57cbe7b7e6d778c601afefd4f9e30d4a4eb7957e90d39332bcc4de6114f081a9a22146229a99ec97864fe48e86af09ba0557cd6fb8c1a6533b0ca03d5363baa2ec1d9790b633d85aabd64e4659e3978701f6a4687954b21417ce948286d6052583dd9a0ee94f312014af3d4004625db9bc5d242914f54bf9ce7fee4e2056ef1594fde83ed7dd0955c3dcc98faa24a086f6097b5de72565c9c236c9f74a65ddf94762d707891d182bd7bfee55eac16c37af439bf30edcacc31a8011665f37da47ff2744c92695d5783f238c8049374995911b145918501b07afab48f8e79ff192aeaba3375bd541c6ebf8f0af6d5a564f3788e8740e94d24da60269b94fd1978b47ced52828da3985e298f6e12bed6408cd20e065f74b2f15da8b966f98739ef0ff42928d0f7fa3fe4f6677e055566cd824dda617726e7d84a622996aea45dd0c0e112293b569fede7c005ff072538306202038dfd71d824d6c04790528b982f1c43bb109331853bdd3e69892cf33dba9ed59da6e2469913a50e84524360a430aba3c3f40bdbb2070ec83a6a640d5233b9b2f1d7c4cc129f2024121ff8be09b54350c535510ed61e8efd7a5b45dc35f8a4b5a594cf20782f2133e986ae306e3053edebadc135b83c8de7eb124ccc69a76a7e8cbdea9e27db7520afd55124387f142c2f11281cca560268d0d13327be3eeb8620783dd330d7914f81c54874d9dcd2eb9aa341bc3bfd5a43de503a36f394fc56c82c6b2f95aca92d7c67c6e03176954efba117ccdd8ab6867db7a7beefd9582242580aa1946e7ed4b8f37955ef4493edfcc76899910725ba0359b897a6ac1c11c584c17f59a039e93ca6d90648eeac207e81fa75fe393ed4bd972f83603d1b959ba41dcd65b1072b257bd8340ed7ddb237c650810f1177a4566cbd33fb44862779bf802540e5b7d9cc10a19fb881f4932cfc3b0251bc5c850877be323779d5ad964dca9d2f189b7846a2c9a52e8d367e559329c233797a1407eacdd40b0af6262f7dfd16f454238bcccd17babec2f64901793bbb33841841b9a9779b2da8e0ace10e837f7967796f084577910652b518f7990a0f55ed529034df715f3853d10babca910c896da65b594443b8da738670a25a95c987189fe2f581fa3a7a8a8746938d26187d58856b150c31a7d71ac41255b8155ebe032d0ddfaec81ebae3bd22753db1b6be6c674c559756d2105a290a6348116418b7c9c8584e65b046d5c1bb26ddf6ad665be1f83bb71e68726f3245be6c9c180c4aa76fa92ad03f029025b813afed37595a74a13b04111a04bc269850b516201327a6bcd8d436dad01a83f821296e1426277da4155b03566254bd90bd297f4fd80d57050272960660cc63d32438dac2d5d888fe674a4b7104b7adba1a3b58af1d031d5ef631db6aed7875e721c5464e5a53a82b61b268815170f8a5e1331c5a9e0765f3ca4d21ad8aab075aadc6ba833e77203c17e20fe08f8b40bdb96dff4a481754916ea610ad5f45f1122e8df8bda4fc394fb847a633ba8fb7b757bcaaf16e7fc0563c4933efe5c2a0e48b938b45364f52aed22723a2fb8cce57c5b7f9edb318af469d90cd4a660cb0f136cf77a711c2e546301e2f9726dc23bd5c3eaad4371de15fafe2750e42ca91759dc80d31868b1e5f622380c084967e217f7c487e3e7f1577faf39cb7c621cdec1c12356fc04c11e263b2da7ec97d3b017a1c9e6c4d65fc3b3b45de63947de95935dbf6e400e0387c81dba7a5de3d7f9a9a75b9ead34d7dde6b247e46b68bde277a9a609995d4ddea6f98d193ebe20ba1e35cc8970bb7d8b1a31fe4a0fa261e8ff3acd04c723980ab9694f24f3ac0295deed688edfdb88c2727e4b61bea85b2703ab783f49e6ca3215f8561cf6f568ff28c6a482b41bd3df2f930e2d3dc9a3b98c5db3c2358e7eec99bb3da3a419bdb977d95a2e13288e0868e44865cf5cc987a2157c3835a5974098ae148a8bdec7d534bcc98febfb1a4dac72b59a921ae23b74b8356272cbd88f76be08a4d2806dde72db327cb34b399fd0e2b423ba341b8f35e313207eba6cb6b0f51c6ac11f02b31342e774d2789156a31c86221538b3962df71c905c72f5d37f25aad51d3c6c3a8c5d2f3032fa84fe2a7511aaa3603f5934a87ac124548eeb8e37c3f8302dd232fdc90bb74c13b90b5bea572a1ae6fda2ccb5171efbf885cee0ca67647f5b8b7dcb972fba859c93f821e2d9b531c9e944e95c9985ec685b6f3727256bbd2973fccab9366a0f7bcca99523af04f47e53db1b8d2b9a37feae99ea561b13344d43f1dcbe235da2bbddbb916bd6164e549f5895d3719e05853c5f7699d2516e7358a51e721a10c9aafebe2af9b8ea8edaefface044893dfaf9005c216d5e1338d8667b73f574c4a7ed13c4419ed07010c9eb697bb8f95d1b87626c2531cd3dc772987eab581ee5209aed68fbdd9c2cb9c2e16201abd6880f0ccf4589605f89fe774995a089450022a98e0d1a6868f01b643b6071d304798e4d07b20528129f40b42575109306eb915abfe9ac803306a4d0c9404111007bc0d21ef36899243c1fe97154486abdbe55bcc39833ea0a0ac5df11edb7af57fc899146c05ec5d379909c392fc34eb36cab43642118f0b80d46b1beba670c2cfb74d4a73a3223cedb315287210d806ac45a589b8cbe8a02ac5a636432c99c2ea714ab68724e090d9b250ea6e45fe6251698e47aecdc20b90f9b9aa6c4086b1640783dd04a68116afefe7da18b172970cbfb38ecf98c04413aad74712c56af19ccac96b6ae781cd9120bec6069fe1d9a2ce6fc0df0b0ac8dc30a5fedbad66edc783f95a478494485591936152d2e99aa963ab3e79770e20a8138222e9419f6b171bdaaa1f9eea5b691f7f94c6914999e392d274b15de4763b5e1f9a884a7429af1925dc5ce3b722d45f6d002fd6eb85f2705d63d50bccabb78c7584c51c5126f85edb2f4b6f2e13bddd18887d7bfabb386a4d874ed12786f097c863083b77061f8b499fc479e5774bbea6ae19b4a2280ed37058a65e0a4c57c4b0c7f52727f702a4db747a83235d1f764113f1da5c4448871542e86a0e95c2a3ab95d3cadf844eb9c4fd8ec5f33db8ba6db6652576f0b0dfd43d723855860b2e33c2e595dd0ccefb6e4d7915b3d38850fed913d0e8c8a448a884fcd6cd981be5b0075bea018fef27fabf4778ed6c275f994b1d5dc787b77272a775414d8ed730818e3f572b8d6a58f3a100904cff6425a9e9da28a8dbb585fd16fe298be15c65ae262c7220df6bac090937147ab852b287a7753ddc528ba8c80c6c1acd79fe607d83203a944416e34d51bc6b11c53b9ef10eeecda0b12922f7bc00f1e5bd257420ce9f8aac32542d4ac8a7a162418b0bea2fc4016bd5cf3537483a8c8d15e188bb4aa23ad4a9d41c056f9f3fe04e0e566bc61c7bc303dc5e6114f7a933d3f96d676fef7cdfcc1ce1ab7148c"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}]}]}]}, 0x393c}}, 0x2000c090) openat$nullb(0xffffffffffffff9c, &(0x7f0000007d80), 0xe0000, 0x0) 4.306242317s ago: executing program 0 (id=4015): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 4.212493352s ago: executing program 1 (id=4016): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="88", 0x1}], 0x1}}], 0x1, 0x30008870) shutdown(r0, 0x1) 4.202013812s ago: executing program 2 (id=4017): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x2f, 0x2032, 0xffffffffffffffff, @void, @void, @value}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000881}, 0x4001841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c0002800500010000000900240002"], 0xa8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.129324476s ago: executing program 3 (id=4018): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r7, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xdcb2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800000}}, 0x24) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r10, &(0x7f0000003400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000306050400000000000000000500000005000100074888693b00000005000100"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="1cabf169", @ANYRES16=0x0, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x105000) 3.633344666s ago: executing program 1 (id=4019): ioperm(0x284, 0x7f, 0xe3) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd53, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x4000) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7fffffff, &(0x7f0000000300)=""/125) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) shutdown(r6, 0x0) (async) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) (async, rerun: 64) sendto$inet6(r6, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) (rerun: 64) close(r6) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x0, 0x5, 'syz0\x00', 0x3}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x53ad, 0x1, 0x0, 0x8, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc5a, 0x2, 0x0, 0x0, 0x85, 0x4000000000000000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x2, 0x0, 0x0, 0x5e, 0x1, 0x100000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000001, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x0, 0x750, 0x5, 0x0, 0x66, 0x7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008001, 0x5, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xf32, 0x3, 0x2, 0x0, 0x0, 0x8, 0xa563, 0x0, 0x5, 0x4, 0x0, 0x6, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x0, 0x1553, 0x40, 0x0, 0x1, 0x0, 0x8000000f65]}) (async) io_uring_setup(0x4124, &(0x7f00000007c0)={0x0, 0xc18d, 0x40, 0x0, 0x114}) 3.625853034s ago: executing program 4 (id=4020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x88402) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) 3.624435446s ago: executing program 2 (id=4021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioprio_set$pid(0x3, 0x0, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000006200)=""/102400, 0x19000) r3 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x161) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080)=0x2, 0x7f03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x10, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r5, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 3.617186369s ago: executing program 0 (id=4022): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x180000000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x3, @null, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 3.027564469s ago: executing program 3 (id=4023): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x40}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x40, 0x700, 0xfff, 0x0, {{0xd, 0x4, 0x0, 0x5, 0x34, 0xc613, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop, @generic={0x88, 0xc, "7915a36d42e37e378bff"}, @timestamp={0x44, 0x10, 0xec, 0x0, 0x1, [0x0, 0x1, 0x4b8]}, @noop, @end]}}}}}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x6}}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.192852424s ago: executing program 0 (id=4024): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x1, 0xffffffff}, {0x6}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x1b, 0x88, 0x4010069}, 0x2c) write$ppp(r0, &(0x7f0000000480)='3I', 0x2) 2.192607438s ago: executing program 1 (id=4025): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000084) sendmsg$NFT_BATCH(r3, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="2b72646d6120accf1dbe7909239f8eb702133329b4239b6c52836d6a0434b2c9d7a6a3d2f93e0e737163ea1b0951b7c06ae8638e16c47f3fa9721aa2e0eeff16a1eb014e4c3cca9c4154fcb56b3b1362c9ff60b349b145c44957f6f75698"], 0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 2.182199194s ago: executing program 4 (id=4026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000098, 0x0, 0x1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}]}, 0x38}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) ioperm(0x0, 0x8, 0x8000000000004) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r5}, 0x10) chdir(&(0x7f0000000300)='./file0\x00') syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) 1.237866114s ago: executing program 2 (id=4027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000300)={0x79, 0x0, 0x5e}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 906.694215ms ago: executing program 3 (id=4028): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@remote, @local, 0x0, 0xffffff00, 0x0, 0x1, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8dd, 0x800, 0xfff, 0x400, 0xffff, 0xdd, 'syzkaller0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xffffff82, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, 0x0, 0x0, 0x2, 0xd, {@mac, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="39d9791192f8", {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0x94, 0x1, 0xfdd, 0x8, 0x5, 'bond_slave_1\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x43}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 906.034539ms ago: executing program 1 (id=4029): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="88", 0x1}], 0x1}}], 0x1, 0x30008870) shutdown(r0, 0x1) 406.728404ms ago: executing program 0 (id=4030): r0 = timerfd_create(0x0, 0x80800) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r1, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r2, &(0x7f0000004580)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x100000, @mcast2, 0x81, 0x4}, 0x80, &(0x7f0000003340)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000000c0)="a3ae28262f4360664aeb67e3ddc5945dc34250707638bedf5b7cd7db91af02c903e57d1246905571b263a85ac8b5d5378be53f30fe2572b5f19757950868fc35f25423b2b1f3d330145233889831fba9725dc6a8410eef", 0x57}, {&(0x7f0000000180)="d1c85cd271609f5f0d3ef3499685f5ba55c926108e70fa000edf3915818356cbaa6f398416691e168ae7b92117ae30ce5e55c7922380b3cae693baafe4a52dfc86fec0deec1e637a7f5c7c8b313022d4834cfdcbc0f6cfb646bc0699ce67c3b35e870645a8d9c296f32a84352fd14c46547039e695adfd5e21d3e8c7c2e60ab4a981d1b370de4ecc893caedbc5fc0878ad25a3322e7aadd6be2d63cc6e1d5e1a32ba87840a9bb7d180c66224aef9401c896198a83c41c203d693dd21d00d4862d2f1541c9429f3f381301492ade8ab490547b3cb5b3fb92c7fae836ede97ad4434", 0xe1}, {&(0x7f00000032c0)="6d732af470b885db1e13ceee20e77667d4e619c8e5d0f64a9a10b95e26ed0fb106b363dbbe7b24e5d03988a1d9ca8e0803b9ca127fea401af28472e90609d5516ecff0e41e0858e793e017c5a14809512b453ade135d5b8f0bd510c7926d3973d9e1b8999e64f5ab", 0x68}], 0x4, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x11f8}, 0x20000800) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) 406.231223ms ago: executing program 1 (id=4031): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000680)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x02\x00\x00\x00\xad[\xc9\x10\x04\x00\x00\x1dz\xd0\x11\xe3\x05\x01\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x03`\xf0\xc728\xfc\xfc\x00\x00?\x86\xb7\xd4\x00\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6v\x1d*1>\x00\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s\x18@\xe6\x80\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\xfck\xdc\xe0\x9d\xd3[i\x1b\x9b{4)\xb9\xd8\xb8\x8f\xa22)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\xb7\xe7(.9\x00\xf6\x8e\xed\x02}&\xde\xf1\xa2\\m05u6\xaf\xa6j-\x9aJ\x83\xdf1\xa3\xff\xf1\xfac}\xc8i\"2\x7f\x98\xd5SENEn\xaa\xf7\xcf<\xee\xd2\xaf\xcb\x8b\xa2\xc6(S\xb47\x9c)\x8cE\xdf\x13Kc|\x82\xc1\xaa\xdeT\x1f\xaf\xa0,\xb0ec\x03\xfd\xe4\xde&\xf8\xcd_\xaa\x9aO\x9cP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9d\x1e\xee\xc2\xdd2\xcf\x8b\x1e\\\b\xb3\xab\xed\x17\xc8\x84\xc7\xf2\x91\x04!\xdfV\xab]Z\xc8\xca\xe9G\x88\xf5q\x9cz7\xb3\xda\xcf\xee\x1d\xdd-3\x95\x160xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r7, &(0x7f0000019540)=""/102400, 0x19000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 403.922816ms ago: executing program 3 (id=4032): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x2f, 0x2032, 0xffffffffffffffff, @void, @void, @value}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000881}, 0x4001841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c0002800500010000000900240002"], 0xa8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 260.489194ms ago: executing program 0 (id=4033): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$tun(r0, &(0x7f0000000400)={@val={0x2000, 0x88a2}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote}, {0x600, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xbc, 0x100, @void}}}}}}}}, 0x32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xa0024}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xb621}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x5010) lsm_set_self_attr(0x65, &(0x7f0000000280)={0x6f, 0x1, 0xfb, 0xdb, "e6d2cb546174a5cf395f1b1ba69bfe1f6dfae8296e072167343522dcd504a3cd845db6a9d8d321600a7bce0e2ffe49c5045c353b415a52ee572f91e3ea2f063414f6564ae1b64f7ab217875a66d1469a25c942845d208794a35257c721ee5c6496524818f0497d9648492a1339784e192d2cedb7c47c5ed1e33a81755e20ddd202761e30d07e9fedb5bc15e1b2253e6d3a2ee0796bdf806c7703ce426b0623f13f2a1ce4680835a83fcbfb95edd712375b233ff903755a9d5f7f59dfd8a99179c0c28f7e17a7366f67e4f04c5204a4603f0dd6a2579f30349ad45d"}, 0xfb, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ(r7, 0xaea3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x141082) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000240)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) 142.326199ms ago: executing program 3 (id=4034): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x0, r1, 0x0, 0x8, 0xfffffffffffffffd) r2 = timerfd_create(0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) r4 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x2c) 126.303822ms ago: executing program 4 (id=4035): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x2c) 0s ago: executing program 4 (id=4036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x88402) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) kernel console output (not intermixed with test programs): 43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.375350][ T43] usb 3-1: Product: syz [ 767.380186][ T43] usb 3-1: Manufacturer: syz [ 767.386780][ T43] usb 3-1: SerialNumber: syz [ 767.436183][ T43] usb 3-1: config 0 descriptor?? [ 767.521187][ T9825] usb 4-1: Using ep0 maxpacket: 32 [ 767.562776][ T9825] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 767.675070][ T9825] usb 4-1: config 0 has no interface number 0 [ 767.693642][ T9825] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 767.706427][ T9825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.715107][ T9825] usb 4-1: Product: syz [ 767.719685][ T9825] usb 4-1: Manufacturer: syz [ 767.729254][ T9825] usb 4-1: SerialNumber: syz [ 767.762245][ T9825] usb 4-1: config 0 descriptor?? [ 767.782799][ T9825] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 767.819331][ T43] usb 3-1: USB disconnect, device number 20 [ 767.996304][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.013963][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.424976][ T9825] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 768.618992][ T9825] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 768.664204][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 769.673485][ T9825] usb 4-1: USB disconnect, device number 15 [ 769.791030][T13910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.039643][ T9825] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 770.129966][ T9825] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 770.150194][ T9825] quatech2 4-1:0.51: device disconnected [ 770.369469][T13920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.970555][T13934] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2366'. [ 771.246912][T13939] overlayfs: overlapping lowerdir path [ 771.754036][ T30] audit: type=1400 audit(1748665292.936:367): avc: denied { read } for pid=13947 comm="syz.2.2372" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 772.294313][T13945] orangefs_mount: mount request failed with -4 [ 772.903245][T13971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.501823][T13994] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.2385'. [ 774.855705][T13992] orangefs_mount: mount request failed with -4 [ 775.220972][T14009] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2391'. [ 775.248334][T14012] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 775.256667][T14012] team0: Device ipvlan0 is already an upper device of the team interface [ 775.284481][T14015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2395'. [ 776.750565][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 777.190431][T14043] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2406'. [ 777.323854][T14049] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2404'. [ 777.363794][T14051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2408'. [ 779.367236][T14074] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.2413'. [ 780.406115][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 780.717344][T14089] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2419'. [ 780.966130][T14097] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.2421'. [ 781.146700][ T30] audit: type=1400 audit(1748665302.326:368): avc: denied { bind } for pid=14095 comm="syz.1.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 781.177660][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 781.938444][T14106] orangefs_mount: mount request failed with -4 [ 782.628082][T14131] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2433'. [ 782.995968][T14147] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 783.492923][T14147] team0: Device ipvlan2 is already an upper device of the team interface [ 783.502699][T14150] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2439'. [ 784.516830][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 784.983065][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2445'. [ 785.813809][T14192] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 785.852283][T14192] team0: Device ipvlan2 is already an upper device of the team interface [ 786.004194][T14203] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.2456'. [ 786.085247][T14205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14205 comm=syz.1.2457 [ 786.715948][ T9] Process accounting resumed [ 787.419442][T14226] netlink: 'syz.4.2463': attribute type 10 has an invalid length. [ 788.767101][T14240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14240 comm=syz.1.2469 [ 790.741891][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 795.077652][T14316] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2490'. [ 796.043468][T14331] orangefs_mount: mount request failed with -4 [ 797.107828][ T9804] Process accounting resumed [ 797.992864][T14360] orangefs_mount: mount request failed with -4 [ 798.444807][ T30] audit: type=1400 audit(1748665319.616:369): avc: denied { connect } for pid=14379 comm="syz.2.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 800.971238][ T5909] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 801.108528][T14427] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2521'. [ 801.210148][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 801.240425][ T5909] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 801.285591][ T5909] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 801.294361][ T5909] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 801.302588][ T5909] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 801.312039][ T5909] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 801.322271][ T5909] usb 5-1: config 0 has no interface number 0 [ 801.329675][ T5909] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 801.341326][ T5909] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 801.351216][ T5909] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 801.361040][ T5909] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.374718][ T5909] usb 5-1: config 0 interface 125 has no altsetting 0 [ 801.391183][ T5909] usb 5-1: config 0 interface 125 has no altsetting 2 [ 801.413520][ T5909] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 801.422612][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.453413][ T5909] usb 5-1: Product: syz [ 801.502221][ T5909] usb 5-1: Manufacturer: syz [ 801.510337][ T5909] usb 5-1: SerialNumber: syz [ 801.532067][ T5909] usb 5-1: config 0 descriptor?? [ 801.560296][ T5909] usb 5-1: selecting invalid altsetting 2 [ 801.965378][T14443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.441138][ C1] usb 5-1: async_complete: urb error -71 [ 802.446904][ C1] usb 5-1: async_complete: urb error -71 [ 802.454206][ T5909] get_1284_register: usb error -71 [ 802.459432][ T5909] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 802.501788][ T5909] usb 5-1: USB disconnect, device number 21 [ 803.398943][ T5811] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 803.612663][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 803.642833][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 804.832670][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 804.976492][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 805.025426][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 805.048114][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.065777][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 805.077139][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.257037][ T5811] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 805.750271][ T5811] usb 4-1: USB disconnect, device number 16 [ 807.294305][T14506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 809.035128][T14530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.489444][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.495901][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.781348][T14605] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2577'. [ 816.907967][ T30] audit: type=1326 audit(1748665338.086:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.1.2579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c49d8e969 code=0x0 [ 817.911492][ T5811] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 818.290703][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.305318][ T5811] usb 5-1: config 0 has no interfaces? [ 818.316489][ T5811] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 818.347242][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.391477][ T5811] usb 5-1: config 0 descriptor?? [ 822.598978][ T5862] usb 5-1: USB disconnect, device number 22 [ 823.655150][T14691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.068139][T14701] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2601'. [ 825.602709][ T30] audit: type=1326 audit(1748665346.776:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.2612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3a118e969 code=0x0 [ 825.745861][T14734] netlink: 380 bytes leftover after parsing attributes in process `syz.2.2612'. [ 826.992929][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 827.012446][T14753] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2618'. [ 828.022381][ T5811] Process accounting resumed [ 828.050481][T14767] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2621'. [ 830.403690][T14806] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2635'. [ 831.370485][T14808] delete_channel: no stack [ 831.727994][T14820] netlink: 'syz.3.2639': attribute type 10 has an invalid length. [ 834.135759][T14864] netlink: 'syz.4.2651': attribute type 10 has an invalid length. [ 836.979910][T14894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.045805][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2667'. [ 839.450602][T14933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.791330][ T5821] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 840.567389][ T5821] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 840.585797][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 841.047771][ T5821] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 841.059617][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 841.070898][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 841.083803][ T5821] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 841.111832][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 841.125896][ T5821] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 841.139820][T14947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.156401][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 841.174408][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 841.190356][ T5821] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 841.200122][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 841.212041][ T5821] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 841.240584][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 841.294726][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 841.451641][ T5821] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 841.474258][ T5821] usb 3-1: string descriptor 0 read error: -22 [ 841.480671][ T5821] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 842.769505][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.796734][ T5821] usb 3-1: can't set config #168, error -71 [ 842.891872][ T5821] usb 3-1: USB disconnect, device number 21 [ 843.190531][T14971] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.2686'. [ 843.611883][T14974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.757233][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 846.029905][T15008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.556868][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 846.914528][T15020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.139151][ T30] audit: type=1326 audit(1748665369.316:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15035 comm="syz.0.2709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febbdb8e969 code=0x0 [ 848.279250][T15044] netlink: 392 bytes leftover after parsing attributes in process `syz.0.2709'. [ 849.347642][T15059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2716'. [ 849.554113][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 851.844133][T15084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 851.883468][T15084] team0: Device ipvlan2 is already an upper device of the team interface [ 852.254838][T15098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2729'. [ 852.491243][ T5821] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 852.661418][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 852.669512][ T5821] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 852.683021][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.702982][ T5821] usb 5-1: config 0 descriptor?? [ 852.923791][ T5821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 852.943229][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 852.957929][ T5821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 853.481233][ T5821] usb 5-1: media controller created [ 853.527873][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.738223][ T5821] az6027: usb out operation failed. (-71) [ 853.773363][ T5821] az6027: usb out operation failed. (-71) [ 853.794022][ T5821] stb0899_attach: Driver disabled by Kconfig [ 853.814531][T15127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.831405][ T5821] az6027: no front-end attached [ 853.831405][ T5821] [ 853.857290][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2736'. [ 853.902597][ T5821] az6027: usb out operation failed. (-71) [ 853.908522][ T5821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 854.055794][ T5821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 854.274128][ T5821] dvb-usb: schedule remote query interval to 400 msecs. [ 854.318711][ T30] audit: type=1400 audit(1748665375.496:373): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3168 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 854.345733][ T5821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 854.405445][ T5821] usb 5-1: USB disconnect, device number 23 [ 854.539002][ T5821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 854.702695][T15135] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 854.714294][T15135] team0: Device ipvlan2 is already an upper device of the team interface [ 854.891856][ T5821] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 855.059444][ T5821] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 855.321259][ T5811] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 855.368852][ T5821] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 855.568024][ T5821] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 855.584419][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.595052][ T5811] usb 3-1: config 0 has no interfaces? [ 855.600666][ T5811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 855.619261][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.660129][ T5821] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 855.689314][ T5811] usb 3-1: config 0 descriptor?? [ 855.984841][ T5821] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 855.996670][ T5821] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 856.025980][ T5821] usb 5-1: string descriptor 0 read error: -22 [ 856.032458][ T5821] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 856.052165][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.085416][ T5821] adutux 5-1:168.0: interrupt endpoints not found [ 857.413033][ T5821] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 857.550019][ T5861] usb 5-1: USB disconnect, device number 24 [ 857.581270][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 857.597553][ T5821] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 857.613437][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.633028][ T5821] usb 2-1: config 0 descriptor?? [ 857.682246][T15176] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 857.689924][T15176] team0: Device ipvlan2 is already an upper device of the team interface [ 857.852402][ T5862] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 858.001764][ T5821] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 858.141802][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 858.164645][ T5821] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 858.172930][ T5821] usb 2-1: media controller created [ 858.194947][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 858.224216][ T5821] az6027: usb out operation failed. (-71) [ 858.224281][ T5909] usb 3-1: USB disconnect, device number 22 [ 858.234767][ T5821] az6027: usb out operation failed. (-71) [ 858.342760][ T5821] stb0899_attach: Driver disabled by Kconfig [ 858.349605][ T5862] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 858.360419][ T5821] az6027: no front-end attached [ 858.360419][ T5821] [ 858.367846][ T5862] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 858.381352][ T5821] az6027: usb out operation failed. (-71) [ 858.387083][ T5821] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 858.422729][ T5821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 858.434297][ T5862] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 858.453361][ T5862] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 858.481479][ T5821] dvb-usb: schedule remote query interval to 400 msecs. [ 858.488499][ T5821] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 858.503546][T15185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.506495][ T5821] usb 2-1: USB disconnect, device number 19 [ 858.520725][ T5862] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 858.534012][ T5862] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 858.609248][ T5862] usb 4-1: string descriptor 0 read error: -22 [ 858.626223][ T5862] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 858.639882][T15186] fuse: root generation should be zero [ 858.644753][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.680557][ T5821] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 858.714576][ T5862] adutux 4-1:168.0: interrupt endpoints not found [ 858.837687][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'. [ 859.328202][T15197] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2758'. [ 859.428448][T15198] binder: 15196:15198 ioctl 5601 200000000280 returned -22 [ 859.460205][T15198] binder: 15196:15198 ioctl c0306201 0 returned -14 [ 859.721913][T15204] veth1_macvtap: left promiscuous mode [ 859.730680][T15204] macsec0: entered promiscuous mode [ 860.606960][ T5821] usb 4-1: USB disconnect, device number 17 [ 861.622726][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2766'. [ 862.187855][T15231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.871298][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 862.881214][ T5811] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 863.021217][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 863.028857][ T5909] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 863.052357][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.081283][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.090703][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.179290][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.196021][ T5909] usb 4-1: config 0 descriptor?? [ 863.277963][ T5811] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.290311][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.381776][ T5811] usb 2-1: config 0 descriptor?? [ 863.492689][ T5909] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 863.505465][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 863.525067][ T5909] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 863.533441][ T5909] usb 4-1: media controller created [ 863.563877][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 863.607445][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 863.832069][ T5909] az6027: usb out operation failed. (-71) [ 864.010268][ T5909] az6027: usb out operation failed. (-71) [ 864.020043][ T5909] stb0899_attach: Driver disabled by Kconfig [ 864.051384][ T5909] az6027: no front-end attached [ 864.051384][ T5909] [ 864.081500][ T5909] az6027: usb out operation failed. (-71) [ 864.088374][ T5909] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 864.110408][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 864.130528][ T5909] dvb-usb: schedule remote query interval to 400 msecs. [ 864.137771][ T5909] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 864.159043][ T5909] usb 4-1: USB disconnect, device number 18 [ 864.300884][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 864.311486][ T5811] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 864.388167][ T5811] usb 2-1: USB disconnect, device number 20 [ 864.458245][ T5909] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 865.711704][ T5821] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 865.871241][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 865.878138][ T5821] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 865.891261][ T5861] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 865.899319][ T5821] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 865.924882][ T5821] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 865.933656][ T5821] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 865.942116][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 865.976707][ T5821] usb 2-1: config 0 has no interface number 0 [ 865.984449][ T5821] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 866.031255][ T5821] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 866.045108][ T5862] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 866.055309][ T5821] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.071238][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 866.078094][ T5821] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.094923][ T5821] usb 2-1: config 0 interface 125 has no altsetting 2 [ 866.102037][ T5861] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 866.112307][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.124012][ T5821] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 866.136773][ T5861] usb 4-1: config 0 descriptor?? [ 866.142575][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.150845][ T5821] usb 2-1: Product: syz [ 866.160355][ T5821] usb 2-1: Manufacturer: syz [ 866.165312][ T5821] usb 2-1: SerialNumber: syz [ 866.173949][ T5821] usb 2-1: config 0 descriptor?? [ 866.181789][ T5821] usb 2-1: selecting invalid altsetting 2 [ 866.217879][T15276] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2783'. [ 866.227154][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 866.235298][ T5862] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 866.250807][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.271230][ T5862] usb 1-1: config 0 descriptor?? [ 866.362130][ T5861] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 866.373075][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 866.387983][ T5861] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 866.400640][ T5861] usb 4-1: media controller created [ 866.421461][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.480902][ T5862] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 866.491533][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 866.505307][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 866.512592][ T5862] usb 1-1: media controller created [ 866.527169][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.563686][ T5861] az6027: usb out operation failed. (-71) [ 866.570734][ T5861] az6027: usb out operation failed. (-71) [ 866.576660][ T5861] stb0899_attach: Driver disabled by Kconfig [ 866.582799][ T5861] az6027: no front-end attached [ 866.582799][ T5861] [ 866.590111][ T5861] az6027: usb out operation failed. (-71) [ 866.596297][ T5861] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 866.604672][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 866.617941][ T5861] dvb-usb: schedule remote query interval to 400 msecs. [ 866.625422][ T5861] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 866.640782][ T5861] usb 4-1: USB disconnect, device number 19 [ 866.684861][ T5862] az6027: usb out operation failed. (-71) [ 866.707834][ T5862] az6027: usb out operation failed. (-71) [ 866.720980][ T5861] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 866.740298][ T5862] stb0899_attach: Driver disabled by Kconfig [ 866.760116][ T5862] az6027: no front-end attached [ 866.760116][ T5862] [ 866.776401][ T5862] az6027: usb out operation failed. (-71) [ 866.785862][ T5862] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 866.794522][ T5862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 866.812157][ T5862] dvb-usb: schedule remote query interval to 400 msecs. [ 866.819205][ T5862] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 866.871624][ T5862] usb 1-1: USB disconnect, device number 17 [ 866.959476][ T5862] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 868.484978][ T9] usb 2-1: USB disconnect, device number 21 [ 868.534927][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 868.712782][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2790'. [ 868.982612][ T5862] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 869.511118][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 869.523627][ T5862] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 869.584765][ T5862] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.626590][ T5862] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.663543][ T5862] usb 1-1: config 0 has no interface number 1 [ 869.678972][ T5862] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 869.708962][ T5862] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 869.723343][ T5862] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 869.733553][ T5862] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.807672][ T5862] usb 1-1: config 0 interface 125 has no altsetting 0 [ 869.822894][ T5862] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 869.847015][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.851945][T15313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.857862][ T5862] usb 1-1: Product: syz [ 869.869344][ T5862] usb 1-1: Manufacturer: syz [ 869.874168][ T5862] usb 1-1: SerialNumber: syz [ 869.902257][ T5862] usb 1-1: config 0 descriptor?? [ 870.903756][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.910161][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.387071][ T30] audit: type=1326 audit(1748665392.516:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 871.539823][ T30] audit: type=1326 audit(1748665392.516:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 871.719362][ T5862] usb 1-1: USB disconnect, device number 18 [ 871.847866][ T30] audit: type=1326 audit(1748665392.566:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 872.060217][ T30] audit: type=1326 audit(1748665392.566:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 872.635174][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2804'. [ 872.649848][ T30] audit: type=1326 audit(1748665392.566:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 872.713338][ T30] audit: type=1326 audit(1748665392.566:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 872.759865][ T30] audit: type=1326 audit(1748665392.566:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 872.830601][ T30] audit: type=1326 audit(1748665392.566:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 872.858642][ T30] audit: type=1326 audit(1748665392.566:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 872.888130][ T30] audit: type=1326 audit(1748665392.566:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15334 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c49d8e969 code=0x7ffc0000 [ 873.431707][ T5811] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 873.494313][T15362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.608745][ T5811] usb 5-1: config 0 has no interfaces? [ 873.616411][ T5811] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 873.635729][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.656121][ T5811] usb 5-1: Product: syz [ 873.664666][ T5811] usb 5-1: Manufacturer: syz [ 873.676164][ T5811] usb 5-1: SerialNumber: syz [ 873.695591][ T5811] usb 5-1: config 0 descriptor?? [ 873.831244][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 873.983546][ T9] usb 1-1: config 0 has no interfaces? [ 873.995570][ T9] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 874.012797][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.020873][ T9] usb 1-1: Product: syz [ 874.037259][ T9] usb 1-1: Manufacturer: syz [ 874.042607][ T9] usb 1-1: SerialNumber: syz [ 874.062513][ T9] usb 1-1: config 0 descriptor?? [ 874.411649][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 874.518869][T15385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.706404][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.771259][ T9] usb 4-1: config 0 has no interfaces? [ 874.776780][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 874.854733][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.970122][ T9] usb 4-1: config 0 descriptor?? [ 875.164957][T15391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 875.173265][T15391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 875.183316][T15391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 875.193799][T15391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 875.203608][T15391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.486554][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.598585][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.704273][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.090446][ T9] usb 5-1: USB disconnect, device number 25 [ 876.114259][ T43] usb 1-1: USB disconnect, device number 19 [ 876.267077][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.499428][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2820'. [ 876.712476][ T13] bridge_slave_1: left allmulticast mode [ 876.762076][ T13] bridge_slave_1: left promiscuous mode [ 876.829458][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.977537][ T13] bridge_slave_0: left allmulticast mode [ 876.986904][ T13] bridge_slave_0: left promiscuous mode [ 876.994560][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.294980][ T5818] Bluetooth: hci0: command tx timeout [ 878.330667][ T9] usb 4-1: USB disconnect, device number 20 [ 878.393866][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 878.503568][T15438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.805207][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.816155][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.827987][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 878.837733][ T13] bond0 (unregistering): Released all slaves [ 878.882464][T15390] chnl_net:caif_netlink_parms(): no params data found [ 878.942025][ T13] : left promiscuous mode [ 879.236402][T15461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.263668][T15390] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.275803][T15390] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.283895][T15390] bridge_slave_0: entered allmulticast mode [ 879.296007][T15390] bridge_slave_0: entered promiscuous mode [ 879.316703][T15460] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 879.324942][T15460] team0: Device ipvlan2 is already an upper device of the team interface [ 879.371245][T15391] Bluetooth: hci0: command tx timeout [ 879.581168][T15466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.990572][T15390] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.007789][T15390] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.016464][T15390] bridge_slave_1: entered allmulticast mode [ 880.029264][T15390] bridge_slave_1: entered promiscuous mode [ 880.156474][T15471] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2831'. [ 881.451360][T15391] Bluetooth: hci0: command tx timeout [ 881.731190][T15390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.229047][T15390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.724936][T15390] team0: Port device team_slave_0 added [ 882.766162][T15390] team0: Port device team_slave_1 added [ 882.906326][ T13] hsr_slave_0: left promiscuous mode [ 882.918504][ T13] hsr_slave_1: left promiscuous mode [ 882.936769][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.959379][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.995073][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.004332][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.035690][ T13] veth0_macvtap: left promiscuous mode [ 883.112179][ T5821] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 883.282749][ T5821] usb 1-1: config 0 has no interfaces? [ 883.293294][ T5821] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 883.313074][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.322823][ T5821] usb 1-1: Product: syz [ 883.327219][ T5821] usb 1-1: Manufacturer: syz [ 883.335276][ T5821] usb 1-1: SerialNumber: syz [ 883.344895][ T5821] usb 1-1: config 0 descriptor?? [ 883.514978][ T13] team0 (unregistering): Port device team_slave_1 removed [ 883.533806][T15391] Bluetooth: hci0: command tx timeout [ 883.556208][ T13] team0 (unregistering): Port device team_slave_0 removed [ 883.614544][ T5821] usb 1-1: USB disconnect, device number 20 [ 884.312317][T15518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 884.334811][T15518] team0: Device ipvlan2 is already an upper device of the team interface [ 884.895902][T15390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.929025][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.047974][T15390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.060497][T15390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.072421][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.098667][T15390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.184232][T15534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.684026][T15390] hsr_slave_0: entered promiscuous mode [ 885.704636][T15390] hsr_slave_1: entered promiscuous mode [ 885.867592][ T5821] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 886.423451][T15391] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 886.516399][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 886.620567][ T5821] usb 5-1: config 6 has an invalid interface number: 96 but max is 0 [ 886.646590][ T5821] usb 5-1: config 6 has an invalid descriptor of length 68, skipping remainder of the config [ 886.703810][ T5821] usb 5-1: config 6 has no interface number 0 [ 886.721344][ T5821] usb 5-1: config 6 interface 96 has no altsetting 0 [ 886.730246][ T5821] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 886.766225][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.774140][ T13] IPVS: stop unused estimator thread 0... [ 886.795200][ T5821] usb 5-1: Product: syz [ 886.871137][ T5821] usb 5-1: Manufacturer: syz [ 886.875838][ T5821] usb 5-1: SerialNumber: syz [ 887.157121][ T5821] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 887.299170][T15566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.318318][T15567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.393728][ T5821] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 887.436509][ T5821] dib0700: firmware download failed at 7 with -71 [ 887.515324][ T5821] usb 5-1: USB disconnect, device number 26 [ 888.426990][T15390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 888.469197][T15390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 888.488968][T15390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 888.502768][T15390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 888.719854][T15390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.846495][T15390] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.932282][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.939453][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.117398][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.124544][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.409729][T15391] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 891.374679][T15390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.466919][T15390] veth0_vlan: entered promiscuous mode [ 891.493941][T15390] veth1_vlan: entered promiscuous mode [ 891.973069][T15635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.037619][T15390] veth0_macvtap: entered promiscuous mode [ 892.048196][T15390] veth1_macvtap: entered promiscuous mode [ 892.070466][T15390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.100841][T15390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.115304][T15390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.125878][T15390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.134959][T15390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.144583][T15390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.318049][ T6184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.377114][ T6184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.520501][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.533149][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.548874][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 892.548889][ T30] audit: type=1400 audit(1748665413.726:409): avc: denied { mount } for pid=15390 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 892.614902][T15650] netlink: 'syz.2.2865': attribute type 72 has an invalid length. [ 892.621793][ T30] audit: type=1400 audit(1748665413.786:410): avc: denied { mount } for pid=15390 comm="syz-executor" name="/" dev="gadgetfs" ino=6529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 894.301677][T15664] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2866'. [ 897.600547][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 898.295316][T15731] fuse: Unknown parameter '0x0000000000000003' [ 900.194536][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'. [ 900.491441][ T5821] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 900.766751][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.777562][ T5821] usb 5-1: config 0 has no interfaces? [ 900.785170][ T5821] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 900.816550][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.851000][ T5821] usb 5-1: config 0 descriptor?? [ 901.159804][T15391] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 903.291254][ T5909] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 903.876862][ T9804] usb 5-1: USB disconnect, device number 27 [ 903.911185][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 904.021199][ T5909] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 904.030307][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.080828][ T5909] usb 1-1: config 0 descriptor?? [ 904.100160][ T30] audit: type=1326 audit(1748665425.276:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 904.132337][T15817] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2897'. [ 904.160132][ T30] audit: type=1326 audit(1748665425.306:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 904.213940][ T30] audit: type=1326 audit(1748665425.306:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 904.255721][ T30] audit: type=1326 audit(1748665425.326:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 904.301234][ T30] audit: type=1326 audit(1748665425.326:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 904.325802][ T30] audit: type=1326 audit(1748665425.326:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 904.457891][ T30] audit: type=1326 audit(1748665425.326:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 904.481885][ T5909] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 904.493566][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 904.503691][ T5909] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 904.518202][ T5909] usb 1-1: media controller created [ 904.983031][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 905.011566][ T30] audit: type=1326 audit(1748665425.326:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 905.035101][ T30] audit: type=1326 audit(1748665425.326:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 905.059343][ T30] audit: type=1326 audit(1748665425.326:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15814 comm="syz.1.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd71558e969 code=0x7ffc0000 [ 905.178902][ T5909] az6027: usb out operation failed. (-71) [ 905.347411][ T5909] az6027: usb out operation failed. (-71) [ 905.359908][ T5909] stb0899_attach: Driver disabled by Kconfig [ 905.840137][ T5909] az6027: no front-end attached [ 905.840137][ T5909] [ 905.853727][ T5909] az6027: usb out operation failed. (-71) [ 905.861010][ T5909] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 905.885570][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 905.974024][T15836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2906'. [ 906.183307][ T5909] dvb-usb: schedule remote query interval to 400 msecs. [ 906.194510][ T5909] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 906.212037][ T5909] usb 1-1: USB disconnect, device number 21 [ 907.057908][ T5909] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 909.685480][T15896] netlink: 'syz.3.2922': attribute type 10 has an invalid length. [ 912.863977][T15915] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2930'. [ 913.161896][T15929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2937'. [ 913.526076][T15941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2941'. [ 914.154316][T15950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.154126][T15965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2946'. [ 916.163476][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 916.608383][T15973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2950'. [ 916.990891][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 916.999807][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.008290][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.019065][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.028783][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 919.055929][T15391] Bluetooth: hci5: command tx timeout [ 920.549606][T15975] chnl_net:caif_netlink_parms(): no params data found [ 921.300857][T15391] Bluetooth: hci5: command tx timeout [ 921.353981][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.361338][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.368656][T15975] bridge_slave_0: entered allmulticast mode [ 921.378260][T15975] bridge_slave_0: entered promiscuous mode [ 921.479232][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.846245][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.855629][T15975] bridge_slave_1: entered allmulticast mode [ 921.884520][T15975] bridge_slave_1: entered promiscuous mode [ 922.516207][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.528901][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.689567][T15975] team0: Port device team_slave_0 added [ 922.708770][T15975] team0: Port device team_slave_1 added [ 922.749000][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.756491][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.783279][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.796808][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.805026][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.831508][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.872147][T15975] hsr_slave_0: entered promiscuous mode [ 922.878359][T15975] hsr_slave_1: entered promiscuous mode [ 922.884632][T15975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.894533][T15975] Cannot create hsr debugfs directory [ 923.019988][T15975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.160238][T15975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.249379][T15975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.421343][T15391] Bluetooth: hci5: command tx timeout [ 923.481051][ C1] hrtimer: interrupt took 25761 ns [ 923.637751][T15975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.149075][T15975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 924.296945][T15975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 924.309479][T15975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 924.343762][T15975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 925.026102][T15975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.111567][T15975] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.160639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.167839][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.228668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.235847][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.956713][ T5818] Bluetooth: hci5: command tx timeout [ 928.762023][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.897344][T15975] veth0_vlan: entered promiscuous mode [ 929.651890][T15975] veth1_vlan: entered promiscuous mode [ 929.792990][T15975] veth0_macvtap: entered promiscuous mode [ 930.513316][T15975] veth1_macvtap: entered promiscuous mode [ 930.542336][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.908855][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.967056][T15975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.981146][T15975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.014405][T15975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.071079][T15975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.500550][ T9825] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 932.000684][ T9825] usb 1-1: config 0 has no interfaces? [ 932.016688][ T9825] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.052568][ T9825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.061806][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.142729][ T9825] usb 1-1: config 0 descriptor?? [ 933.144474][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.154416][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.165410][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.225968][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.234507][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.919009][ T1147] bridge_slave_1: left allmulticast mode [ 934.925976][ T1147] bridge_slave_1: left promiscuous mode [ 934.932951][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.955856][ T1147] bridge_slave_0: left allmulticast mode [ 934.967836][ T1147] bridge_slave_0: left promiscuous mode [ 934.978169][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.480391][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.492033][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.506577][ T1147] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 935.515870][ T1147] bond0 (unregistering): Released all slaves [ 935.527376][ T1147] bond1 (unregistering): Released all slaves [ 935.543010][ T1147] bond2 (unregistering): Released all slaves [ 935.861148][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 935.862317][ T30] audit: type=1400 audit(1748665457.036:424): avc: denied { execute } for pid=16128 comm="syz.4.2987" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 935.946644][T16133] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2988'. [ 935.956023][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 937.064673][ T5862] usb 1-1: USB disconnect, device number 22 [ 938.434540][ T5818] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 938.907922][T15391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 938.929549][T15391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 938.938760][T15391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.962131][T15391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.970161][T15391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 939.451135][ T5862] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 939.658019][ T1147] hsr_slave_0: left promiscuous mode [ 939.763010][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.786864][ T5862] usb 1-1: config 0 has no interfaces? [ 939.807465][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 939.834662][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.847110][ T1147] hsr_slave_1: left promiscuous mode [ 939.866834][ T5862] usb 1-1: config 0 descriptor?? [ 939.892123][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.909886][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.948217][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.992438][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.054852][ T1147] veth0_macvtap: left promiscuous mode [ 940.114979][ T1147] veth1_vlan: left promiscuous mode [ 940.121467][ T1147] veth0_vlan: left promiscuous mode [ 941.046512][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 941.051227][T15391] Bluetooth: hci2: command tx timeout [ 941.150826][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 943.033845][T16193] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3003'. [ 943.044438][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 943.131190][T15391] Bluetooth: hci2: command tx timeout [ 943.206412][ T5862] usb 1-1: USB disconnect, device number 23 [ 944.416387][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 944.465470][T16164] chnl_net:caif_netlink_parms(): no params data found [ 945.173821][ T1147] IPVS: stop unused estimator thread 0... [ 945.211262][T15391] Bluetooth: hci2: command tx timeout [ 945.223702][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.233604][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.242324][T16164] bridge_slave_0: entered allmulticast mode [ 945.249295][T16164] bridge_slave_0: entered promiscuous mode [ 945.263202][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.271313][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.278616][T16164] bridge_slave_1: entered allmulticast mode [ 945.287137][T16164] bridge_slave_1: entered promiscuous mode [ 945.362806][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.405072][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.457450][T16164] team0: Port device team_slave_0 added [ 947.401641][T15391] Bluetooth: hci2: command tx timeout [ 948.404901][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.423783][T16164] team0: Port device team_slave_1 added [ 948.497720][T16257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.304833][ T30] audit: type=1400 audit(1748665470.486:425): avc: denied { unmount } for pid=15390 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 949.461910][T16264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.920993][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.045723][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.074119][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.299839][T16275] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3020'. [ 951.872484][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.750005][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.757089][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.844060][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.055592][T16164] hsr_slave_0: entered promiscuous mode [ 953.072457][T16164] hsr_slave_1: entered promiscuous mode [ 953.101737][T16164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.135712][T15391] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 953.142558][T16164] Cannot create hsr debugfs directory [ 953.220171][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.682085][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.004848][ T1147] bridge_slave_1: left allmulticast mode [ 956.044154][ T1147] bridge_slave_1: left promiscuous mode [ 956.050758][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.738874][ T1147] bridge_slave_0: left allmulticast mode [ 956.758495][ T1147] bridge_slave_0: left promiscuous mode [ 956.814028][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.909617][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.921533][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.935997][ T1147] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 957.945308][ T1147] bond0 (unregistering): Released all slaves [ 960.243029][T16376] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3039'. [ 961.532986][T16164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 962.124892][T16392] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3042'. [ 962.457642][T16164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 962.611501][T16164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 962.738452][ T1147] hsr_slave_0: left promiscuous mode [ 962.760006][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.830421][T16402] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3044'. [ 963.557746][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.760700][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.839842][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.058049][ T1147] veth0_macvtap: left promiscuous mode [ 964.100456][ T1147] veth1_vlan: left promiscuous mode [ 964.106359][ T1147] veth0_vlan: left promiscuous mode [ 966.111407][T15391] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 967.453553][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 967.495141][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 967.603005][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'. [ 968.132516][T16164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 968.570434][T16445] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3053'. [ 969.609283][T16164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.674111][T16164] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.765150][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.772402][ T6184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.192400][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.199628][ T6184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.639906][T16164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 971.860445][ T1147] IPVS: stop unused estimator thread 0... [ 973.645852][T16164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.830671][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 974.222164][T16494] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3063'. [ 974.974671][T16510] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3065'. [ 976.042685][T16164] veth0_vlan: entered promiscuous mode [ 976.108026][T16164] veth1_vlan: entered promiscuous mode [ 977.406929][T16164] veth0_macvtap: entered promiscuous mode [ 977.423422][T16164] veth1_macvtap: entered promiscuous mode [ 977.443808][T16164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.503192][T16164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.515845][T16164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.524690][T16164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.533480][T16164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.542418][T16164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.050707][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.368521][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.222625][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.241215][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.344975][T16557] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3074'. [ 982.549333][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 984.905660][T16585] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3076'. [ 987.894262][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 987.932718][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.970962][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.998261][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 988.009109][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.510946][T16618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.232155][T16622] netlink: 'syz.3.3085': attribute type 10 has an invalid length. [ 989.256948][T16622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.271314][T16622] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 990.129061][T15391] Bluetooth: hci4: command tx timeout [ 990.458666][T16631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.176925][T15391] Bluetooth: hci4: command tx timeout [ 992.421594][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 992.555479][ T30] audit: type=1326 audit(1748665513.736:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 992.623278][ T30] audit: type=1326 audit(1748665513.766:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 992.648636][T16604] chnl_net:caif_netlink_parms(): no params data found [ 992.662589][ T30] audit: type=1326 audit(1748665513.766:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 992.687735][ T30] audit: type=1326 audit(1748665513.766:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 992.718523][ T30] audit: type=1326 audit(1748665513.766:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 992.745735][ T30] audit: type=1326 audit(1748665513.766:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 992.753665][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 992.831804][T16654] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3092'. [ 992.931813][ T9] usb 3-1: config 6 has an invalid interface number: 96 but max is 0 [ 992.951119][ T30] audit: type=1326 audit(1748665513.766:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 993.039241][ T9] usb 3-1: config 6 has an invalid descriptor of length 68, skipping remainder of the config [ 993.169898][ T9] usb 3-1: config 6 has no interface number 0 [ 993.388124][ T9] usb 3-1: config 6 interface 96 has no altsetting 0 [ 993.400327][ T30] audit: type=1326 audit(1748665513.766:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 993.584952][ T9] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=4f.2b [ 993.706414][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.759164][ T30] audit: type=1326 audit(1748665513.766:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 993.786349][ T30] audit: type=1326 audit(1748665513.766:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16650 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f3138e969 code=0x7ffc0000 [ 993.796684][ T9] usb 3-1: Product: syz [ 993.814822][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.822128][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.841270][ T9] usb 3-1: Manufacturer: syz [ 993.845975][ T9] usb 3-1: SerialNumber: syz [ 994.194243][ T9] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 994.212611][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 994.251201][T15391] Bluetooth: hci4: command tx timeout [ 994.302186][T16604] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.309296][T16604] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.328536][ T9] dib0700: firmware download failed at 7 with -71 [ 994.340909][T16604] bridge_slave_0: entered allmulticast mode [ 994.348806][T16604] bridge_slave_0: entered promiscuous mode [ 994.362106][T16604] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.369380][T16604] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.317248][ T9] usb 3-1: USB disconnect, device number 23 [ 995.326430][T16604] bridge_slave_1: entered allmulticast mode [ 995.333936][T16604] bridge_slave_1: entered promiscuous mode [ 995.610903][T16674] netlink: 'syz.4.3096': attribute type 10 has an invalid length. [ 996.114328][T16604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.211532][T16683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.335463][T15391] Bluetooth: hci4: command tx timeout [ 996.900034][T16604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.629202][T16604] team0: Port device team_slave_0 added [ 998.693514][T16604] team0: Port device team_slave_1 added [ 999.168907][T16604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.191087][T16604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.252164][T16706] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3104'. [ 999.488677][T16604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.513607][T16604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.520616][T16604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.546871][T16604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.878299][T16604] hsr_slave_0: entered promiscuous mode [ 1001.004096][T15391] Bluetooth: hci0: command 0x0406 tx timeout [ 1001.023124][T16604] hsr_slave_1: entered promiscuous mode [ 1001.210401][T16604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.260299][T16604] Cannot create hsr debugfs directory [ 1001.596099][T16723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.520268][T16734] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3111'. [ 1003.398255][T16737] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3113'. [ 1004.475259][T16742] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3114'. [ 1005.616082][T16604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.953988][T16604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.017807][ T5818] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1007.020230][T16604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.769967][T16774] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3122'. [ 1008.985928][T16604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.562744][T16426] bridge_slave_1: left allmulticast mode [ 1010.569079][T16426] bridge_slave_1: left promiscuous mode [ 1010.575009][T16426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.606797][T16426] bridge_slave_0: left allmulticast mode [ 1010.628554][T16426] bridge_slave_0: left promiscuous mode [ 1010.646639][T16426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.743918][T16799] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3127'. [ 1011.972738][T16805] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1013.446618][T16426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.460880][T16426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.476626][T16426] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1013.488006][T16426] bond0 (unregistering): Released all slaves [ 1013.509185][T16604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1013.611810][T16604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1013.966538][T16604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1014.007303][T16604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1014.361667][T16604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.722153][T16604] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.747008][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.754211][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.047690][T16826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.423663][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.430920][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.500714][T16604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1016.531542][T16604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1017.644372][T16845] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1018.796761][T16426] hsr_slave_0: left promiscuous mode [ 1018.951474][T16426] hsr_slave_1: left promiscuous mode [ 1018.976919][T16426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.986605][T16426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.134156][T16426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.143518][T16426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.639730][T16426] veth0_macvtap: left promiscuous mode [ 1019.723560][T16426] veth1_vlan: left promiscuous mode [ 1019.729800][T16426] veth0_vlan: left promiscuous mode [ 1019.830449][T16858] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1021.215751][T16864] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1022.865523][T16870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.719909][T16426] team0 (unregistering): Port device team_slave_1 removed [ 1023.753921][T16426] team0 (unregistering): Port device team_slave_0 removed [ 1023.764204][ T3014] smc: removing ib device syz! [ 1024.195903][T16604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.308037][T16884] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3147'. [ 1025.479496][ T5818] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1025.562498][T16604] veth0_vlan: entered promiscuous mode [ 1025.594659][T16604] veth1_vlan: entered promiscuous mode [ 1025.683768][T16604] veth0_macvtap: entered promiscuous mode [ 1026.548026][T16604] veth1_macvtap: entered promiscuous mode [ 1026.568635][T16604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.344991][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1027.345012][ T30] audit: type=1400 audit(1748665547.916:442): avc: denied { shutdown } for pid=16895 comm="syz.2.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1027.583541][T16604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.597419][T16604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.608618][T16604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.948857][T16604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.958096][T16604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.089247][T16913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.491270][ T30] audit: type=1400 audit(1748665549.666:443): avc: denied { connect } for pid=16910 comm="syz.3.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1028.742046][T15391] Bluetooth: hci4: command 0x0405 tx timeout [ 1029.105189][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.121086][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.819011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.846934][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.239135][T16935] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3079'. [ 1034.137629][T16956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.715887][T16957] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.3164'. [ 1034.804480][T16426] IPVS: stop unused estimator thread 0... [ 1035.625541][T16966] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3168'. [ 1036.584882][T16968] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1036.885286][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.960684][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1037.025288][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1037.036800][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.515791][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1039.728888][ T5818] Bluetooth: hci1: command tx timeout [ 1041.302432][T16963] chnl_net:caif_netlink_parms(): no params data found [ 1042.551230][T15391] Bluetooth: hci1: command tx timeout [ 1042.739336][T15391] Bluetooth: hci5: command 0x0406 tx timeout [ 1042.765969][T17010] netlink: 'syz.0.3172': attribute type 10 has an invalid length. [ 1043.094804][T17010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.102783][T17010] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1043.162178][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.169777][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.267163][T16963] bridge_slave_0: entered allmulticast mode [ 1043.280725][T16963] bridge_slave_0: entered promiscuous mode [ 1043.299401][T16963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.307663][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.319508][T16963] bridge_slave_1: entered allmulticast mode [ 1043.326759][T16963] bridge_slave_1: entered promiscuous mode [ 1043.531676][T16963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.556367][T16963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.725160][T16963] team0: Port device team_slave_0 added [ 1043.783702][T16963] team0: Port device team_slave_1 added [ 1044.523053][T16963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.539420][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.811090][T17008] Bluetooth: hci1: command tx timeout [ 1044.823518][T16963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.845413][T16963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.852532][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.892378][T16963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.966715][T17031] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1046.530046][T16963] hsr_slave_0: entered promiscuous mode [ 1046.537814][T16963] hsr_slave_1: entered promiscuous mode [ 1046.544513][T16963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.568238][T16963] Cannot create hsr debugfs directory [ 1046.892540][T17008] Bluetooth: hci1: command tx timeout [ 1047.019383][T16963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.431186][ T5861] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1047.595450][T16963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.670889][ T5861] usb 1-1: config 0 has no interfaces? [ 1047.729051][ T5861] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1047.825628][T16963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.875545][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.998160][ T5861] usb 1-1: config 0 descriptor?? [ 1048.005633][T16963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.218182][T16963] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1048.339703][T16963] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1048.357801][T16963] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1048.531252][T16963] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1049.116884][T16963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.195634][T16963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.232383][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.239494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.557686][T17071] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3188'. [ 1050.492354][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.499436][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.711450][ T5862] usb 1-1: USB disconnect, device number 24 [ 1050.876157][T17078] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3189'. [ 1052.805398][T16963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.999794][T17098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.063322][T17008] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 1054.378211][T16963] veth0_vlan: entered promiscuous mode [ 1054.424929][T16963] veth1_vlan: entered promiscuous mode [ 1054.458024][T16963] veth0_macvtap: entered promiscuous mode [ 1054.466724][T16963] veth1_macvtap: entered promiscuous mode [ 1054.505072][T16963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.516646][T16963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.548292][T16963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.594910][T16963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.619280][T16963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.628694][T16963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.768120][T17124] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3200'. [ 1055.912267][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.918672][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.353039][ T6184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.360902][ T6184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.497744][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.521200][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.560251][T17008] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 1056.702401][T17137] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3203'. [ 1058.997024][T17119] netlink: 'syz.2.3198': attribute type 10 has an invalid length. [ 1059.107051][T17119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.158396][T17119] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1059.995584][T17152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.095942][T17162] kernel read not supported for file /z¿ (pid: 17162 comm: syz.2.3209) [ 1061.124689][T17164] 9pnet_fd: Insufficient options for proto=fd [ 1061.134172][ T30] audit: type=1800 audit(1748665582.306:444): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3209" name=7ABF17 dev="mqueue" ino=57534 res=0 errno=0 [ 1061.323687][T17166] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3210'. [ 1063.310941][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 1065.926787][T17214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.189235][T17008] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 1066.540159][T17221] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1068.709971][T17008] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 1069.418743][T17240] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3228'. [ 1071.552220][T17008] Bluetooth: hci5: unexpected event for opcode 0x0c20 [ 1073.184937][T17269] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3234'. [ 1075.841079][T17274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.575015][T10717] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 1083.430725][T17339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.283789][T17350] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3255'. [ 1086.535821][T17356] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3256'. [ 1092.034570][T17390] netlink: 'syz.0.3263': attribute type 10 has an invalid length. [ 1094.414349][ T5821] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1095.888145][ T5821] usb 2-1: config 0 has no interfaces? [ 1095.923251][ T5821] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1096.685490][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.478543][ T5821] usb 2-1: config 0 descriptor?? [ 1100.127945][ T5821] usb 2-1: can't set config #0, error -71 [ 1100.176166][ T5821] usb 2-1: USB disconnect, device number 22 [ 1100.293306][T17449] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3278'. [ 1104.579262][T17481] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3286'. [ 1107.657969][T17510] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3293'. [ 1108.146481][T17513] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1108.587993][T17008] Bluetooth: hci1: command 0x0405 tx timeout [ 1109.202780][T17524] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3298'. [ 1111.200443][T17531] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.3297'. [ 1113.771193][T10717] Bluetooth: hci4: command 0x0405 tx timeout [ 1116.966238][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.973228][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.028786][T17581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1126.321118][T17628] fuseblk: Bad value for 'fd' [ 1127.324910][T17637] netlink: 'syz.3.3323': attribute type 10 has an invalid length. [ 1127.509414][T17640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1129.119772][T17654] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3327'. [ 1131.541376][T17665] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1132.446333][T17674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.334548][T17678] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3335'. [ 1133.520893][T17686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.441335][T17691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.184553][ T9825] IPVS: starting estimator thread 0... [ 1136.273285][T17706] IPVS: using max 37 ests per chain, 88800 per kthread [ 1148.109426][T17833] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3373'. [ 1149.371078][T17840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1150.833935][T17849] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1151.671832][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 1152.967688][T17867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.083148][T17877] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3382'. [ 1156.568943][T17891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.913216][T17894] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1161.423607][T17919] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1163.342382][T17939] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1163.546895][T17942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.406729][T17955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.931456][T17008] Bluetooth: hci1: command 0x0405 tx timeout [ 1168.590530][T17992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1170.950090][T18015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.784107][T18050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.655231][T18063] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1178.107611][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.114139][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.944316][ T9] IPVS: starting estimator thread 0... [ 1183.319947][T18117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.446087][T18114] IPVS: using max 38 ests per chain, 91200 per kthread [ 1186.824085][T18148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.339108][T18192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.942560][T18199] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1196.218937][T18218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1197.724776][T18236] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1197.883190][T18239] netlink: 'syz.4.3483': attribute type 10 has an invalid length. [ 1197.894340][T18239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.902210][T18239] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1200.403365][T18251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.249721][ T9804] IPVS: starting estimator thread 0... [ 1201.383098][T18262] IPVS: using max 41 ests per chain, 98400 per kthread [ 1203.106918][T18278] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1207.270073][T18300] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.3499'. [ 1209.231162][T17008] Bluetooth: hci1: command 0x0405 tx timeout [ 1209.979118][T18317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.649416][ T5861] IPVS: starting estimator thread 0... [ 1210.758655][T18321] IPVS: using max 75 ests per chain, 180000 per kthread [ 1212.044461][T18332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.919169][T18348] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.3515'. [ 1215.634781][T18360] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3516'. [ 1217.134082][T18372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.955108][T18384] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3524'. [ 1221.239015][T10717] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 1226.023487][T18425] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.3534'. [ 1229.427484][T18447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.320677][T18461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.459696][T18468] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1234.086298][T18491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1235.292376][T18501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1235.696319][T18504] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1239.831219][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.840263][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.206663][T18535] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1241.703633][T18549] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3569'. [ 1243.302761][T18563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.512465][T18566] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1245.796143][T10717] Bluetooth: hci5: unknown advertising packet type: 0x70 [ 1246.417063][T18580] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3576'. [ 1248.460490][T18596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1249.397523][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 1249.686441][T18609] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1251.197241][T18615] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3586'. [ 1252.946662][T18634] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1257.377748][T18664] netlink: 'syz.1.3599': attribute type 10 has an invalid length. [ 1257.404338][T18664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.419805][T18664] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1257.992391][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1258.868383][T18675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1260.063991][T18692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1260.611064][T18696] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1260.688653][T18698] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3611'. [ 1261.630676][T18703] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3612'. [ 1263.458286][T18715] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3613'. [ 1266.105583][T18735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1267.780814][T18749] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1269.138467][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3628'. [ 1271.729626][T18791] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.3636'. [ 1273.272286][T18799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.173862][T18822] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3643'. [ 1279.851950][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1280.932497][T18853] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3652'. [ 1284.793224][T18871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.341292][T18883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.838141][T10717] Bluetooth: hci0: unknown advertising packet type: 0x70 [ 1287.188499][T18902] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.3665'. [ 1289.692896][T18925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1290.688095][T10717] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 1291.152073][T18942] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1292.068561][T18959] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1294.564605][T18981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.869677][ T9804] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1295.505533][ T9804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.523348][ T9804] usb 1-1: config 0 has no interfaces? [ 1295.528838][ T9804] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1295.537944][ T9804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.550824][ T9804] usb 1-1: config 0 descriptor?? [ 1296.088712][T18999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.612086][T19007] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3698'. [ 1297.673859][ T9] usb 1-1: USB disconnect, device number 25 [ 1297.756424][T19003] vlan2: entered promiscuous mode [ 1297.780843][T19003] vlan2: entered allmulticast mode [ 1297.789027][T19003] hsr_slave_1: entered allmulticast mode [ 1298.269829][T19022] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1299.362880][T19024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.527420][T19031] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3704'. [ 1301.010561][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.020988][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.906847][T19047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1303.509589][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1303.571416][T16726] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1303.608958][T19057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1303.876180][T16726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.916980][T16726] usb 4-1: config 0 has no interfaces? [ 1303.948601][T16726] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1303.980467][T16726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.021871][T16726] usb 4-1: config 0 descriptor?? [ 1304.110026][T19064] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1304.634746][T19072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1304.678740][T19072] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1304.852180][T19072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.860579][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.716186][T19079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1306.154660][ T9] usb 4-1: USB disconnect, device number 21 [ 1306.176949][T19086] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1306.231981][T19086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.239387][T19086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.654213][T10717] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 1308.580570][T19118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1309.137675][T19122] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3733'. [ 1310.105775][ T5821] IPVS: starting estimator thread 0... [ 1310.261168][T19128] IPVS: using max 45 ests per chain, 108000 per kthread [ 1310.551231][ T9804] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1311.031352][ T9804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.069908][ T9804] usb 4-1: config 0 has no interfaces? [ 1311.190350][ T9804] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1311.271089][ T9804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.351556][ T9804] usb 4-1: config 0 descriptor?? [ 1311.425694][T19147] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1311.437989][T19147] team0: Device ipvlan2 is already an upper device of the team interface [ 1311.557732][T19150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.899515][T19153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1311.919489][T19153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.926783][T19153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.175181][T19161] netlink: 5280 bytes leftover after parsing attributes in process `syz.4.3746'. [ 1313.271011][ T5821] usb 4-1: USB disconnect, device number 22 [ 1313.348356][T19165] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3745'. [ 1313.964333][T19171] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1314.996455][T19180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1319.891621][T19223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1325.360782][T19311] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1326.271440][T19315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1327.059539][ T2956] bridge_slave_1: left allmulticast mode [ 1327.066465][ T2956] bridge_slave_1: left promiscuous mode [ 1327.112200][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.129076][ T2956] bridge_slave_0: left allmulticast mode [ 1327.138902][ T2956] bridge_slave_0: left promiscuous mode [ 1327.147075][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.674444][T19356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3810'. [ 1328.827743][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.976639][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.088158][ T2956] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1329.099357][ T2956] bond0 (unregistering): Released all slaves [ 1329.193205][ T2956] bond1 (unregistering): Released all slaves [ 1329.225153][ T2956] bond2 (unregistering): Released all slaves [ 1329.547875][T19371] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1329.831046][ T43] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1330.866972][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.884486][ T43] usb 3-1: config 0 has no interfaces? [ 1330.890249][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1330.901418][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.930729][ T43] usb 3-1: config 0 descriptor?? [ 1331.467377][T19395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.784714][ T2956] hsr_slave_0: left promiscuous mode [ 1331.790550][ T2956] hsr_slave_1: left promiscuous mode [ 1331.815451][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.003969][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.072489][T19405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19405 comm=syz.3.3824 [ 1332.113743][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1332.125651][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.153447][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3825'. [ 1332.188882][ T2956] veth0_macvtap: left promiscuous mode [ 1332.196398][ T2956] veth1_vlan: left promiscuous mode [ 1332.257078][ T2956] veth0_vlan: left promiscuous mode [ 1332.735087][T19419] netlink: 'syz.1.3827': attribute type 10 has an invalid length. [ 1332.894122][ T5821] usb 3-1: USB disconnect, device number 24 [ 1334.170205][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 1334.210136][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 1334.826919][T19415] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1334.835009][T19415] team0: Device ipvlan2 is already an upper device of the team interface [ 1335.188561][T19439] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1335.256725][T19439] team0: Device ipvlan2 is already an upper device of the team interface [ 1335.413871][T19449] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1335.423273][T19449] team0: Device ipvlan2 is already an upper device of the team interface [ 1335.483554][T19451] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1335.505138][T19451] team0: Device ipvlan2 is already an upper device of the team interface [ 1335.585044][T19456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1335.629816][T19459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3843'. [ 1335.678043][ T2956] IPVS: stop unused estimator thread 0... [ 1336.841001][ T5821] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1337.488584][T19489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1337.495430][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.864417][ T5821] usb 1-1: config 0 has no interfaces? [ 1337.870025][ T5821] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1337.884814][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.901568][ T5821] usb 1-1: config 0 descriptor?? [ 1339.101159][ T9825] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1339.274410][ T9825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.011137][ T9825] usb 5-1: config 0 has no interfaces? [ 1340.016691][ T9825] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1340.027188][ T9825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.052541][ T9] usb 1-1: USB disconnect, device number 26 [ 1340.081725][ T9825] usb 5-1: config 0 descriptor?? [ 1340.140877][T19515] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1340.175256][T19515] team0: Device ipvlan2 is already an upper device of the team interface [ 1340.246811][T19523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3867'. [ 1340.453814][T19529] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1340.472144][T19529] team0: Device ipvlan2 is already an upper device of the team interface [ 1340.978763][T19533] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1341.046185][T19533] team0: Device ipvlan2 is already an upper device of the team interface [ 1341.438675][T19546] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1341.488363][T19546] team0: Device ipvlan2 is already an upper device of the team interface [ 1343.201151][ T9804] usb 5-1: USB disconnect, device number 28 [ 1343.359554][T19586] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1343.367303][T19586] team0: Device ipvlan2 is already an upper device of the team interface [ 1345.014264][ T9804] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1345.190498][ T9804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.154104][ T9804] usb 5-1: config 0 has no interfaces? [ 1346.162943][ T9804] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1346.173696][ T9804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.196812][T19618] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1346.204964][ T9804] usb 5-1: config 0 descriptor?? [ 1346.205007][T19618] team0: Device ipvlan2 is already an upper device of the team interface [ 1348.477154][ T5861] usb 5-1: USB disconnect, device number 29 [ 1348.735772][T19663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1349.115108][T19667] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1349.125359][T19667] team0: Device ipvlan2 is already an upper device of the team interface [ 1350.684799][T19686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.765316][ T9804] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1357.299680][ T9804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.363047][ T9804] usb 2-1: config 0 has no interfaces? [ 1357.368590][ T9804] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1357.461041][ T5861] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1357.711133][ T9804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.725666][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.260392][ T5861] usb 5-1: config 0 has no interfaces? [ 1358.271335][ T5861] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1358.280470][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.298567][ T5861] usb 5-1: config 0 descriptor?? [ 1358.307916][ T9804] usb 2-1: config 0 descriptor?? [ 1358.813676][T19779] netlink: 'syz.3.3954': attribute type 10 has an invalid length. [ 1359.841956][ T5861] usb 2-1: USB disconnect, device number 23 [ 1361.757475][ T5821] usb 5-1: USB disconnect, device number 30 [ 1362.413348][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.650994][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.170270][T19824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.431442][T19827] netlink: 'syz.1.3969': attribute type 10 has an invalid length. [ 1364.761782][T19828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.408780][ T5821] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1365.645183][ T5821] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1365.654525][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.666266][ T5821] usb 1-1: config 0 descriptor?? [ 1365.675105][ T5821] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1366.368912][T19844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.058305][ T5861] usb 1-1: USB disconnect, device number 27 [ 1369.649040][T19891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1370.491119][T19906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1371.499678][T19917] FAULT_INJECTION: forcing a failure. [ 1371.499678][T19917] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.512759][T19917] CPU: 0 UID: 0 PID: 19917 Comm: syz.2.3997 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 1371.512782][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1371.512798][T19917] Call Trace: [ 1371.512813][T19917] [ 1371.512817][T19917] dump_stack_lvl+0x16c/0x1f0 [ 1371.512845][T19917] should_fail_ex+0x512/0x640 [ 1371.512865][T19917] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1371.512887][T19917] should_failslab+0xc2/0x120 [ 1371.512901][T19917] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1371.512917][T19917] ? cgroup_show_path+0xb2/0x740 [ 1371.512934][T19917] ? __pfx_cgroup_show_path+0x10/0x10 [ 1371.512944][T19917] cgroup_show_path+0xb2/0x740 [ 1371.512956][T19917] ? __pfx_cgroup_show_path+0x10/0x10 [ 1371.512967][T19917] kernfs_sop_show_path+0xe9/0x160 [ 1371.512981][T19917] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 1371.512991][T19917] show_path+0x9e/0x100 [ 1371.513006][T19917] show_mountinfo+0x1c6/0x810 [ 1371.513024][T19917] ? __pfx_show_mountinfo+0x10/0x10 [ 1371.513043][T19917] seq_read_iter+0xb18/0x12c0 [ 1371.513067][T19917] vfs_read+0x8bc/0xc60 [ 1371.513087][T19917] ? __pfx___mutex_lock+0x10/0x10 [ 1371.513102][T19917] ? __pfx_vfs_read+0x10/0x10 [ 1371.513127][T19917] ksys_read+0x12a/0x250 [ 1371.513137][T19917] ? __pfx_ksys_read+0x10/0x10 [ 1371.513150][T19917] do_syscall_64+0xcd/0x4c0 [ 1371.513164][T19917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.513177][T19917] RIP: 0033:0x7f3f2898e969 [ 1371.513190][T19917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.513201][T19917] RSP: 002b:00007f3f29727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1371.513217][T19917] RAX: ffffffffffffffda RBX: 00007f3f28bb6080 RCX: 00007f3f2898e969 [ 1371.513224][T19917] RDX: 0000000000002020 RSI: 0000200000004400 RDI: 0000000000000005 [ 1371.513230][T19917] RBP: 00007f3f29727090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.513236][T19917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.513241][T19917] R13: 0000000000000000 R14: 00007f3f28bb6080 R15: 00007ffdf2a73f98 [ 1371.513255][T19917] [ 1372.044367][T19916] Bluetooth: MGMT ver 1.23 [ 1372.068511][T19916] Bluetooth: hci0: service_discovery: too big uuid_count value 65062 [ 1372.515070][T19928] block nbd4: NBD_DISCONNECT [ 1372.546407][ T30] audit: type=1400 audit(1748665893.716:445): avc: denied { write } for pid=19924 comm="syz.4.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1372.548514][T19928] block nbd4: Send disconnect failed -22 [ 1372.706155][T19935] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1373.211336][ T9825] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1373.310979][T19944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1373.451558][ T9825] usb 5-1: Using ep0 maxpacket: 16 [ 1373.481979][ T9825] usb 5-1: config index 0 descriptor too short (expected 8192, got 68) [ 1373.600297][ T9825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.659731][ T9825] usb 5-1: config 0 has no interfaces? [ 1373.963683][ T9825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1373.974753][ T9825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1373.985561][ T9825] usb 5-1: SerialNumber: syz [ 1374.226320][ T9825] usb 5-1: config 0 descriptor?? [ 1374.435854][T19954] FAULT_INJECTION: forcing a failure. [ 1374.435854][T19954] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.449197][T19954] CPU: 0 UID: 0 PID: 19954 Comm: syz.3.4008 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 1374.449221][T19954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1374.449230][T19954] Call Trace: [ 1374.449236][T19954] [ 1374.449242][T19954] dump_stack_lvl+0x16c/0x1f0 [ 1374.449272][T19954] should_fail_ex+0x512/0x640 [ 1374.449295][T19954] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1374.449315][T19954] should_failslab+0xc2/0x120 [ 1374.449335][T19954] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1374.449351][T19954] ? find_held_lock+0x2b/0x80 [ 1374.449383][T19954] ? alloc_empty_file+0x55/0x1e0 [ 1374.449415][T19954] alloc_empty_file+0x55/0x1e0 [ 1374.449437][T19954] path_openat+0xda/0x2cb0 [ 1374.449465][T19954] ? __pfx_path_openat+0x10/0x10 [ 1374.449490][T19954] do_filp_open+0x20b/0x470 [ 1374.449508][T19954] ? __pfx_do_filp_open+0x10/0x10 [ 1374.449543][T19954] ? alloc_fd+0x471/0x7d0 [ 1374.449568][T19954] do_sys_openat2+0x11b/0x1d0 [ 1374.449590][T19954] ? __pfx_do_sys_openat2+0x10/0x10 [ 1374.449611][T19954] ? __fget_files+0x20e/0x3c0 [ 1374.449631][T19954] __x64_sys_openat+0x174/0x210 [ 1374.449650][T19954] ? __pfx___x64_sys_openat+0x10/0x10 [ 1374.449667][T19954] ? ksys_write+0x1ac/0x250 [ 1374.449689][T19954] do_syscall_64+0xcd/0x4c0 [ 1374.449710][T19954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.449729][T19954] RIP: 0033:0x7fb10b38d2d0 [ 1374.449747][T19954] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1374.449764][T19954] RSP: 002b:00007fb10c1a0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1374.449783][T19954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb10b38d2d0 [ 1374.449794][T19954] RDX: 0000000000000000 RSI: 00007fb10c1a0c10 RDI: 00000000ffffff9c [ 1374.449805][T19954] RBP: 00007fb10c1a0c10 R08: 0000000000000000 R09: 00236365632f7665 [ 1374.449815][T19954] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1374.449825][T19954] R13: 0000000000000001 R14: 00007fb10b5b6080 R15: 00007ffd916b63c8 [ 1374.449847][T19954] [ 1375.218845][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1375.374180][T19924] block nbd4: Disconnected due to user request. [ 1375.379588][ T60] tipc: Subscription rejected, illegal request [ 1375.386166][ T9825] usb 5-1: USB disconnect, device number 31 [ 1375.408923][T19924] block nbd4: shutting down sockets [ 1375.521450][T19965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1375.835722][ T30] audit: type=1400 audit(1748665896.986:446): avc: denied { setopt } for pid=19962 comm="syz.1.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1376.205445][ T30] audit: type=1400 audit(1748665897.336:447): avc: denied { read } for pid=19967 comm="syz.1.4014" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1376.333385][ T30] audit: type=1400 audit(1748665897.336:448): avc: denied { open } for pid=19967 comm="syz.1.4014" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1376.434081][T19977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1376.955422][ T30] audit: type=1400 audit(1748665898.136:449): avc: denied { map } for pid=19983 comm="syz.0.4022" path="socket:[70729]" dev="sockfs" ino=70729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1377.143395][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4018'. [ 1377.281886][ T30] audit: type=1400 audit(1748665898.166:450): avc: denied { map } for pid=19978 comm="syz.3.4018" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1377.305828][ T30] audit: type=1400 audit(1748665898.166:451): avc: denied { execute } for pid=19978 comm="syz.3.4018" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1377.558864][ T30] audit: type=1400 audit(1748665898.426:452): avc: denied { read } for pid=19983 comm="syz.0.4022" path="socket:[70729]" dev="sockfs" ino=70729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1378.555537][ T30] audit: type=1400 audit(1748665899.736:453): avc: denied { write } for pid=20005 comm="syz.0.4024" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1379.639460][T20013] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1485.580872][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1485.587899][ C0] rcu: 1-...!: (1 GPs behind) idle=d314/1/0x4000000000000000 softirq=90298/90309 fqs=0 [ 1485.598894][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20025/1:b..l [ 1485.606907][ C0] rcu: (detected by 0, t=10506 jiffies, g=82537, q=75 ncpus=2) [ 1485.614535][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1485.614591][ C1] NMI backtrace for cpu 1 [ 1485.614612][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 1485.614631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1485.614649][ C1] Workqueue: bat_events batadv_nc_worker [ 1485.614678][ C1] RIP: 0010:enqueue_hrtimer+0xab/0x3b0 [ 1485.614705][ C1] Code: 89 e6 e8 c8 45 13 00 45 84 e4 0f 85 38 02 00 00 e8 da 4a 13 00 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 cc 02 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 8d 7c [ 1485.614718][ C1] RSP: 0018:ffffc90000a08e18 EFLAGS: 00000046 [ 1485.614730][ C1] RAX: dffffc0000000000 RBX: ffff8880b8527e40 RCX: ffffffff81a8a30f [ 1485.614738][ C1] RDX: 1ffff110170a4fc8 RSI: ffffffff81a8a0c6 RDI: 0000000000000001 [ 1485.614747][ C1] RBP: ffff88805e35d340 R08: 0000000000000001 R09: 0000000000000000 [ 1485.614755][ C1] R10: 0000000000000001 R11: ffffffff9afe2c60 R12: 0000000000000001 [ 1485.614763][ C1] R13: 0000000000000000 R14: ffff88805e35d340 R15: 0000000000000001 [ 1485.614772][ C1] FS: 0000000000000000(0000) GS:ffff88812486e000(0000) knlGS:0000000000000000 [ 1485.614785][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1485.614794][ C1] CR2: 000000110c391f68 CR3: 000000003445f000 CR4: 00000000003526f0 [ 1485.614802][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1485.614810][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1485.614818][ C1] Call Trace: [ 1485.614824][ C1] [ 1485.614834][ C1] __hrtimer_run_queues+0x8ff/0xad0 [ 1485.614856][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1485.614874][ C1] ? read_tsc+0x9/0x20 [ 1485.614901][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1485.614924][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 1485.614944][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1485.614962][ C1] [ 1485.614966][ C1] [ 1485.614970][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1485.614986][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 1485.615014][ C1] Code: 0f c1 05 a8 ed 32 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 fd ab 32 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 1485.615027][ C1] RSP: 0018:ffffc90000ac7a70 EFLAGS: 00000206 [ 1485.615038][ C1] RAX: 17b0fd8ba3880a00 RBX: ffffffff8e5c4780 RCX: ffffc90000ac7a7c [ 1485.615046][ C1] RDX: 0000000000000002 RSI: ffffffff8dde1904 RDI: ffffffff8c153200 [ 1485.615055][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1485.615062][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8b49a125 [ 1485.615070][ C1] R13: 0000000000000206 R14: ffff88801eefa440 R15: 0000000000000003 [ 1485.615082][ C1] ? batadv_nc_process_nc_paths.part.0+0x215/0x3e0 [ 1485.615102][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1485.615123][ C1] batadv_nc_process_nc_paths.part.0+0x21a/0x3e0 [ 1485.615140][ C1] batadv_nc_worker+0xcd3/0x1030 [ 1485.615152][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1485.615169][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1485.615183][ C1] ? rcu_is_watching+0x12/0xc0 [ 1485.615197][ C1] process_one_work+0x9cc/0x1b70 [ 1485.615222][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1485.615234][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1485.615254][ C1] ? assign_work+0x1a0/0x250 [ 1485.615271][ C1] worker_thread+0x6c8/0xf10 [ 1485.615292][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1485.615309][ C1] kthread+0x3c2/0x780 [ 1485.615327][ C1] ? __pfx_kthread+0x10/0x10 [ 1485.615343][ C1] ? rcu_is_watching+0x12/0xc0 [ 1485.615354][ C1] ? __pfx_kthread+0x10/0x10 [ 1485.615370][ C1] ret_from_fork+0x5d4/0x6f0 [ 1485.615385][ C1] ? __pfx_kthread+0x10/0x10 [ 1485.615400][ C1] ret_from_fork_asm+0x1a/0x30 [ 1485.615422][ C1] [ 1485.615563][ C0] task:syz.2.4027 state:R running task stack:26056 pid:20025 tgid:20016 ppid:15975 task_flags:0x400040 flags:0x00004002 [ 1485.999382][ C0] Call Trace: [ 1486.002653][ C0] [ 1486.005580][ C0] __schedule+0x116a/0x5de0 [ 1486.010081][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 1486.015910][ C0] ? __pfx___schedule+0x10/0x10 [ 1486.020753][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1486.025698][ C0] ? mark_held_locks+0x49/0x80 [ 1486.030458][ C0] preempt_schedule_irq+0x51/0x90 [ 1486.035477][ C0] irqentry_exit+0x36/0x90 [ 1486.039891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1486.045865][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1486.051061][ C0] Code: a6 32 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 d2 0d 0f 0f 0f 82 74 02 00 00 8b 35 ba 3f 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 a6 32 12 0f 85 c7 02 00 00 48 83 c4 [ 1486.070664][ C0] RSP: 0000:ffffc9000b7f6b20 EFLAGS: 00000206 [ 1486.076722][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4780 RCX: 000000009c22ba9f [ 1486.084684][ C0] RDX: 0000000000000000 RSI: ffffffff8dde1904 RDI: ffffffff8c153200 [ 1486.092645][ C0] RBP: 0000000000000002 R08: 437f0b3048eb3a99 R09: 0000000000000000 [ 1486.100611][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1486.108590][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1486.116569][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1486.121770][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1486.127920][ C0] unwind_next_frame+0xd1/0x20a0 [ 1486.132853][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1486.137965][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1486.144054][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1486.150238][ C0] arch_stack_walk+0x94/0x100 [ 1486.154948][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1486.161021][ C0] stack_trace_save+0x8e/0xc0 [ 1486.165705][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1486.171083][ C0] ? __lock_acquire+0x622/0x1c90 [ 1486.176022][ C0] save_stack+0x160/0x1f0 [ 1486.180348][ C0] ? __pfx_save_stack+0x10/0x10 [ 1486.185193][ C0] ? post_alloc_hook+0x1c0/0x230 [ 1486.190134][ C0] ? get_page_from_freelist+0x135c/0x3950 [ 1486.195849][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1486.201915][ C0] ? __lock_acquire+0x622/0x1c90 [ 1486.206853][ C0] __set_page_owner+0x91/0x550 [ 1486.211618][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1486.216986][ C0] ? bad_range+0x261/0x4c0 [ 1486.221399][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1486.226598][ C0] post_alloc_hook+0x1c0/0x230 [ 1486.231369][ C0] get_page_from_freelist+0x135c/0x3950 [ 1486.236919][ C0] ? __pfx___might_resched+0x10/0x10 [ 1486.242199][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1486.248085][ C0] ? should_fail_alloc_page+0xee/0x130 [ 1486.253539][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 1486.258821][ C0] ? rcu_is_watching+0x12/0xc0 [ 1486.263580][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1486.269474][ C0] ? flush_tlb_func+0x44d/0x710 [ 1486.274319][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1486.280643][ C0] ? mark_held_locks+0x49/0x80 [ 1486.285420][ C0] ? __lock_acquire+0x622/0x1c90 [ 1486.290356][ C0] ? __lock_acquire+0x622/0x1c90 [ 1486.295288][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1486.301186][ C0] ? policy_nodemask+0xea/0x4e0 [ 1486.306033][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1486.310879][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1486.316252][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1486.321622][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 1486.326906][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1486.332818][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1486.337597][ C0] do_wp_page+0x1130/0x4f80 [ 1486.342112][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1486.346970][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1486.352364][ C0] __handle_mm_fault+0x2226/0x5450 [ 1486.357512][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1486.363002][ C0] ? find_vma+0xbf/0x140 [ 1486.367256][ C0] ? __pfx_find_vma+0x10/0x10 [ 1486.371942][ C0] handle_mm_fault+0x3fe/0xad0 [ 1486.376723][ C0] do_user_addr_fault+0x7a6/0x1370 [ 1486.381844][ C0] ? rcu_is_watching+0x12/0xc0 [ 1486.386609][ C0] exc_page_fault+0x5c/0xb0 [ 1486.391112][ C0] asm_exc_page_fault+0x26/0x30 [ 1486.395959][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1486.401770][ C0] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1486.421374][ C0] RSP: 0000:ffffc9000b7f78f8 EFLAGS: 00050206 [ 1486.427437][ C0] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000078 [ 1486.435400][ C0] RDX: 0000000000000000 RSI: ffff88804e45cf88 RDI: 00002000003cb000 [ 1486.443361][ C0] RBP: 0000000000001000 R08: 0000000000000000 R09: ffffed1009c8b9ff [ 1486.451326][ C0] R10: ffff88804e45cfff R11: 0000000000000000 R12: 00000000003c9ff8 [ 1486.459378][ C0] R13: ffff888028a9b000 R14: ffff88804e45c000 R15: 00002000003ca078 [ 1486.467360][ C0] _copy_to_iter+0x4eb/0x16f0 [ 1486.472052][ C0] ? __pfx__copy_to_iter+0x10/0x10 [ 1486.477160][ C0] ? shmem_get_folio_gfp+0x311/0x1600 [ 1486.482524][ C0] ? const_folio_flags+0x5b/0x100 [ 1486.487546][ C0] ? folio_mark_accessed+0xc1/0xc00 [ 1486.492749][ C0] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1486.498384][ C0] copy_page_to_iter+0x12a/0x1e0 [ 1486.503324][ C0] shmem_file_read_iter+0x467/0xac0 [ 1486.508529][ C0] ? __pfx_shmem_file_read_iter+0x10/0x10 [ 1486.514245][ C0] ? do_iter_readv_writev+0x163/0x820 [ 1486.519622][ C0] do_iter_readv_writev+0x637/0x820 [ 1486.524827][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1486.530556][ C0] ? avc_policy_seqno+0x9/0x20 [ 1486.535331][ C0] ? rw_verify_area+0xcf/0x680 [ 1486.540094][ C0] vfs_readv+0x4cb/0x8b0 [ 1486.544339][ C0] ? find_held_lock+0x2b/0x80 [ 1486.549024][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 1486.553789][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1486.559594][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 1486.566194][ C0] ? __fget_files+0x20e/0x3c0 [ 1486.570878][ C0] ? do_preadv+0x1a6/0x270 [ 1486.575293][ C0] do_preadv+0x1a6/0x270 [ 1486.579539][ C0] ? __pfx_do_preadv+0x10/0x10 [ 1486.584306][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1486.590298][ C0] do_syscall_64+0xcd/0x4c0 [ 1486.594799][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.600685][ C0] RIP: 0033:0x7f3f2898e969 [ 1486.605094][ C0] RSP: 002b:00007f3f267f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1486.613510][ C0] RAX: ffffffffffffffda RBX: 00007f3f28bb6160 RCX: 00007f3f2898e969 [ 1486.621475][ C0] RDX: 0000000000000018 RSI: 00002000000015c0 RDI: 0000000000000005 [ 1486.629450][ C0] RBP: 00007f3f28a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1486.637410][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1486.645371][ C0] R13: 0000000000000001 R14: 00007f3f28bb6160 R15: 00007ffdf2a73f98 [ 1486.653347][ C0] [ 1486.656363][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g82537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1486.667551][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1486.677508][ C0] rcu: RCU grace-period kthread stack dump: [ 1486.683385][ C0] task:rcu_preempt state:R running task stack:28376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1486.696900][ C0] Call Trace: [ 1486.700169][ C0] [ 1486.703097][ C0] __schedule+0x116a/0x5de0 [ 1486.707606][ C0] ? __lock_acquire+0x622/0x1c90 [ 1486.712547][ C0] ? __pfx___schedule+0x10/0x10 [ 1486.717395][ C0] ? find_held_lock+0x2b/0x80 [ 1486.722074][ C0] ? schedule+0x2d7/0x3a0 [ 1486.726400][ C0] schedule+0xe7/0x3a0 [ 1486.730463][ C0] schedule_timeout+0x123/0x290 [ 1486.735314][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1486.740688][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1486.745969][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1486.751767][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1486.757226][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1486.761990][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1486.767273][ C0] ? rcu_gp_init+0xc97/0x15c0 [ 1486.771949][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1486.776804][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1486.782605][ C0] rcu_gp_kthread+0x270/0x380 [ 1486.787279][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1486.792474][ C0] ? rcu_is_watching+0x12/0xc0 [ 1486.797232][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1486.802424][ C0] ? __kthread_parkme+0x19e/0x250 [ 1486.807444][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1486.812640][ C0] kthread+0x3c2/0x780 [ 1486.816707][ C0] ? __pfx_kthread+0x10/0x10 [ 1486.821301][ C0] ? rcu_is_watching+0x12/0xc0 [ 1486.826056][ C0] ? __pfx_kthread+0x10/0x10 [ 1486.830647][ C0] ret_from_fork+0x5d4/0x6f0 [ 1486.835233][ C0] ? __pfx_kthread+0x10/0x10 [ 1486.839822][ C0] ret_from_fork_asm+0x1a/0x30 [ 1486.844606][ C0] [ 1486.847615][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1486.853939][ C0] CPU: 0 UID: 0 PID: 16426 Comm: kworker/u8:11 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 1486.865904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1486.875952][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1486.882454][ C0] RIP: 0010:smp_call_function_many_cond+0xd0b/0x1490 [ 1486.889134][ C0] Code: e8 8a 12 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 27 17 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 1486.908734][ C0] RSP: 0018:ffffc9000ff378a0 EFLAGS: 00000293 [ 1486.914802][ C0] RAX: 0000000000000000 RBX: ffff8880b85416a0 RCX: ffffffff81afd49d [ 1486.922764][ C0] RDX: ffff888078242440 RSI: ffffffff81afd479 RDI: 0000000000000005 [ 1486.930725][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1486.938685][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1486.946647][ C0] R13: 0000000000000003 R14: ffffed10170a82d5 R15: ffff8880b843cfc0 [ 1486.954610][ C0] FS: 0000000000000000(0000) GS:ffff88812476e000(0000) knlGS:0000000000000000 [ 1486.963534][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1486.970111][ C0] CR2: 0000200000d29000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1486.978076][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1486.986037][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1486.994001][ C0] Call Trace: [ 1486.997270][ C0] [ 1487.000192][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1487.005225][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1487.011562][ C0] ? __pfx___text_poke+0x10/0x10 [ 1487.016500][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1487.021523][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1487.026630][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 1487.033127][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1487.038851][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1487.043883][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1487.050125][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1487.056366][ C0] ? find_held_lock+0x2b/0x80 [ 1487.061048][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1487.067031][ C0] jump_label_update+0x376/0x550 [ 1487.071972][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 1487.077866][ C0] static_key_enable+0x1a/0x20 [ 1487.082638][ C0] toggle_allocation_gate+0xfa/0x280 [ 1487.087917][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1487.093806][ C0] ? rcu_is_watching+0x12/0xc0 [ 1487.098563][ C0] process_one_work+0x9cc/0x1b70 [ 1487.103535][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1487.109704][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1487.115086][ C0] ? assign_work+0x1a0/0x250 [ 1487.119678][ C0] worker_thread+0x6c8/0xf10 [ 1487.124279][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1487.129391][ C0] kthread+0x3c2/0x780 [ 1487.133465][ C0] ? __pfx_kthread+0x10/0x10 [ 1487.138063][ C0] ? rcu_is_watching+0x12/0xc0 [ 1487.142823][ C0] ? __pfx_kthread+0x10/0x10 [ 1487.147418][ C0] ret_from_fork+0x5d4/0x6f0 [ 1487.152017][ C0] ? __pfx_kthread+0x10/0x10 [ 1487.156617][ C0] ret_from_fork_asm+0x1a/0x30 [ 1487.161386][ C0]