last executing test programs:

3.249801787s ago: executing program 3 (id=945):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "0d767b344a4107111e7e642d07ae014c02021bf9ea748c446391894699ec720ff9827531e9b3340038d7a0916c5984381baee6cd3a24fa9327dfcad6fa7c5135531ac295b264596f6d3e857f152d0b7083fb07acdfabd1324a0014a096078ac9c249f66d2af98841b65c33dc69677149a24390411bda91281cd201379858f2fcca40d86f69ed5fc1d5674c90eccc7818ecfcb9e0418db476b3beb17e7a33795eaaf955a98da4290b20627cd3c3edb40de32380fc7781ce8bc43a77a459d826255142030193a40d8f3b2ce6909a57c5bea695b7699c7a393ef756b8ce29f84499994a1138f4be3eea8583115628cedb67fee1eada59655f2b9d67580e94534bc7"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)
io_setup(0xffff, &(0x7f00000001c0)=<r8=>0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r9=>r5}, './file0\x00'})
io_cancel(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000002c0)="398e192e6d162edb84643e26bedc9258a299d41cde9564859b0d7f35ebdd1eb93cb0ea7e4dfb2ea2ad2579ebd93f84ffac67c0a1841a79ebae32df9e801c082bf33856416bfb45c572491586d9932fda2d2649d10596f61738a2f9e9eaed705c39af0ac93e951d0b378b2cc706b40174e8", 0x71, 0xa, 0x0, 0x3, r9}, &(0x7f0000000380))

2.971690927s ago: executing program 3 (id=950):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x20002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r2, 0xffc4c5a98a8f3915, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8010)

2.971134792s ago: executing program 3 (id=951):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.871530029s ago: executing program 3 (id=952):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17"], 0x188}}], 0x1, 0x810)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a8", 0x31}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x88, 0x34, 0x200, 0x70bd28, 0x25dfdbff, {0x9}, [@typed={0x8, 0x82, 0x0, 0x0, @u32=0x2}, @generic="e2d0b31ece682987fda910c7b92529dce9c9c69099bf0e27ec8d0153854d3bb58627a214ab0dbabbe3b8d96d3422fe6423b6b6652c7dda3ac870cfb9306763ce7a58f5d8140d6357dbda9986d93d4e0c75a0b6e619159bf4a1365cdbd0f7cee9d50ca8c2", @typed={0x8, 0x81, 0x0, 0x0, @fd=r2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x2080)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x84, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4de8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24044c00}, 0x4)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.869810942s ago: executing program 3 (id=954):
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000008001000000000000000000000002000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0000000, 0x0, 0x0, 0x0, 0x367b}, [@alu={0x7, 0x1, 0x2, 0xb, 0x0, 0x20, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000280)='GPL\x00', 0x6, 0xb8, &(0x7f0000000380)=""/184, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0xf, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x3, 0x6, 0x6}, {0x4, 0x3, 0x8, 0xc}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x3, 0xe, 0x6}, {0x0, 0x5, 0xe, 0x4}, {0x3, 0x1, 0xd, 0x1}, {0x1, 0x4, 0x4, 0xb}, {0x0, 0x5, 0x3, 0xa}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r1, 0x0, 0x9b, 0x0, &(0x7f0000000640)="7e0969d99c043b6bcaf3db0ba3131fb869b5bfd1587562cfcf56c3f303dcfc92122fa4ea76af3527b5f4d94b2d43e276a9749289e89188b355ce7d99f8c7082f69a2ef4f1510f47e52c9cad130f30a91ca6513ce679520669435ef0f2cfdfeb5a8f5d97d473b69e044e8d1f950d1a770816bd3a0a07e442c84e6c6e127392f9a76ae1b239f741b3cde786e8993d1733f37b7229dbd573c1fd602c6", 0x0, 0xffffffff, 0x0, 0xd0, 0x0, &(0x7f0000000700)="12a836ceb0ff672519d103581c002b46f573788d77234862d3ecbcfa7afe5871f91623d0e5f24ad56b3ec8caf9042910aec7547a6278b81837d34404af2240ecf5b81e88d880d5fb3324da4bcc5156eefaa9468ee06b2167e9803be1130e999f76c56dc524a61a301cb592e94e4858dd1ceb5a2b04c04cabccbc9c2768c8a7bed31f0dbe70c2ee05b379182b8d5d4479f7e475ee584b93b3b8360a8540d7d374935d92a29064f19b8b658840223d0209fa646c632b82c8d6e8e43660bc1cd867e7b56a1ae67f2aac2d6885b31f82e511", 0x0, 0x2, 0x0, 0x100}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r3, 0x14, 0x0, @void}, 0x10)
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000008001000000000000000000000002000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0000000, 0x0, 0x0, 0x0, 0x367b}, [@alu={0x7, 0x1, 0x2, 0xb, 0x0, 0x20, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000280)='GPL\x00', 0x6, 0xb8, &(0x7f0000000380)=""/184, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0xf, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x3, 0x6, 0x6}, {0x4, 0x3, 0x8, 0xc}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x3, 0xe, 0x6}, {0x0, 0x5, 0xe, 0x4}, {0x3, 0x1, 0xd, 0x1}, {0x1, 0x4, 0x4, 0xb}, {0x0, 0x5, 0x3, 0xa}], 0x10, 0x9}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r1, 0x0, 0x9b, 0x0, &(0x7f0000000640)="7e0969d99c043b6bcaf3db0ba3131fb869b5bfd1587562cfcf56c3f303dcfc92122fa4ea76af3527b5f4d94b2d43e276a9749289e89188b355ce7d99f8c7082f69a2ef4f1510f47e52c9cad130f30a91ca6513ce679520669435ef0f2cfdfeb5a8f5d97d473b69e044e8d1f950d1a770816bd3a0a07e442c84e6c6e127392f9a76ae1b239f741b3cde786e8993d1733f37b7229dbd573c1fd602c6", 0x0, 0xffffffff, 0x0, 0xd0, 0x0, &(0x7f0000000700)="12a836ceb0ff672519d103581c002b46f573788d77234862d3ecbcfa7afe5871f91623d0e5f24ad56b3ec8caf9042910aec7547a6278b81837d34404af2240ecf5b81e88d880d5fb3324da4bcc5156eefaa9468ee06b2167e9803be1130e999f76c56dc524a61a301cb592e94e4858dd1ceb5a2b04c04cabccbc9c2768c8a7bed31f0dbe70c2ee05b379182b8d5d4479f7e475ee584b93b3b8360a8540d7d374935d92a29064f19b8b658840223d0209fa646c632b82c8d6e8e43660bc1cd867e7b56a1ae67f2aac2d6885b31f82e511", 0x0, 0x2, 0x0, 0x100}, 0x50) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r3, 0x14, 0x0, @void}, 0x10) (async)

2.799141686s ago: executing program 3 (id=955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x7fffffffffffffff}, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

860.849306ms ago: executing program 0 (id=999):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x930e3728aa4e0fdb, 0x108)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000040)={0x1, 0xf2d, 0xffffff14, 0x3, 0xd1, 0x6, 0x0, 0x2, 0x9, 0x71b, 0x7}) (async)
openat$cgroup_pressure(r0, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={<r1=>0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000180)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000001c0)={r1, r2, 0x8000000000000001, 0xffff, 0x9})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'tunl0\x00', <r3=>0x0, 0x20, 0x80, 0x7, 0xb033, {{0x1c, 0x4, 0x2, 0x6, 0x70, 0x64, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x2f, 0x3, 0xd, [{@multicast1, 0xffff}, {@multicast1, 0x17}, {@remote, 0x6}, {@multicast1, 0x3}, {@multicast1, 0xdc}, {@broadcast, 0x4}]}, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x8, [0x8, 0x403165ea, 0x200, 0x0, 0x0, 0x5, 0x4]}, @timestamp={0x44, 0x8, 0x8b, 0x0, 0x3, [0x4]}]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0xfff, 0x8, 0xea, 0x3001, r0, 0x5, '\x00', r3, r0, 0x1, 0x1, 0x1}, 0x50) (async)
r4 = msgget$private(0x0, 0xda)
msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000380)=""/202)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000480)={0x3}) (async)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000004c0)) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000500)={0xe60, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
r5 = semget$private(0x0, 0x3, 0x440)
semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000015e40)=""/133) (async)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async)
clock_gettime(0x0, &(0x7f0000015f00)={<r6=>0x0, <r7=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000015f40)={{r6, r7+60000000}}, &(0x7f0000015f80)) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000015fc0)=0x8, 0x8) (async)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000016100)={0x20, 0x3, &(0x7f0000016000)="330f9ab5d8eab08958ed196b189ff95e682191c48abed6b788dd799ae83d31b341b436c1c51a308dc74808b930847607056516d53419c6dbc937aeb3be2440a45a2c571117a4b4fcfa0893a8969f83b17de9f6f026783a9087bc4231b674f37f872c40a07f7900aaa2766129338c3ead8cf1939dd53bc483d7d7597e5f152b8cbe3fb84058a9ff145bf3a52db49e61a6b981582f385b88dc6a85e3ef9218a4609881a2fc7207b164523d2916fa43a3c9999e75a564897488aaeffa7c8efcf948463b591c", 0x5, 0x5}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000016180)={&(0x7f0000016140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0], 0x8}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000161c0)={0x0, 0x0, <r9=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000016300)={&(0x7f0000016200)=[<r10=>0x0, 0x0], &(0x7f0000016240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000016280)=[0x0, 0x0, 0x0], &(0x7f00000162c0)=[0x0], 0x2, 0x5, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000016380)={r8, r9, r10, 0x0, 0x0, 0x5, &(0x7f0000016340)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000163c0)={0x2c, 0x2}) (async)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$NILFS_IOCTL_GET_SUINFO(r11, 0x80186e84, &(0x7f0000016440)={&(0x7f0000016400)=[{0xd2, 0x100, 0x2}, {0x1, 0x8, 0x1}, {0x8, 0xc, 0x2}, {0x3, 0x3, 0x2}], 0x4, 0x10, 0x1, 0x5})
timerfd_settime(r0, 0x2, &(0x7f0000016480)={{0x77359400}, {0x77359400}}, &(0x7f00000164c0)) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000016500)={r3, 0x1, 0x6, @broadcast}, 0x10) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000016580)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})

860.341296ms ago: executing program 0 (id=1000):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180))
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) (async)
read$FUSE(r2, 0x0, 0x0) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000040)=0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xe, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x5], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x1, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', <r8=>r6, 0x8, 0x7c0, 0x9e72, 0x6, {{0xc, 0x4, 0x3, 0x39, 0x30, 0x65, 0x0, 0x42, 0x29, 0x0, @local, @loopback, {[@ssrr={0x89, 0xb, 0xd7, [@broadcast, @rand_addr=0x64010102]}, @timestamp={0x44, 0x10, 0xa0, 0x0, 0x5, [0x0, 0x1, 0x7]}]}}}}}) (async)
keyctl$clear(0x3, 0xfffffffffffffffc) (async)
r9 = add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8003, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7ffe, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x45, 0x9, 0x9, 0x9, 0xf2, 0x200, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x64, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0x1002, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x1, 0xbb, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc5, 0xd, 0x4, 0xfffffdf0, 0x1, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x0, 0x101, 0x400, 0x2, 0x6, 0x9, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0x1, 0x7, 0x80000000, 0x8, 0x8000, 0x4, 0x37, 0x4, 0x80000000, 0x40000002, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x4, 0x4, 0x3, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765e, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x6, 0x10000089, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async, rerun: 32)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async, rerun: 32)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
r11 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, 0x0, 0x0) (async, rerun: 32)
keyctl$revoke(0x3, r9) (rerun: 32)

771.366282ms ago: executing program 0 (id=1001):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000835caefe21a0001"], 0x1c}}, 0xea5bc50b6199d77e) (rerun: 32)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0])
prctl$PR_GET_IO_FLUSHER(0x3a)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x2, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

717.817908ms ago: executing program 0 (id=1005):
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17"], 0x188}}], 0x1, 0x810)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a8", 0x31}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x80, 0x34, 0x200, 0x70bd28, 0x25dfdbff, {0x9}, [@generic="e2d0b31ece682987fda910c7b92529dce9c9c69099bf0e27ec8d0153854d3bb58627a214ab0dbabbe3b8d96d3422fe6423b6b6652c7dda3ac870cfb9306763ce7a58f5d8140d6357dbda9986d93d4e0c75a0b6e619159bf4a1365cdbd0f7cee9d50ca8c2", @typed={0x8, 0x81, 0x0, 0x0, @fd=r1}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x2080)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

650.22937ms ago: executing program 0 (id=1007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000)
ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x40)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

591.147045ms ago: executing program 0 (id=1008):
openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240))
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r2=>0x0)
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r2, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

330.103224ms ago: executing program 2 (id=1014):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x646e, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x8001, 0x6})
syz_emit_ethernet(0x82, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x4, "703b744dc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601"}]}}}}}}, 0x0) (async)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4c, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x4, "703b744dc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601"}]}}}}}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x3})
ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc018620b, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
close_range(r0, 0xffffffffffffffff, 0x0)

260.559481ms ago: executing program 1 (id=1016):
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17"], 0x188}}], 0x1, 0x810)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a8", 0x31}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x80, 0x34, 0x200, 0x70bd28, 0x25dfdbff, {0x9}, [@generic="e2d0b31ece682987fda910c7b92529dce9c9c69099bf0e27ec8d0153854d3bb58627a214ab0dbabbe3b8d96d3422fe6423b6b6652c7dda3ac870cfb9306763ce7a58f5d8140d6357dbda9986d93d4e0c75a0b6e619159bf4a1365cdbd0f7cee9d50ca8c2", @typed={0x8, 0x81, 0x0, 0x0, @fd=r1}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x2080)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

258.224018ms ago: executing program 2 (id=1017):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
fcntl$setflags(r0, 0x2, 0x0)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000040)=0x7f)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000080)=0x7)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x8d, [0x1, 0xfffffffe], 0x5}, 0x10)
fsetxattr$security_evm(r1, &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "379f28ebd1eca4bcfe7644413daa9db0"}, 0x11, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000180)={0x6, 'xfrm0\x00', {0x80000001}, 0x8})
write$bt_hci(r1, &(0x7f00000001c0)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x5, 0x8}}}, 0x6)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000240)=0xdc)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={<r4=>0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
fcntl$lock(r3, 0x7, &(0x7f0000000340)={0x1, 0x3, 0xffffffffffffffff, 0x1, r4})
r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f00000003c0)=r4)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000400)=0x1)
ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000440)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0xdf9, 0x0, 0x1, 0x80000000}, {0xfff9, 0xa, 0x2, 0x6}, {0x8001, 0x7, 0xd9, 0x4}, {0x6, 0x7, 0x6, 0x401}, {0x1ff, 0x5, 0x91, 0x3}]})
ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000500)=0x400)
ioctl$TUNSETOWNER(r1, 0x400454cc, r5)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000540)={0x0, 0x6, 0x7, 0x6, 0x2, 0x4, 0x3})
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000580)={0x0, r6})
ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f00000005c0)=""/205)
write$uinput_user_dev(r6, &(0x7f00000006c0)={'syz0\x00', {0x9cb, 0xd, 0x7, 0x8}, 0x3c, [0x8, 0x6, 0xfffffff9, 0x4, 0x8, 0x2, 0x200, 0x4, 0x0, 0xffffffff, 0x2, 0x30000000, 0xfffffff7, 0xa03, 0x3, 0x2, 0x423, 0x28, 0x4, 0x7ff, 0x5, 0x101, 0x4, 0x3, 0x50d1, 0x8, 0x2, 0x6, 0x7, 0x26b, 0x4, 0x0, 0x9, 0x0, 0xd, 0x7, 0x3, 0x8, 0x7ff, 0x1, 0x2, 0x7ff, 0x4bb6e874, 0x0, 0x6, 0x7b86, 0x3ff, 0x5, 0x7, 0x4, 0x80000000, 0x1, 0x6, 0x6, 0x7, 0x7, 0x8, 0xffffffff, 0x6, 0x1f5f, 0x4, 0x3, 0x42, 0x100], [0xfba2, 0x9, 0x200, 0x7, 0xfffffff7, 0x3ff, 0xbab, 0x0, 0x3, 0x400, 0x10001, 0x6, 0x0, 0x400, 0x7fffffff, 0x7f, 0x100, 0xdae, 0x80000001, 0x0, 0x80000000, 0xb07f, 0x1, 0x9, 0x6d, 0x80000000, 0xfffffe01, 0x7f, 0x3, 0x7, 0x1, 0x23d, 0x1e, 0x2, 0x7, 0x2, 0x3, 0xc, 0x0, 0x8, 0x4, 0x7ff, 0x7, 0x20, 0x6, 0x7, 0x7, 0x6, 0xdfe, 0x2, 0x8, 0x10, 0x0, 0x7, 0x5, 0x7, 0xa20d, 0xff, 0x80, 0xf, 0x0, 0x0, 0x7], [0x6, 0x7, 0x20, 0x767, 0xfffffff3, 0x8, 0x4, 0xeac, 0x7fffffff, 0x5, 0x2, 0x6, 0x2, 0x9, 0x45ac, 0xe, 0x2, 0x56, 0x9, 0x10, 0x5, 0x2, 0x2, 0xd2, 0x10001, 0x101, 0x802, 0x5, 0x7, 0xe, 0x8, 0xff, 0x6, 0xb, 0x2b, 0x6, 0x8, 0x4, 0x990c, 0x7, 0x9, 0xfa26, 0x3, 0x5, 0x6, 0x18000000, 0xd3, 0xfffff579, 0x10, 0x2, 0x3, 0xfffffffe, 0x6, 0x4, 0x7, 0x1, 0x1, 0x400, 0x10, 0x4, 0x890, 0x10001, 0x7, 0xffff7494], [0x4, 0x8, 0x3b, 0xfffffff8, 0x3, 0x5, 0xfca3, 0xb0, 0xf6b0, 0x9, 0x200, 0x8, 0x100, 0x5, 0x7, 0xffff, 0x9, 0x16, 0x8, 0xf, 0x6, 0x7, 0x6, 0x7, 0x9, 0x61b, 0x0, 0x7, 0x7, 0x2, 0x6, 0x7, 0xfffffff9, 0x0, 0x7, 0x8, 0x0, 0x10001, 0x1, 0x4, 0x54db1db1, 0xffffffff, 0x8, 0x1, 0xb0000000, 0x6, 0x10000, 0x80000000, 0x951e7220, 0x0, 0x5, 0x401, 0x80000001, 0x8, 0x3, 0xfffeffff, 0x5ef, 0xcaf, 0x8000, 0x81, 0xa9, 0x5, 0x3, 0x361ee7c2]}, 0x45c)
sched_setscheduler(r4, 0x5, &(0x7f0000000b40))
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000e00)={r6, &(0x7f0000000c00)="2066446fd49735c7a568a2e79bd67b12d7e9f4adbc2a54a4dc076356f3d325062c9a2fb953fc6e923c23036b1396cdbabf0c5e3c223bc986b00b5e8654cfd5d29de8599c1b143c7490185fffa0c78c44a16ed4f3d2e708db541c22b68b49fb6841f419b8bdf5b376ea7be964eb767c0543ba4ce299afcb0f07b0e171c570d65bc5db251bfda7681d2669e8d65a2d758629ddfdf2a19b686baeb721ad0c557e0eab165860d3ab6e194fbd2c00bf4d76b9a21831b6137ee677bc4d7aaf9b148f1e7631cb", &(0x7f0000000d00)=""/235, 0x4}, 0x20)
ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000e40)=[r0, r2, r3, r1, r0, r2], 0x6)

257.944298ms ago: executing program 1 (id=1018):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=0x60, 0x80400)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@loopback, <r1=>0x0}, &(0x7f0000000380)=0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}}, 0x24000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
recvfrom(r0, &(0x7f00000002c0)=""/100, 0x64, 0x2000, &(0x7f00000003c0)=@ll={0x11, 0x19, r1, 0x1, 0xd, 0x6, @multicast}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f0000002cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)

191.025981ms ago: executing program 2 (id=1019):
r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x102, 0x18, 0x22}, 0x18)
fcntl$setown(r0, 0x8, 0x0)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r0, 0xaaf298bdce73fb0b, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x4, 0x0, &(0x7f0000000080)=[0x1ff, 0x7, 0xa2e1, 0x8], 0x2}}, 0x30)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x5)
syz_open_dev$usbfs(&(0x7f0000000140), 0x18f, 0x101000) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x18f, 0x101000)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000180)={0x3, 0x2, "f6ae4f1b905ce0a4790334baf3bdf2a63e36c4d67c215e902ba83bcf4e02fffdd847402b833bd34d68eff252ffdc4a62b6bf1aa29b8695ac7b6322d15d62f691d754d68a337e85ff87c873881ce9f833e0c0eb8ce4ef66289a070639ffb66fe23583ea188cdd0655c13b1c61bb945ed90145e9f8df32ea609d359c979d54073914bb3cc681611de607ca306068e6ffa53fa11ec443198da7b755df2d0f7c3d88af38c639d67884522baa6464c82a57e190fd13c415d9f652eba83d96fb95daa8bcfa6746c689ec1cf7bd7bde1f4c10157bac3286a66154d17e0cdb3076e7a0267cda65c059b98b9886e744e27509681d78577963bfffde244bab84dea4199b72"}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000180)={0x3, 0x2, "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"})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x400800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r2, {0x1}}, './file0\x00'})
r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x4)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000340))
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) (async)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000003c0)=0x8000000)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000440)={0x8, r6})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x4, 0x2, {{0x3b, 0x4, 0x0, 0x19, 0xec, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x93, 0x1, 0x8, [{@rand_addr=0x64010101, 0x4}, {@loopback, 0x200}]}, @lsrr={0x83, 0xb, 0xf1, [@broadcast, @multicast2]}, @lsrr={0x83, 0x1b, 0xca, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @cipso={0x86, 0x30, 0x0, [{0x5, 0x6, "deeef4ed"}, {0x7, 0x8, "dd380db08192"}, {0x7, 0xf, "06f2d618fe8a2da24875f42ec4"}, {0x1, 0xd, "6ba36cc36d426480c431fb"}]}, @ssrr={0x89, 0x17, 0xcc, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x54, 0x9d, 0x3, 0x5, [{@empty, 0x7fff}, {@broadcast, 0x7}, {@multicast2, 0x4d}, {@loopback, 0x5}, {@private=0xa010101, 0xb008}, {@empty, 0x9}, {@broadcast}, {@private=0xa010102, 0x8}, {@local, 0x2}, {@remote, 0x8}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', <r7=>0x0, 0x700, 0x7, 0x4, 0x2, {{0x3b, 0x4, 0x0, 0x19, 0xec, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x93, 0x1, 0x8, [{@rand_addr=0x64010101, 0x4}, {@loopback, 0x200}]}, @lsrr={0x83, 0xb, 0xf1, [@broadcast, @multicast2]}, @lsrr={0x83, 0x1b, 0xca, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @cipso={0x86, 0x30, 0x0, [{0x5, 0x6, "deeef4ed"}, {0x7, 0x8, "dd380db08192"}, {0x7, 0xf, "06f2d618fe8a2da24875f42ec4"}, {0x1, 0xd, "6ba36cc36d426480c431fb"}]}, @ssrr={0x89, 0x17, 0xcc, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x54, 0x9d, 0x3, 0x5, [{@empty, 0x7fff}, {@broadcast, 0x7}, {@multicast2, 0x4d}, {@loopback, 0x5}, {@private=0xa010101, 0xb008}, {@empty, 0x9}, {@broadcast}, {@private=0xa010102, 0x8}, {@local, 0x2}, {@remote, 0x8}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0x7, 0xe2, &(0x7f0000000940)=""/226, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r4, r0, r4], 0x0, 0x10, 0x5}, 0x94) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0x7, 0xe2, &(0x7f0000000940)=""/226, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r4, r0, r4], 0x0, 0x10, 0x5}, 0x94)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x4, '\x00', 0x0, r4, 0x1, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r3, <r10=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0xd, 0xb, 0x8, 0xfffffffffffffff8, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0xfffffffd, 0xee, &(0x7f0000000540)=""/238, 0x41100, 0x20, '\x00', r7, @fallback=0xa, r3, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xb, 0x0, 0x7}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000c80)=[r9, r0, r4, r3, r0, r3, r4, r10], 0x0, 0x10, 0x5}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0xd, 0xb, 0x8, 0xfffffffffffffff8, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0xfffffffd, 0xee, &(0x7f0000000540)=""/238, 0x41100, 0x20, '\x00', r7, @fallback=0xa, r3, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xb, 0x0, 0x7}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000c80)=[r9, r0, r4, r3, r0, r3, r4, r10], 0x0, 0x10, 0x5}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000d80)={0x2, 0x2, 'client1\x00', 0x80000003, "f3d6dfb24fde0a5e", "9e333d6bc380d09791c51f46e748f6a97d07ee1fc965d551b586cbee2c11297a", 0x5e, 0x2}) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000d80)={0x2, 0x2, 'client1\x00', 0x80000003, "f3d6dfb24fde0a5e", "9e333d6bc380d09791c51f46e748f6a97d07ee1fc965d551b586cbee2c11297a", 0x5e, 0x2})
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000e40), 0x6000, 0x0)
setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000e80)={0x7, [0xb, 0xffff]}, 0x10) (async)
setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000e80)={0x7, [0xb, 0xffff]}, 0x10)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000ec0)={0x3, 0x200})
getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000f80)={0x3}, 0x1)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000fc0)={{0x0, 0xfffffffffffffff7, 0x64a, 0x7, 0x1, 0x7fff, 0x6e84be48, 0x3, 0x4, 0x4, 0x34, 0xfffffffffffffffb, 0xc10, 0x8000000000000000, 0x10001}})
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x30, 0x140e, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)=@getroute={0x14, 0x1a, 0x20, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20040800)
ioctl$NILFS_IOCTL_GET_CPSTAT(r10, 0x80186e83, &(0x7f00000021c0))
mount$overlay(0x0, &(0x7f0000002200)='./file1\x00', &(0x7f0000002240), 0x54000, &(0x7f00000023c0)={[{@redirect_dir_follow}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_gt}]}) (async)
mount$overlay(0x0, &(0x7f0000002200)='./file1\x00', &(0x7f0000002240), 0x54000, &(0x7f00000023c0)={[{@redirect_dir_follow}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_gt}]})

190.776181ms ago: executing program 1 (id=1020):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xa4, 0x0, &(0x7f0000000140)="b907ef19049e0ff0888e2319ff312404e6b5ce4a91c3e9b5be4f8c50ad02dbb7fb3fcc0baf4b435962ce50aca3ce52885d2b9bf0bbc2b86741693ab48e33a5b2217bdbeee8edd2d25fed9be6aa643ad4853800497234a33ddac81a443bceba10a84bc35d98a9734884ffd19c1a4ad41124ee4da0b8ec5bb2e4f914bfdebb624698d98ecba8bbee4f2d50e490e0112bcbb7a60aae776ccd85070155ee080c52c46611f8e1", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x1f, 0x1, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40) (async)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map=r2, r0, 0x2e, 0x18, r0, @void, @value=r0, @void, @void, r1}, 0x20)

172.061674ms ago: executing program 2 (id=1021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x98, 0x0, 0x168, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xff, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @loopback, 0x0, 0x0, 'lo\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = gettid()
rt_sigqueueinfo(r8, 0x36, &(0x7f00000007c0)={0x20, 0x2, 0x8})
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0)

171.219005ms ago: executing program 1 (id=1022):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x8, 0xc8}}}, 0x6) (async, rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x80) (async)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) (async)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3)
ioctl$TIOCGPTPEER(r3, 0x40140921, 0x200000000005) (async)
ioctl$TIOCGPTPEER(r2, 0x40140921, 0x200000000005)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4001) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x10)
socket$netlink(0x10, 0x3, 0x1) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'veth0_macvtap\x00', &(0x7f0000000c80)=@ethtool_eeprom={0x43, 0x0, 0x80000001, 0x9, "f1ceef94be2ffdab99"}}) (rerun: 64)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000e40), 0x230080, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, 0x0) (async)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x20000894) (async)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
process_madvise(r8, &(0x7f0000000140)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x66, 0x0)

169.984483ms ago: executing program 1 (id=1023):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x42, 0x5}, 0x4) (async, rerun: 64)
openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)

1.012669ms ago: executing program 2 (id=1024):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xe2000, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x23)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8d}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xf1, 0x5b, "bf19ea8414b854941274aae6855be392b47d9cb2d8f72cf71fb08532b1ba2d132f63665322379d96392be36062cfa69205874d690f9dde40a9453fb88299e65520a41b60d3391fd4ced5b7e5730f3868935e713b3b8426dada8259cdf75cbac4150efa9943280927c42e1ab42d130657da5dd23fed5615e9b1c786bfd0a63cc5f9f5db658e6ae061806510ec5c1beddb6db9ad7518aa67d43c95915f62e1a14ba84f6def207c6750801aac8c1d1f682e8a2a47cdde7782e64d57f2017cf6ae79eff323248bd34841f4a3ef63fc80877e1bf62992a2f1c077e2ff1b7c6d4648c48f9562e2e17cda9e7f39471747"}, @NL80211_ATTR_FRAME_MATCH={0x36, 0x5b, "35860c98cb825b8f8eae522c4a553483d12a6e5f476903d421672c0be09e4cd8fd1ca21ad7564a18cbd78c90d1f022d3a575"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7a}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44014)
r4 = syz_io_uring_setup(0x569f, &(0x7f0000000440)={0x0, 0x80a0, 0x4, 0x0, 0x15d}, &(0x7f00000004c0), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000540)={0x7, r0, 0x0, {0x8, 0x7}, 0x9e}, 0x1)
ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000580)={0x10000, 0x1, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000005c0)={r5, 0x0, 0x2})
r6 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600), 0x80800)
r7 = syz_open_dev$swradio(&(0x7f0000000640), 0x1, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000680)={0x6, 0x31324d59, 0x3, @stepwise={0x8, 0x3, 0x2, 0x1, 0x2}})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000006c0)=0x1)
sendmsg$AUDIT_GET(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3e8, 0x8, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x150)
r8 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x4000)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000840)={0x52, 0x0, 0x4, {0xf, 0x63}, {0x800, 0x7}, @cond=[{0x8, 0x1, 0xfff7, 0x25d, 0xff00}, {0x2, 0xffff, 0x6843, 0xffff, 0x1c, 0x522c}]})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000880), r9)
sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f2, 0x8, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}}, 0x4040)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000004400)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000043c0)={&(0x7f0000000a40)={0x3928, r10, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3c}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdb}, @NL80211_ATTR_CSA_IES={0x1af4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x367, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8f}, @device_b, @device_b, @from_mac, {0x8, 0x79d}}, 0x10, @default, 0x400, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x1b, 0x1, 0x3, 0xffff}}, @void, @val={0x5, 0xd6, {0xff, 0xc8, 0x2, "4ab2fe8b1b6123b8343101c5e3f26ed0bc9fe770f5a3ccb720f5626f2450f1caba3afdeb30894c75466a24f24d74804676a8856b489887d653051f6c9f6887501148b460912606096a21dd66baf9544c48d279e4e0c59c1f807b4f92bf8c51f1f57ac9af74232532fcd574a2ece65876d842e98651a95d26a6e18ec5ec1c7c23c3a5231455dba620a00cd6940908addbdcfd368bb43b60a8bf9c3a06ec707bc79031b8dfc67c8e21b8d84a1cb6fc6dbd8bbe09981d964c63b204e0aa4645f5bd710e32109b7df4ddfaa18a5e96395732204035"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x6a, "184ef7ab810f26306db6995d0d337ada5e6c84a1b64fa0e1a291df722b0ea425c6980e01ee25abd2c973df0950fada269ca4bc672a5a967b4a9386fde2440d00dfb8ef870d3a9abf40eeaa33963200f83f95ab3fe979ea09243c1f2ab688078de2848fe1067f570c17a8"}, {0xdd, 0xa4, "39c334b357bb45515cd0fb3ebedeab515805718c5387caf99be111d7cda6849ef236afab002d4122ddf3d407494e7da02d3f947274dad2a51833f1cecb944fe49c30b43989d6983118e8d9107eaeb6c13e94dc086e5dc47394c6157885879c335b8a9d1febc276acf87218d40398c69e68b87adad1b621c11c6013266df73fa2a5b77cec095c477e26ca0e81a4a860cdc3603ee076a26d49cd63069149b9b3057ca2fb34"}, {0xdd, 0x69, "f95b79a7bd567e38122079149f897cf715f6719f9a7242349be0537fe733b06f9f30ac0e219bb9c04543d556a80789785ec182227375d5a892bc0915f702ff70a6f5bea8481aa15b29667cb2f6cbb10c62a2ae1c0ae91f12998645a774527a33aebea04d6f87cdc3a2"}, {0xdd, 0xcd, "319f884592c7a33b1f310c522b98ceadf6f89c1f51cfeee730446c0f0bee037f640c9153482c4715b16e0348d1ec76120d5655a06ec499af41608a20a1d591aa7ee8fef9be6314be4eb36b940f3817d7c58ec00721993ba7a33d71a418571f30c134419d1dcd987fee680ca0747944b6b16685f18169dbfd4d2c5968bb6936e935cccfd8d69fdea2599e5ba5cd8b4e1e47799438b9ac7f67e63b90fea8c3eeb12e4468a79ad7561a321becb78f4541b94aeff751b53043caf3050b6f0d219f0fd7131e8a232411840d6e6c5393"}]}}, @NL80211_ATTR_BEACON_TAIL={0x108e, 0xf, [@challenge={0x10, 0x1, 0xbb}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x8, 0x1, 0x0, 0x1, 0x2, 0x1, 0x8}}, @preq={0x82, 0x3b, {{}, 0x9, 0x6, 0x0, @device_a, 0x9, @void, 0x2, 0x7fff, 0x3, [{{0x1}, @device_b, 0xa0000000}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_b, 0x10000}]}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0xfffffffffffffc01, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x0, 0x5}}, @mesh_chsw={0x76, 0x6, {0x2, 0x4, 0x1a, 0x81}}, @measure_req={0x26, 0x1003, {0x7f, 0x6, 0x6, "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"}}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x13f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_a, @device_b, @from_mac, {0x1, 0xffb}}, 0x0, @random=0xebd6, 0x4808, @val={0x0, 0xd, @random="ea3177aeb5ac74f458cc8c728a"}, @val, @void, @val={0x4, 0x6, {0xa0, 0x3, 0x8, 0xc2fe}}, @val={0x6, 0x2, 0x8000}, @void, @val={0x25, 0x3, {0x0, 0x3, 0x9}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0xf9, 0x2, 0x8}}, @void, [{0xdd, 0xd3, "444081f4d79822da0bf79b863a2857224eb639ecdd022753b8b9cc8b7c2fb5229fff23668061835dec96cac86cf5d3f74d505478d222b1e1495b9ea3e621c41ecdf0fdc31f28b3ec27845182f23db1c8306f2587590fce581ed8bad424b16496505b92f3c588477539fcd22bd331284bb2e10dd5fb20e4b20f694869da6d4a6e9e511b773db5418e7e5debba3696ba822df71d996b4b98cc35dad4eb8e19262c77d1f402322531e8cacb4a67f3fc00b579cf7942b6d7781640be9c794dd19ce35e75b155fc25053bb38d6690a244add491a5a0"}, {0xdd, 0x15, "2546f1de673ecbf600512f413ff39ab51afd2ecba2"}]}}, @NL80211_ATTR_IE={0x2b, 0x2a, [@preq={0x82, 0x25, {{0x0, 0x1, 0x1}, 0x81, 0xee, 0x200, @broadcast, 0x3, @void, 0x2, 0x0, 0x1, [{{}, @device_b, 0x8}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x190, 0x80, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x2, 0x0, {0x7, 0x1fff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x8, 0xffffffff}}, @cf={0x4, 0x6, {0xaa, 0x1, 0x6, 0x7ff}}, @cf={0x4, 0x6, {0x3, 0x0, 0xd1, 0x6}}, @fast_bss_trans={0x37, 0xe5, {0x7f, 0x7, "8c6b2d39a58eda140edb6323b9f4599e", "de4e737ca0bcce5a0d2b5dc9f17ed1c82617abcdb4a5ce76446b9bf7db114fee", "8cc177dffbfd1854bd3e9d6e3287620b6cf4abae65689b21f2208d1aaecbcbd3", [{0x4, 0x1f, "bab298c407f7782731ffb2208bc6b7f74bf127a70ad0574b4239aab230a720"}, {0x4}, {0x2, 0x27, "7322a47190b71b5079c73a7892b693450aa4895c834bcf4b4f35f3a13e3afc9613e88b6cb6043b"}, {0x3, 0x1e, "998b6e489bf5349a2a6f71383cbe3f399de06cf06fd4d6c1e04816cd208f"}, {0x1, 0x3, "2ef034"}, {0x4, 0x16, "f69569efb0e3865b0d613b153243b038b1442dc66700"}, {0x4, 0x8, "3d515a9bd74828e0"}]}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x5b, {0x6, 0x1, "2eb3e14e428836d2c593ddd6e68fa747", "b35cb3edefb1ef004a79ef27673a7dee55086ca9257edeab52f86a37cdd84a45", "3b9f66ebda6f0046136e40ff54a93b25fcc2a4539d7c5edc3d3cd08ee5d5c657", [{0x2, 0x7, "39a2550a133b6c"}]}}, @tim={0x5, 0x6, {0x6, 0xf, 0x1, "84254d"}}, @ibss={0x6, 0x2, 0x10}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x5f91, 0x0, 0x0, 0x7b54, 0x4, 0x4, 0x4, 0x1, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x9]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x8, 0x7f, [@ibss={0x6, 0x2, 0x5}]}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@dsss={0x3, 0x1, 0xa}, @tim={0x5, 0xf, {0x9, 0xc7, 0xe3, "80d744f103d8ae88fd53ddff"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x49, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x5, 0x69, @device_b, 0x2, 0xfd, 0x40}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xd9, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x6, 0x1}}, @mic={0x8c, 0x10, {0xe23, "4e0e88536d0a", @short="fc5cdf0082db9c52"}}]}, @NL80211_ATTR_BEACON_TAIL={0x24f, 0xf, [@ht={0x2d, 0x1a, {0x10, 0x3, 0x5, 0x0, {0x8a0a, 0x7, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x6, 0x1}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @chsw_timing={0x68, 0x4, {0x5, 0xd}}, @ibss={0x6, 0x2, 0x4}, @perr={0x84, 0x10f, {0x9, 0x11, [{{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x3f}, {{0x0, 0x1}, @device_a, 0xb88, @value=@device_b, 0x38}, {{}, @device_a, 0xfffffc00, @void, 0x2a}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x25}, {{}, @device_b, 0x1, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x7, @value, 0x13}, {{}, @device_b, 0x1, @void, 0x37}, {{}, @broadcast, 0x3, @void, 0x3a}, {{}, @device_b, 0x7ff, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x5}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x39}, {{0x0, 0x1}, @broadcast, 0x1000000, @value, 0x12}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x36}, {{}, @broadcast, 0x7f, @void, 0x1b}, {{}, @broadcast, 0xefa, @void, 0x31}, {{}, @broadcast, 0x7, @void, 0x36}, {{}, @device_a, 0xffffff37, @void, 0x30}]}}, @measure_req={0x26, 0xfb, {0x1, 0x8, 0xbf, "ac4973d9ba8f2564f48263fa2461fd62c9067c9ed0771deac890c5a44ca0fc3cc3757c90f8274e10c410450bd4a5366a909488062e9cb862bc9ca08087cd8d8acfb0b80bf10150b025da0c9f6de0bdac8603c209ce0b485a4e706f2a544bc156b9fedefbe320154b24b902d766f24b5a4be1972b52a470b0c96514a866129a22eea1c1a80def8369267a622845cb0bccf2979fd6b0111ba7c0748b25b79eed056e6605b3f3346d2b1adf4bd27c4c4607d7b3e5f6eff7da1172a2eca76551e9c6ea061c7be82e1099b683da9d60aa1b4569f234dd8108359431b19018ec67718ad5b7fdc4bee72de87229b89498c59dd2a573eaad482227a4"}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0x115, 0x7f, [@fast_bss_trans={0x37, 0xd0, {0xfb, 0x6, "e684f79cc72af5735dfbaaa29d68ff45", "f39d7cf427d4334f76b4b85aa11733584b126e4fbc7bcd984bae1f00bd4a7e02", "d18071053ebafc1f03f1c01d34a2813074378696886d08376868b00f8a6fdb09", [{0x2, 0x22, "978d5f8e58f42d9b6ae8d3b330eafd3316d2c6a0da573d18fd38246ad04afb7d8a11"}, {0x4, 0x2, "52ad"}, {0x3, 0x24, "c25243de18c3e6a371913fbdac886c67f6c3799ba9a1de9fbfbc934759e32b85ac4e3916"}, {0x3, 0x8, "a074c01abd1b68a0"}, {0x2, 0x15, "aef76f500517d11a738112e4fb417a22dec3df5d23"}, {0x2, 0xd, "f92f9553bcf748eafabef557d8"}]}}, @challenge={0x10, 0x1, 0xc}, @mesh_chsw={0x76, 0x6, {0xa, 0x1, 0x35, 0x6}}, @ht={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x4a2, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x1}, 0x400, 0xcec, 0x6}}, @ssid={0x0, 0x16, @random="0ae8ec54e97bade3f93cbea36a80635a29e186dad060"}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc7}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x0, 0x9, 0x0, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x2f, 0x9, 0x1]}]}, @NL80211_ATTR_CSA_IES={0x40, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xe, 0x9]}, @beacon_params=[@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x4, 0xf, 0x800, 0xfffe}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x7ff, 0x3, 0x9, 0x400, 0xffc0, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x2, 0x7, 0x9, 0x1, 0x6, 0x4, 0x0, 0x6]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1d74, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0x3aa, 0x1, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x6800, 0xc, 0xe]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x3, 0x3, 0x200, 0x50, 0x40, 0x8, 0x0, 0x96cf, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x7, 0x1, 0x717, 0x2, 0x10]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x0, 0x400, 0x2, 0xed4b]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x882]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x5, 0x5, 0xd, 0x0, 0xfffd, 0x1, 0x7, 0x4, 0x5, 0x90c2]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x43, 0x80, [@link_id={0x65, 0x12}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @chsw_timing={0x68, 0x4, {0xe, 0x1400}}, @cf={0x4, 0x6, {0x0, 0x6, 0x8, 0x652}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0x2, 0x8, 0x61}}]}, @NL80211_ATTR_BEACON_TAIL={0x118, 0xf, [@measure_req={0x26, 0x90, {0x1, 0x4, 0x3, "c220a3e069a76583109b608b1f1f2d512233ee55dc401e9e070be4c253f76e94fddad239bbee5d7cabc028c7542c69c4728236ddd62b4688e69972fa3ec4438eb10b436c56baff0beeeb72a75540134ebfdd44a2ac0cd4ffb84acdd141fcbbc4e5a04ca287a0a335b07baad34b4b578a7152b7c432c3e5365a33082d42f69f6d694b3f4d3e0a514036c6ae7079"}}, @mesh_chsw={0x76, 0x6, {0xfd, 0x3, 0xc, 0x100}}, @tim={0x5, 0x3, {0x64, 0xc0, 0x1}}, @random_vendor={0xdd, 0x6d, "23f17d3865092f0b99257394dea72bbc861f312312518b63a57e0415c2d5be115beaaa07ce975b608de4719c454a272c023016b71e49e52ca14067d98c67aa824fb52df3ed01ee1f1f7fc5807b00e60388168922f380d7cda274dfba318741af177d36e84ee5628b772fb2df24"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @dsss={0x3, 0x1, 0x30}]}, @NL80211_ATTR_BEACON_TAIL={0x1125, 0xf, [@random={0x7, 0x9c, "e8b40c1f73eec3067ac561911e3deb2cb56443d8fae157cab085ba9a17ea6e7504d58cce8972f4ee6a622c8f7f6a152c234d6102d1c26c76260d3659058121b307f6639389c8e782aeff1635b16106867f48a238872b5076a2705f317fdb6acf978777f8be83c246e12563aa91c4eecf365f39c1036e00bc810999537f062c35093cdf7a5e751b8dec9373da880800d1460a4fa4892d7cdd44d61009"}, @prep={0x83, 0x1f, {{}, 0x6, 0x8, @device_a, 0x101, @void, 0x3, 0xa, @device_b, 0x2}}, @random, @measure_req={0x26, 0x1003, {0x0, 0xf, 0x3e, "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"}}, @challenge={0x10, 0x1, 0xdf}, @random_vendor={0xdd, 0x51, "797116974fbeb69595b84b04774123f5287ef38046140282687a268d92172d36908ec16d8883dee768dd5a24172bda9c950469a068a4a8682ab21cafce2b7a1c0f22d0f4075924c52a753aca1b48c16930"}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0x3}}]}, @NL80211_ATTR_BEACON_HEAD={0x48f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1a}, @device_b, @device_a, @random="daae74852daa", {0x4, 0xd}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x7, @random=0xc, 0x2, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x20}}, @val={0x76, 0x6, {0x6, 0x2, 0x13, 0x7}}, [{0xdd, 0xaf, "cc493eb9fbb37ddddca83ac62544d2e2691d3cebcebda34f871607c01a4c60dde246048812440747b68f66cb7953d6f21aec45e25ecbaccc51cfe81ec767f85d4aa75894c4e0a68a1adbf58907ede5564f2de07243288c8fbb70aba8ff18c07c0c35080b5d1f12c849eea7c8f554b96d3d88bd44a9778725dad41dc6c773a5f4a0d07193d3f8123784d4f45e7ced50494da61ced523962ad50966956cfffa7efca91ad30ae01afab49eb7cfb7db346"}, {0xdd, 0x3d, "ae832beec21621690b242990c2947a1eb61546674dddd974503061943c257ccbf0d479c6fde7bb5c88137f28d75f15aa3632f5d0ddaff965f6ad5d988f"}, {0xdd, 0x9c, "c83f8b50c9e8f6bf5ddbb23b081571cc0cc2c4eb50048d729787be0a13234820060d6cd06ee10c7c308b9e6b2eeafdeecae535ac4dfd7fb84b782ea3a3a05438b12d6d7d1b86619371df3d90ea25b1d082da9baacf240d74c5109dbae83f714c2ac00fea6e39a147118617c85a6dd92e1548509e4ca3ba950d41ad68b82821b49d33bd7acee0f4c30bb6eac649c1c7624de7bae341a36d9c3d4d17d0"}, {0xdd, 0xad, "32274ae69e4e406e8fb8b25d3355858d00904999b08f09b9582c544c147296548ac381983c65b0e910670ce1884844c04487c85dda624844cb96c94a0f1ea10d7a7140ce86dc3e6e2906104b5f975a29b7b591f63b9c983edc44c265b12c9a4a2a136a83e601e1a8c3c71e7f6e46b4bb56eece5395746d23babe9fe23a44835a1596a82518a39832a14077e64430c4c1e4bbe526353474103385772ea45a535cd3b55f92ecf0c962969be48b1f"}, {0xdd, 0x61, "2302133cbe2c6948c06c5ff46227406ba8d36af5de9fd0cedcab82eb8568b488b00626738dc74be1dc0e37caeaabc48b161ae305f3eed4bac256288d0d459b6e253daf77c5c1846f5a8f8409c1b963ae0c44acb367af927356ba05b5102dc8831b"}, {0xdd, 0x19, "8d28681b6418bf9f438aa5b36d72d471253f4a7a64012c6d0c"}, {0xdd, 0xb5, "5c9620a1ab05ae9e90d85c619bf686cd7e88303fe5003d1c61925d3def03bf727f0e4439e0be6112638882fd9ca9e50146a507cb59e9ed2ea83214c10da1f72bf85ac16b32924acd25bf44d2c6369dce6ad91abc15ac95d72fdfe82fa4cebea1102bdd0f72f57d0c83d2a10b2369ad90b2b935ab231cefd0994604a0050470fe9306ab2f709be92f5943f87c1a7d8cfbea628d6305a72228a69c1e9afd78990c776a975645e22c426564698cffa9b0d58fbd72f6e2"}, {0xdd, 0x8d, "1167ada2f8d4a9b255fc508f53f16d8c063a84cb31ae99d32053ab2d924b2318e13acc14f4e66a3430e7e057828cbd06386657c09d4f9e15addbd5d699c6cab02dea3088fab064d3c8b5c272bec9fae088a5ae942635b133688f549a6f8bf972a946c323aa5cbde81b66431480886dd959aeaa2ebbcbc7f19ac9f4e387212cf0ca15e5b6532136e5928f3eb75b"}, {0xdd, 0x43, "5bfd7e2833a4f581ef79f3fdd1e37b5a3432a0cd1a0bf6e1553237f41f5df0616df92af74e46dc391351f963ecb164a612931d01a37e93654543af7148bc5bcb155bac"}]}}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5da, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x88}, @device_a, @device_b, @from_mac=@device_b, {0x2, 0x2}}, 0x1, @default, 0x104a, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x0, 0x7, 0x9}}, @void, @val={0x5, 0x8f, {0x4, 0xe2, 0x0, "a7a6be64b41a34be3c7aeeabbbb5609283bc37b033bbd9c1a4d7701807195cf4fb53022e5084dc0e0bca2dc719aac313fcc3935f64ba5b844ee2b886f4810bef3c91098ab52940f8d4a357660164f7a6de0746876a8bb9b26f52180f1b9e0380810c3291933bc3a0d8746a85721cf45c7a51f4cb361afb0eb85b47578bda224dc3c82e9491b9aa8880d90a4d"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x1, 0xb1, 0xa1}}, @val={0x2d, 0x1a, {0x1, 0x0, 0x0, 0x0, {0x2, 0xa, 0x0, 0xe1, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0x2, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x40}}, @val={0x76, 0x6, {0xcf, 0x5, 0x18, 0xfff9}}, [{0xdd, 0xe5, "13b0daa4cc9d591ad8bf2df18766adf41b91c06be5d7e26caa8a2afcf32b52f6b43e988188f3daad9af2a56236d4009ef9f2e5c2ff53243c3b12fb4e3d8dde144ae4dbe16e126849046b6cfd7b46007c52515e4d45bac1e8d03a9fa0d5559b0c0864949342f3d5f2f89329c0cfb8f3e7c6c46903d73534d2e41bb40a1dfc2bbe268cedaad09860fd3769c31fe53d73fa07f73ba6075cc00ca515511b1642240a8629b05bb10d72d5867009dc5a0b80fffbbaac7a83e5eb0d4eea00b6f1189d49ca0514f16db9dbf035f4875177f843a3bd03fa1f5ad847067aba2cfad04774bc5fbf8c3a30"}, {0xdd, 0xcf, "859f95fa63911dbcfe7f79be5949d68fcc15ee901bccf07cc84754e148b5cf0df0f972ee7c5ecd3054476f161fba4814d03952b1aebe16e1b0f553644256f0e986077f2550f55aa37a914ca34bb5bbf4585e05a226ca336459557633a4b7d918bd470238e04618943e8bddb085c57869adfc114a04c1cd6b070c03ce9f5ecadc86d3ba20ad08e62f48cc056d07ac79480fecf0a312c3842a01c1d2215e1e8dbfad066977d34c90bc78d0146d83dbe57006929eae23e36791b55fbb07edfb2f29c8ca917285827e6e94238a4efe6d10"}, {0xdd, 0xda, "de54d618daf6232258ce5d5d651a10f461eb4e923d86b8e270680ebb7ffcf7f90eaf69c54a6d3f147044e3ddec2c05512378a71767db9e818eb0f450ce9151961cb936e434f9e8a655bb88d7e7c7b26e38835019e938ce4e207c495543993ec26a1ea88acad4de4325e0a896f883237706713ba57a92461b69e8296e713583ec868c03dec49de8e6d88edefec3d98f8edf20d750b55267634f102f634535a6051da2a15c802b45182faa4ddee05129dbee98b0b2b6e9fcc877e9a581ca7567b1d0ad4c00fe9b6de04d8e60e25a133ab54e267712627e1ce784d2"}, {0xdd, 0xbd, "c8d2a855a605b261dba153b2827fec24eadb738f1af42460bae214ac01c2afe3ff64676b66c7218f87d329b7cc41d45f087aca16ad0dca00a1bb8c25300491304a36c4ff7ee77a506312a58d41016fb9b665bb19f4ecddc051657bba77a1a3e99142576d3abbcb22ee054edc40bd672554025b7277c5b7e42fb39520d9a073e436b1b3242a9ced63b33de33f8e352445788ec614e217eb2d88d7d86380b9ef9c733d5071d7b8af62da51d2559a53222af7d519e7ea1e219ac21d61a432"}, {0xdd, 0x63, "90ef7e1efaecc7cd7d9abb4598c5ff70362e19f499016f8dd573b42e4f6495f3b08a7b8c9c57c79367df4f2db940956b507ce6d720a2a7a3792dba8499441cd6b271405775f0aa77bbd4931a29894e9c180fd4e136ed1d469f667e043748f856d2e7ed"}, {0xdd, 0x69, "c28f68c6e6e24c608d8b6ad31e88186eae50d753d896bf79ba1c6ff56b6e287092f502628dae844f9151dd519f3cd2cb7836c8342713111ce7dfc048046a3cd8546e75b12183a873d0cdb25cd3c9f3bd3a3ab6118f9ddbadcd4ec6abe0b049909fad07520c647d3606"}, {0xdd, 0xae, "129e73bcd9731b95ae4b4e49b5213c719d757da861586d9c471d465da51ba2c561c919ef208a005be0824aea21b47c8df1d31dce521a8368731d2c09bf7c3ffe28026f14d5ff9cccba388eed0999aff999389c23cb436c199995d6e55d19162791edc841d159d98248385628b1cbee3d0372dafe67458b5f0548639707f5664050602fc6a5fdde1f23a34a8ccf83431e2c7782926e498cb796285115284a80add5856e4692ac8c303dd088ce2a02"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x700, 0xb3, 0x8001, 0x7, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x202}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x225}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x3928}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000004440))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000044c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000045c0)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004580)={&(0x7f0000004500)={0x7c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000884}, 0x4050)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000004600)={0x57, 0x0, 0x3, {0x7, 0x4e}, {0x2, 0x9}, @ramp={0x30d6, 0xf29f, {0x400, 0x9, 0x6a, 0x800}}})
r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000004640), 0x80802, 0x0)
ioctl$CDROM_SET_OPTIONS(r12, 0x5320, 0x20)

248.706µs ago: executing program 2 (id=1025):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="1209b0ff0000", 0x0, 0x4, 0x4, 0x0, 0x0})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000014000000000046e029c1000034000000fdffffff00000000180000000000004029000000040000000400000000000000d80000000000000029000000717d00005e17"], 0x188}}], 0x1, 0x1814)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a8", 0x31}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x88, 0x34, 0x200, 0x70bd28, 0x25dfdbff, {0x9}, [@typed={0x8, 0x82, 0x0, 0x0, @u32=0x2}, @generic="e2d0b31ece682987fda910c7b92529dce9c9c69099bf0e27ec8d0153854d3bb58627a214ab0dbabbe3b8d96d3422fe6423b6b6652c7dda3ac870cfb9306763ce7a58f5d8140d6357dbda9986d93d4e0c75a0b6e619159bf4a1365cdbd0f7cee9d50ca8c2", @typed={0x8, 0x81, 0x0, 0x0, @fd=r2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
syz_open_dev$ttys(0xc, 0x2, 0x0)
close(0x3)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9596cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fd335bbb095873048", 0xfffffffffffffef9}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c371060000af0a0bf436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4f}, {&(0x7f0000000780)=""/71, 0x43}], 0x2, 0x0, 0xfffffffffffffe54}, 0x40000102)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="04004600050034006a000000080026006c09000004005180"], 0x34}}, 0x20004800)
r7 = socket(0x2c, 0x3, 0x5)
sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402)

0s ago: executing program 1 (id=1026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x2000})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f900e2bd43520469df9092c17640064627bd7000fcdbdf2501000000080001e8e31ff84a9672ed616b007063690011000200303010103a30303a31302e3000000000080001007063690011000200303030303a7a9bad849930303a31302e30000000000800010070636900f10002003030"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x805)
sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x1dc, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000, 0x0, 0x2}, 0x0, 0xfdffff00}, [@sa={0xe4, 0x6, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x1, 0x4e20, 0x8, 0x2, 0x20, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xcd}, @in6=@mcast2, {0x4, 0x2, 0x6, 0x2, 0x7, 0x4, 0xa, 0xeb}, {0x8001, 0xc, 0x4, 0x9}, {0x5, 0x3, 0xd15}, 0x70bd2c, 0x3505, 0xa, 0x0, 0x1, 0x2}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x82)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r8, 0x0, 0x0, 0x2, 0x0, 0x60)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000675)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})
fchdir(r5)
r9 = socket(0x10, 0x80003, 0x0)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r5, 0x0, 0xde6, 0xa5, &(0x7f0000000240)="6bf4bc8768369ffe4f559b7af89783bad9b8a8e2976345ad8f32357f2a407e075eda8f7c10741be74a8f4330fbaf56c0b87daa96409483fb054f0126812f60735c47e01c3be69a2ce23dcaa10bd3d91d9fa9b81b509a5632fedbef0705bafa29f712f6f823d30e0214444e0d2db98fd020cdf968551631759c45df4a91b0c98eac04dce148e9c53dfc908cc12e3d6a0f03e6b4e919e3469f9a8e731c0e96a87e62e9802ded", 0x4})
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x100)
fanotify_init(0x200, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ifreq(r10, 0x8971, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

0s ago: executing program 0 (id=1028):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x43442, 0x58) (rerun: 32)
fallocate(r1, 0x0, 0x9, 0x10001)
r2 = open(&(0x7f0000000240)='./file1\x00', 0xcd042, 0x0)
read(r2, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0, 0x9}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000600)={0x0, 0x80, 0x12, "614b8b12e91e7518aded6c473e365aafdb6c"}, 0x1a) (async)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) (async)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={<r6=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r6], 0x1}) (async, rerun: 32)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (rerun: 32)
ioctl$UI_SET_PROPBIT(r7, 0x4004556e, 0x12) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000340)={<r8=>0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000380)={<r9=>0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f00000003c0)={<r10=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000400)=[r6, 0x0, r8, r9, r10], &(0x7f0000000440)=[0x1, 0xff, 0x0, 0x7, 0x8], 0x5})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x20, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{}, {}, {<r12=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000005c0)={r12, &(0x7f0000000540)=""/123})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a", 0x13}], 0x1}, 0x40000)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r15=>0x0})
r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r16}, 0x18) (async)
sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r14, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r15, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

[   62.739424][ T5341] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   62.743503][ T5341] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   62.747535][ T5341] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   62.751269][ T5341] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.756958][ T6364] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   62.762923][ T5341] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[   62.964216][ T5341] usb 7-1: USB disconnect, device number 2
[   62.978485][ T5945] Bluetooth: hci2: command 0x0419 tx timeout
[   63.037566][   T40] kauditd_printk_skb: 93 callbacks suppressed
[   63.037583][   T40] audit: type=1400 audit(1773549915.836:293): avc:  denied  { allowed } for  pid=6380 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   63.040728][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   63.049102][   T40] audit: type=1400 audit(1773549915.846:294): avc:  denied  { map_create } for  pid=6380 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   63.065706][ T6381] hsr_slave_1 (unregistering): left promiscuous mode
[   63.079956][   T40] audit: type=1400 audit(1773549915.886:295): avc:  denied  { map_read map_write } for  pid=6382 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   63.090144][   T40] audit: type=1400 audit(1773549915.896:296): avc:  denied  { prog_load } for  pid=6382 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   63.097653][   T40] audit: type=1400 audit(1773549915.896:297): avc:  denied  { prog_run } for  pid=6382 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   63.127974][   T40] audit: type=1400 audit(1773549915.926:298): avc:  denied  { write } for  pid=6386 comm="syz.3.109" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   63.143596][   T40] audit: type=1400 audit(1773549915.926:299): avc:  denied  { read } for  pid=6386 comm="syz.3.109" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   63.153132][   T40] audit: type=1400 audit(1773549915.926:300): avc:  denied  { open } for  pid=6386 comm="syz.3.109" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   63.192903][   T40] audit: type=1400 audit(1773549915.996:301): avc:  denied  { read } for  pid=6395 comm="syz.1.111" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   63.201819][   T40] audit: type=1400 audit(1773549916.006:302): avc:  denied  { open } for  pid=6395 comm="syz.1.111" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   63.274822][ T6401] netlink: 'syz.3.112': attribute type 1 has an invalid length.
[   63.409856][ T6403] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.113'.
[   63.531628][ T6413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6413 comm=syz.1.115
[   63.535877][ T6413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2566 sclass=netlink_tcpdiag_socket pid=6413 comm=syz.1.115
[   63.713544][ T6429] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   63.717112][ T6429] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock
[   63.723181][ T6429] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   63.726124][ T6429] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock
[   63.734097][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'.
[   63.761397][ T6432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56848 sclass=netlink_route_socket pid=6432 comm=syz.1.122
[   64.960038][ T6493] capability: warning: `syz.1.139' uses deprecated v2 capabilities in a way that may be insecure
[   64.981248][ T6491] openvswitch: netlink: Key type 222 is out of range max 32
[   65.039563][ T6504] devtmpfs: Cannot change global quota limit on remount
[   65.052220][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'.
[   65.052400][ T6501] bond1 (unregistering): Released all slaves
[   65.053015][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'.
[   65.082660][ T6510] xt_hashlimit: size too large, truncated to 1048576
[   65.267917][ T6018] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   65.430314][ T6018] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D
[   65.434947][ T6018] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64
[   65.439655][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0
[   65.443737][ T6018] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   65.447621][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   65.451164][ T6018] usb 6-1: Product: syz
[   65.452890][ T6018] usb 6-1: Manufacturer: syz
[   65.455146][ T6018] usb 6-1: SerialNumber: syz
[   65.461098][ T6018] usb 6-1: config 0 descriptor??
[   65.466667][ T6018] usb 6-1: selecting invalid altsetting 0
[   65.517994][ T6523] "syz.2.147" (6523) uses obsolete ecb(arc4) skcipher
[   65.546645][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'.
[   65.705860][ T1027] usb 6-1: USB disconnect, device number 3
[   65.739049][ T6543] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   65.739058][ T6542] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   65.748756][ T6543] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.761589][ T6541] bond1: (slave gretap1): making interface the new active one
[   65.766421][ T6541] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   65.772678][ T6541] xt_hashlimit: size too large, truncated to 1048576
[   65.824930][ T6549] bridge_slave_0: left allmulticast mode
[   65.826980][ T6549] bridge_slave_0: left promiscuous mode
[   65.829290][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.840839][ T6549] bridge_slave_1: left allmulticast mode
[   65.842766][ T6549] bridge_slave_1: left promiscuous mode
[   65.844691][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.852440][ T6549] bond0: (slave bond_slave_0): Releasing backup interface
[   65.857170][ T6549] bond0: (slave bond_slave_1): Releasing backup interface
[   65.864515][ T6549] team0: Port device team_slave_0 removed
[   65.868702][ T6549] team0: Port device team_slave_1 removed
[   65.870924][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.873368][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.874158][ T6541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6541 comm=syz.2.150
[   65.875843][ T6543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6543 comm=syz.2.150
[   65.881286][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.886910][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.890850][ T6549] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   65.896049][ T6542] �x9�: renamed from bridge_slave_0 (while UP)
[   66.129650][ T6562] tmpfs: Bad value for 'mpol'
[   66.136416][ T6562] program syz.1.156 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.442397][ T6582] =======================================================
[   66.442397][ T6582] WARNING: The mand mount option has been deprecated and
[   66.442397][ T6582]          and is ignored by this kernel. Remove the mand
[   66.442397][ T6582]          option from the mount to silence this warning.
[   66.442397][ T6582] =======================================================
[   66.457324][ T6582] option changes via remount are deprecated (pid=6580 comm=syz.0.157)
[   66.460762][ T6582] cgroup: option or name mismatch, new: 0x0 "syzkaller0", old: 0x0 ""
[   66.496165][ T6586] dlm: non-version read from control device 8224
[   66.654345][ T6598] binder: 6596:6598 ioctl 89f0 200000000f80 returned -22
[   66.781169][ T6614] binder: 6613:6614 ioctl c0306201 200000000640 returned -22
[   66.783679][ T6614] binder: 6613:6614 ioctl c0306201 200000000640 returned -22
[   67.027923][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   67.179603][   T10] usb 7-1: config 0 has an invalid interface number: 120 but max is 0
[   67.183174][   T10] usb 7-1: config 0 has no interface number 0
[   67.185811][   T10] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   67.191831][   T10] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   67.196483][   T10] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   67.201600][   T10] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[   67.205554][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.211234][   T10] usb 7-1: config 0 descriptor??
[   67.213399][ T6614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   67.219109][   T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.120/input/input6
[   67.228279][    C1] usbtouchscreen 7-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1
[   67.316016][ T6637] netlink: 120 bytes leftover after parsing attributes in process `syz.0.166'.
[   67.319847][ T6637] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[   67.322494][ T6637] netlink: 64 bytes leftover after parsing attributes in process `syz.0.166'.
[   67.327959][ T6637] netlink: 120 bytes leftover after parsing attributes in process `syz.0.166'.
[   67.330937][ T6637] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[   67.333391][ T6637] netlink: 64 bytes leftover after parsing attributes in process `syz.0.166'.
[   67.361682][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'.
[   67.373530][ T6641] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.387407][ T6641] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   67.395304][ T6641] netlink: 'syz.0.167': attribute type 4 has an invalid length.
[   67.398260][ T6641] netlink: 152 bytes leftover after parsing attributes in process `syz.0.167'.
[   67.404716][ T6641] .`: renamed from bond0
[   67.552782][ T5341] usb 7-1: USB disconnect, device number 3
[   68.062424][   T40] kauditd_printk_skb: 48 callbacks suppressed
[   68.062434][   T40] audit: type=1400 audit(1773549920.866:351): avc:  denied  { write } for  pid=6655 comm="syz.1.172" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   68.100783][ T6661] ata1.00: invalid multi_count 128 ignored
[   68.157636][   T40] audit: type=1400 audit(1773549920.956:352): avc:  denied  { unlink } for  pid=6670 comm="syz.3.175" name="#1" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   68.169869][   T40] audit: type=1400 audit(1773549920.956:353): avc:  denied  { mount } for  pid=6670 comm="syz.3.175" name="/" dev="overlay" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   68.189138][ T6678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=6678 comm=syz.2.173
[   68.214496][ T6683] QAT: Device 2 not found
[   68.216406][   T40] audit: type=1400 audit(1773549921.016:354): avc:  denied  { bind } for  pid=6676 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   68.224369][   T40] audit: type=1400 audit(1773549921.016:355): avc:  denied  { listen } for  pid=6676 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   68.232849][   T40] audit: type=1400 audit(1773549921.016:356): avc:  denied  { bind } for  pid=6676 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   68.240713][   T40] audit: type=1400 audit(1773549921.016:357): avc:  denied  { name_bind } for  pid=6676 comm="syz.1.177" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   68.249803][   T40] audit: type=1400 audit(1773549921.016:358): avc:  denied  { node_bind } for  pid=6676 comm="syz.1.177" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   68.254765][ T6686] netlink: 68 bytes leftover after parsing attributes in process `syz.3.179'.
[   68.264172][ T6688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.179'.
[   68.341912][ T6696] netlink: 'syz.3.182': attribute type 12 has an invalid length.
[   68.508862][   T40] audit: type=1400 audit(1773549921.316:359): avc:  denied  { watch watch_reads } for  pid=6703 comm="syz.3.185" path="pipe:[11024]" dev="pipefs" ino=11024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   68.605278][   T40] audit: type=1400 audit(1773549921.406:360): avc:  denied  { read write } for  pid=6728 comm="syz.3.192" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   68.611632][ T6725] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   68.660424][ T6734] netlink: 'syz.3.193': attribute type 1 has an invalid length.
[   68.663005][ T6734] netlink: 'syz.3.193': attribute type 3 has an invalid length.
[   68.665902][ T6734] netlink: 224 bytes leftover after parsing attributes in process `syz.3.193'.
[   68.753876][ T5945] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1
[   70.670399][ T5945] Bluetooth: hci2: command 0x0419 tx timeout
[   71.092047][ T6659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   71.379176][ T5948] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   71.382914][ T5948] Bluetooth: hci1: Injecting HCI hardware error event
[   71.385942][ T5948] Bluetooth: hci1: hardware error 0x00
[   71.406228][ T6774] netlink: 'syz.2.207': attribute type 1 has an invalid length.
[   71.423461][ T6774] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.430930][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'.
[   71.439907][ T6774] bond2: (slave geneve2): making interface the new active one
[   71.443441][ T6774] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   71.517983][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   71.597969][ T6018] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   71.673173][   T10] usb 5-1: Using ep0 maxpacket: 8
[   71.680392][   T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[   71.682957][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   71.689585][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   71.692696][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[   71.696209][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   71.699415][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   71.703461][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   71.706337][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.727886][ T6018] usb 8-1: device descriptor read/64, error -71
[   71.913843][   T10] usb 5-1: usb_control_msg returned -32
[   71.915867][   T10] usbtmc 5-1:16.0: can't read capabilities
[   71.978089][ T6018] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   72.127884][ T6018] usb 8-1: device descriptor read/64, error -71
[   72.130981][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'.
[   72.138891][ T6786] SELinux:  policydb magic number 0x11 does not match expected magic number 0xf97cff8c
[   72.143524][ T6786] SELinux: failed to load policy
[   72.203077][ T6791] binder: 6790:6791 ioctl c0502100 200000000280 returned -22
[   72.248207][ T6018] usb usb8-port1: attempt power cycle
[   72.588192][ T6018] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   72.608505][ T6018] usb 8-1: device descriptor read/8, error -71
[   72.619876][ T6796] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[   72.848205][ T6018] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   72.868241][ T6018] usb 8-1: device descriptor read/8, error -71
[   72.978067][ T6018] usb usb8-port1: unable to enumerate USB device
[   73.090124][   T40] kauditd_printk_skb: 27 callbacks suppressed
[   73.090134][   T40] audit: type=1400 audit(1773549925.896:388): avc:  denied  { map } for  pid=6808 comm="syz.2.216" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   73.249014][   T40] audit: type=1400 audit(1773549926.046:389): avc:  denied  { read write } for  pid=6818 comm="syz.2.220" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   73.257893][   T40] audit: type=1400 audit(1773549926.046:390): avc:  denied  { open } for  pid=6818 comm="syz.2.220" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   73.267351][   T40] audit: type=1400 audit(1773549926.066:391): avc:  denied  { ioctl } for  pid=6818 comm="syz.2.220" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   73.295216][ T6823] netlink: 'syz.1.221': attribute type 7 has an invalid length.
[   73.298693][ T6823] netlink: 'syz.1.221': attribute type 8 has an invalid length.
[   73.302020][ T6823] netlink: 'syz.1.221': attribute type 7 has an invalid length.
[   73.305295][ T6823] netlink: 208804 bytes leftover after parsing attributes in process `syz.1.221'.
[   73.458293][ T5948] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   74.288842][  T937] usb 5-1: USB disconnect, device number 3
[   74.349789][ T6850] futex_wake_op: syz.1.229 tries to shift op by -1; fix this program
[   74.370361][ T6852] tipc: Started in network mode
[   74.372368][ T6852] tipc: Node identity 84e, cluster identity 4711
[   74.374791][ T6852] tipc: Node number set to 2126
[   74.453714][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'.
[   74.530854][   T40] audit: type=1400 audit(1773549927.336:392): avc:  denied  { write } for  pid=6858 comm="syz.0.232" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   74.557870][ T6018] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   74.657836][   T40] audit: type=1400 audit(1773549927.456:393): avc:  denied  { listen } for  pid=6867 comm="syz.0.235" lport=47955 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   74.665415][   T40] audit: type=1400 audit(1773549927.456:394): avc:  denied  { accept } for  pid=6867 comm="syz.0.235" lport=47955 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   74.672590][   T40] audit: type=1400 audit(1773549927.456:395): avc:  denied  { write } for  pid=6867 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   74.690083][   T40] audit: type=1400 audit(1773549927.496:396): avc:  denied  { listen } for  pid=6872 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.699223][   T40] audit: type=1400 audit(1773549927.496:397): avc:  denied  { accept } for  pid=6872 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.717956][ T6018] usb 8-1: Using ep0 maxpacket: 32
[   74.724466][ T6018] usb 8-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[   74.727858][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.730605][ T6018] usb 8-1: Product: ゥ뵏ꉪ쎽隖껧엢⇩䴙脉兩⚙ࡤ槔䬼淒疊룄ደﺍ镾놝戄ᥖ櫐鞀됷蟍㛥﨟ᘾ᱙⏐㙝糁쐯鞥쟶௽恎౧멪Ӂⶉ缃뀸驻軄㧌뷩
[   74.736362][ T6018] usb 8-1: Manufacturer: 鑍붕Վ♊䋬庙咢ሤĝ㓣ⷣ질༇뱃㭥繈윂⎞–思嫴훬퓀駫㷟꽥쉳铗ᐲ쵂Ꚍ岌誱葡簛ᩚ熣ꎄ힉责韉טּ놏릍ᥚ윺궨ꝏ䗩府甐苀茞
[   74.743035][ T6018] usb 8-1: SerialNumber: 審圔⎾ᙆꬥ䙺毸匟砨弁ࡿ싩꩑ꦒ챙蒾ﴊ᎙ﴱ圠ൾ蠠೚쫍蜱㮣딣㪶媶氱蘓৹䦤᱙
[   74.967723][ T6018] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   74.970671][ T6018] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   74.973388][ T6018] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2
[   74.979774][ T6018] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   74.982277][ T6018] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   74.984809][ T6018] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2
[   74.990432][ T6018] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   74.993156][ T6018] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   75.013077][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'.
[   75.015888][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'.
[   75.016737][ T6018] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2
[   75.023264][ T6018] usb 8-1: USB disconnect, device number 7
[   75.040466][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   75.054209][ T6879] ieee802154 phy0 wpan0: encryption failed: -22
[   75.490660][ T6883] futex_wake_op: syz.3.239 tries to shift op by -1; fix this program
[   75.530839][ T5948] Bluetooth: hci2: unexpected event for opcode 0x2027
[   75.535591][ T6886] overlayfs: empty lowerdir
[   75.546523][ T6886] netlink: 'syz.3.240': attribute type 10 has an invalid length.
[   75.556196][ T6886] 8021q: adding VLAN 0 to HW filter on device team0
[   75.563238][ T6886] bond0: (slave team0): Enslaving as an active interface with an up link
[   75.576416][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'.
[   75.759193][ T6904] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   75.762070][ T6904] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   75.768358][ T6904] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   75.771045][ T6904] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   75.772952][ T6904] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   75.776621][ T6904] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   75.779912][ T6904] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   75.783386][ T6904] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   75.809642][ T6908] futex_wake_op: syz.0.250 tries to shift op by -1; fix this program
[   75.847272][ T6910] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   75.847859][  T937] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   75.960697][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'.
[   75.997835][  T937] usb 8-1: Using ep0 maxpacket: 8
[   76.000849][  T937] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[   76.003474][  T937] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   76.007129][  T937] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   76.010657][  T937] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[   76.014234][  T937] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   76.017571][  T937] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   76.021801][  T937] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   76.025024][  T937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.234248][ T6893] SELinux:  policydb table sizes (0,4096) do not match mine (8,7)
[   76.236942][ T6893] SELinux: failed to load policy
[   76.241500][  T937] usb 8-1: GET_CAPABILITIES returned 0
[   76.243495][  T937] usbtmc 8-1:16.0: can't read capabilities
[   76.263031][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   76.266006][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   76.292925][ T6938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.295669][ T6938] syzkaller0: entered promiscuous mode
[   76.299419][ T6938] syzkaller0: entered allmulticast mode
[   76.327475][ T6938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.256'.
[   76.332465][ T6940] tipc: Resetting bearer <eth:syzkaller0>
[   76.444858][ T5999] usb 8-1: USB disconnect, device number 8
[   76.536929][ T5948] Bluetooth: hci3: SCO packet for unknown connection handle 1
[   77.128545][ T6940] tipc: Resetting bearer <eth:syzkaller0>
[   77.140040][ T6940] tipc: Disabling bearer <eth:syzkaller0>
[   77.184815][ T6958] futex_wake_op: syz.2.259 tries to shift op by -1; fix this program
[   77.188413][ T6957] random: crng reseeded on system resumption
[   77.193223][ T6957] netlink: 'syz.3.260': attribute type 1 has an invalid length.
[   77.195818][ T6957] netlink: 'syz.3.260': attribute type 2 has an invalid length.
[   77.196358][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'.
[   77.333956][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'.
[   77.384794][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'.
[   77.403304][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'.
[   77.405646][ T6981] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   77.423289][ T6981] kvm: pic: non byte read
[   77.425865][ T6981] kvm: pic: non byte read
[   77.428696][ T6981] kvm: pic: non byte read
[   77.431431][ T6981] kvm: pic: non byte read
[   77.434491][ T6981] kvm: pic: non byte read
[   77.437256][ T6981] kvm: pic: non byte read
[   77.443940][ T6985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.272'.
[   77.544359][ T6997] futex_wake_op: syz.0.275 tries to shift op by -1; fix this program
[   77.584171][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'.
[   77.590445][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'.
[   77.593498][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'.
[   77.608198][    T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[   77.773199][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.776479][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[   77.779453][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout
[   77.781596][ T5948] Bluetooth: hci2: command 0x0419 tx timeout
[   77.784265][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout
[   77.788836][    T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   77.791730][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.795919][    T9] usb 7-1: config 0 descriptor??
[   77.800979][ T7006] kvm: emulating exchange as write
[   77.801627][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   77.806063][    T9] dvb-usb: bulk message failed: -22 (3/0)
[   77.821315][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   77.828061][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   77.830491][    T9] usb 7-1: media controller created
[   77.833466][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   77.848445][    T9] dvb-usb: bulk message failed: -22 (6/0)
[   77.850649][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   77.857920][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input7
[   77.866374][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[   77.870347][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   77.925628][ T7024] futex_wake_op: syz.3.284 tries to shift op by -1; fix this program
[   77.952414][ T7026] netlink: 'syz.0.285': attribute type 2 has an invalid length.
[   77.955694][ T7026] netlink: 'syz.0.285': attribute type 2 has an invalid length.
[   77.999722][ T7037] netlink: zone id is out of range
[   78.001958][ T7037] netlink: zone id is out of range
[   78.004165][ T7037] netlink: zone id is out of range
[   78.006532][ T7037] netlink: set zone limit has 8 unknown bytes
[   78.039055][    T9] dvb-usb: bulk message failed: -22 (1/0)
[   78.041233][    T9] dvb-usb: error while querying for an remote control event.
[   78.082609][ T6079] usb 7-1: USB disconnect, device number 4
[   78.106227][ T7055] macvlan0: entered allmulticast mode
[   78.108396][ T7055] veth1_vlan: entered allmulticast mode
[   78.112182][ T6079] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   78.132725][ T7055] pim6reg: entered allmulticast mode
[   78.150190][ T7047] netlink: 'syz.0.288': attribute type 4 has an invalid length.
[   78.152629][ T7047] netlink: 17 bytes leftover after parsing attributes in process `syz.0.288'.
[   78.217818][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'.
[   78.258992][ T7063] futex_wake_op: syz.2.295 tries to shift op by -1; fix this program
[   78.317907][ T1027] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   78.347858][ T5999] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   78.467842][ T1027] usb 6-1: Using ep0 maxpacket: 32
[   78.471667][ T1027] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   78.479035][ T1027] usb 6-1: string descriptor 0 read error: -22
[   78.480608][ T7082] random: crng reseeded on system resumption
[   78.481102][ T1027] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40
[   78.486579][ T1027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.511206][ T5999] usb 8-1: device descriptor read/64, error -71
[   78.568798][ T7098] futex_wake_op: syz.0.305 tries to shift op by -1; fix this program
[   78.637038][ T7102] netlink: 'syz.2.306': attribute type 21 has an invalid length.
[   78.677057][   T40] kauditd_printk_skb: 24 callbacks suppressed
[   78.677069][   T40] audit: type=1400 audit(1773549931.476:422): avc:  denied  { append } for  pid=7108 comm="syz.0.309" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   78.678792][ T7109] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[   78.753266][ T7109] netlink: 'syz.0.309': attribute type 2 has an invalid length.
[   78.768310][ T5999] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   78.831794][ T6028] usb 6-1: USB disconnect, device number 4
[   78.907879][ T5999] usb 8-1: device descriptor read/64, error -71
[   79.018128][ T5999] usb usb8-port1: attempt power cycle
[   79.358738][ T5999] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   79.389344][ T5999] usb 8-1: device descriptor read/8, error -71
[   79.638005][ T5999] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[   79.658326][ T5999] usb 8-1: device descriptor read/8, error -71
[   79.768761][ T5999] usb usb8-port1: unable to enumerate USB device
[   79.858047][ T5948] Bluetooth: hci2: command 0x0419 tx timeout
[   79.858113][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout
[   79.858286][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[   81.381324][   T24] cfg80211: failed to load regulatory.db
[   81.938295][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout
[   81.938344][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout
[   83.940337][   T40] audit: type=1400 audit(1773549936.746:423): avc:  denied  { egress } for  pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[   83.948421][   T40] audit: type=1400 audit(1773549936.746:424): avc:  denied  { sendto } for  pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[   93.964600][ T7124] fuse: Unknown parameter 'gqoup_id'
[   93.966521][   T40] audit: type=1400 audit(1773549946.766:425): avc:  denied  { execute } for  pid=7122 comm="syz.0.312" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   93.969923][ T7129] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   94.005971][ T7135] futex_wake_op: syz.1.316 tries to shift op by -1; fix this program
[   94.031701][ T7142] syz.3.318 (7142): drop_caches: 0
[   94.035275][   T40] audit: type=1400 audit(1773549946.836:426): avc:  denied  { getopt } for  pid=7141 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.078131][ T7146] sctp: [Deprecated]: syz.2.320 (pid 7146) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.078131][ T7146] Use struct sctp_sack_info instead
[   94.119873][   T40] audit: type=1400 audit(1773549946.916:427): avc:  denied  { lock } for  pid=7143 comm="syz.1.319" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   94.131497][ T7151] binder: BC_ACQUIRE_RESULT not supported
[   94.131500][ T7154] binder: BC_ACQUIRE_RESULT not supported
[   94.131509][ T7154] binder: 7148:7154 ioctl c0306201 2000000001c0 returned -22
[   94.144522][ T7157] xt_TCPMSS: Only works on TCP SYN packets
[   94.145873][ T7151] binder: 7148:7151 ioctl c0306201 2000000001c0 returned -22
[   94.181761][ T7160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.191738][   T40] audit: type=1400 audit(1773549946.996:428): avc:  denied  { name_bind } for  pid=7159 comm="syz.2.324" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   94.191952][ T7160] fuse: blksize only supported for fuseblk
[   94.203687][ T7160] __nla_validate_parse: 2 callbacks suppressed
[   94.203697][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'.
[   94.242995][   T40] audit: type=1400 audit(1773549947.046:429): avc:  denied  { append } for  pid=7161 comm="syz.2.325" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   94.580029][ T7175] futex_wake_op: syz.3.328 tries to shift op by -1; fix this program
[   94.633461][   T40] audit: type=1400 audit(1773549947.436:430): avc:  denied  { ioctl } for  pid=7177 comm="syz.3.330" path="socket:[16819]" dev="sockfs" ino=16819 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   94.643975][ T7180] 8021q: VLANs not supported on wg0
[   94.650990][   T40] audit: type=1400 audit(1773549947.446:431): avc:  denied  { map } for  pid=7177 comm="syz.3.330" path="socket:[16819]" dev="sockfs" ino=16819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   94.658725][   T40] audit: type=1400 audit(1773549947.446:432): avc:  denied  { read } for  pid=7177 comm="syz.3.330" path="socket:[16819]" dev="sockfs" ino=16819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   94.658789][ T7180] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   94.669466][ T7180] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   94.671886][   T40] audit: type=1400 audit(1773549947.446:433): avc:  denied  { write } for  pid=7177 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   94.674712][ T7180] vhci_hcd vhci_hcd.0: Device attached
[   94.685652][ T7183] vhci_hcd: connection closed
[   94.688332][   T12] vhci_hcd vhci_hcd.3: stop threads
[   94.702848][   T12] vhci_hcd vhci_hcd.3: release socket
[   94.705453][   T12] vhci_hcd vhci_hcd.3: disconnect device
[   94.710635][ T7188] capability: warning: `syz.2.332' uses 32-bit capabilities (legacy support in use)
[   94.745123][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[   94.908116][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   95.069893][    T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   95.073517][    T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   95.076751][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   95.079980][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.084495][ T7182] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   95.096692][    T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   95.301659][   T24] usb 6-1: USB disconnect, device number 5
[   95.460864][ T7207] ISOFS: Unable to identify CD-ROM format.
[   95.569154][   T40] audit: type=1400 audit(1773549948.376:434): avc:  denied  { getopt } for  pid=7209 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   95.652247][ T7214] futex_wake_op: syz.3.338 tries to shift op by -1; fix this program
[   96.071467][ T7247] futex_wake_op: syz.1.347 tries to shift op by -1; fix this program
[   96.143541][ T7251] trusted_key: syz.1.348 sent an empty control message without MSG_MORE.
[   96.349030][ T7267] netlink: 76 bytes leftover after parsing attributes in process `syz.2.352'.
[   96.354223][ T7267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.352'.
[   96.358013][ T7267] netlink: 43 bytes leftover after parsing attributes in process `syz.2.352'.
[   96.362214][ T7267] netlink: 'syz.2.352': attribute type 6 has an invalid length.
[   96.366046][ T7267] netlink: 'syz.2.352': attribute type 5 has an invalid length.
[   96.369838][ T7267] netlink: 43 bytes leftover after parsing attributes in process `syz.2.352'.
[   96.376680][ T7267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50760 sclass=netlink_route_socket pid=7267 comm=syz.2.352
[   96.745304][ T7284] futex_wake_op: syz.2.357 tries to shift op by -1; fix this program
[   96.966564][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'.
[   96.969719][ T7296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'.
[   96.973388][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.361'.
[   97.111038][ T7300] syzkaller0: entered promiscuous mode
[   97.113509][ T7300] syzkaller0: entered allmulticast mode
[   97.144195][ T7302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.363'.
[   97.227644][ T7309] futex_wake_op: syz.3.366 tries to shift op by -1; fix this program
[   97.299218][ T7316] xt_recent: Unsupported userspace flags (000000b2)
[   97.322647][ T7320] fuse: Bad value for 'fd'
[   97.366529][ T7332] xt_cgroup: path and classid specified
[   97.403189][ T7335] futex_wake_op: syz.3.375 tries to shift op by -1; fix this program
[   97.530260][ T7337] kvm: kvm [7336]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[   97.542397][ T7345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56848 sclass=netlink_route_socket pid=7345 comm=syz.3.379
[   97.733933][   T59] IPVS: starting estimator thread 0...
[   97.838003][ T7353] IPVS: using max 43 ests per chain, 103200 per kthread
[   98.106824][ T7364] futex_wake_op: syz.2.385 tries to shift op by -1; fix this program
[   98.351357][ T7383] syzkaller1: entered promiscuous mode
[   98.353185][ T7383] syzkaller1: entered allmulticast mode
[   98.468553][ T7391] futex_wake_op: syz.2.395 tries to shift op by -1; fix this program
[   98.728239][ T7417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   98.731683][ T7417] block device autoloading is deprecated and will be removed.
[   98.774278][ T7419] overlay: filesystem on ./bus not supported as upperdir
[   98.779481][ T7419] overlay: filesystem on ./bus not supported as upperdir
[   98.855406][ T7425] futex_wake_op: syz.2.404 tries to shift op by -1; fix this program
[   98.887267][ T5948] Bluetooth: hci3: ACL packet for unknown connection handle 201
[   98.888879][ T7428] mmap: syz.1.405 (7428) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.951506][ T7432] MINIX-fs: blocksize too small for device
[   99.224941][ T7459] trusted_key: encrypted_key: master key parameter is missing
[   99.228626][   T40] kauditd_printk_skb: 35 callbacks suppressed
[   99.228636][   T40] audit: type=1400 audit(1773549952.036:470): avc:  denied  { read } for  pid=7458 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   99.231577][ T7459] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   99.239322][ T7460] netlink: 'syz.0.417': attribute type 10 has an invalid length.
[   99.244296][ T7460] team0: Port device dummy0 added
[   99.326956][ T7471] __nla_validate_parse: 7 callbacks suppressed
[   99.326971][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'.
[   99.335787][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'.
[   99.582368][ T7487] NILFS (nbd0): device size too small
[   99.762533][ T6018] Process accounting resumed
[   99.935075][ T7496] Process accounting resumed
[   99.957329][ T7501] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[   99.963271][ T7501] exFAT-fs (nullb0): invalid boot record signature
[   99.965455][ T7501] exFAT-fs (nullb0): failed to read boot sector
[   99.967495][ T7501] exFAT-fs (nullb0): failed to recognize exfat type
[   99.998845][   T40] audit: type=1400 audit(1773549952.806:471): avc:  denied  { map } for  pid=7497 comm="syz.0.428" path="socket:[17194]" dev="sockfs" ino=17194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   99.999479][ T7507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=7507 comm=syz.3.431
[  100.075617][   T40] audit: type=1400 audit(1773549952.876:472): avc:  denied  { append } for  pid=7515 comm="syz.1.435" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  100.567829][   T59] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  100.733367][ T7553] syz_tun: entered allmulticast mode
[  100.740726][   T59] usb 6-1: config 0 has no interfaces?
[  100.744901][   T59] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  100.748163][   T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.750881][   T59] usb 6-1: Product: syz
[  100.752259][   T59] usb 6-1: Manufacturer: syz
[  100.753804][   T59] usb 6-1: SerialNumber: syz
[  100.755583][   T40] audit: type=1400 audit(1773549953.556:473): avc:  denied  { audit_control } for  pid=7552 comm="syz.0.446" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  100.756291][ T7552] syz_tun: left allmulticast mode
[  100.756596][   T59] usb 6-1: config 0 descriptor??
[  100.795831][   T40] audit: type=1400 audit(1773549953.596:474): avc:  denied  { node_bind } for  pid=7554 comm="syz.0.447" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  100.837922][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  100.860808][   T40] audit: type=1400 audit(1773549953.666:475): avc:  denied  { read } for  pid=7558 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  100.965941][ T7569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  100.966018][ T6079] usb 6-1: USB disconnect, device number 6
[  100.997975][   T24] usb 7-1: Using ep0 maxpacket: 16
[  101.002078][   T24] usb 7-1: config 0 has no interfaces?
[  101.008579][   T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  101.012144][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  101.015153][   T24] usb 7-1: SerialNumber: syz
[  101.021604][   T24] usb 7-1: config 0 descriptor??
[  101.466453][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.453'.
[  101.523934][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'.
[  101.746168][   T40] audit: type=1400 audit(1773549954.546:476): avc:  denied  { read } for  pid=7605 comm="syz.1.457" lport=49790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  101.926427][   T40] audit: type=1400 audit(1773549954.726:477): avc:  denied  { mounton } for  pid=7624 comm="syz.3.463" path="/file0" dev="ramfs" ino=18944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  101.926561][ T7625] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  101.936994][ T7625] overlayfs: failed to set xattr on upper
[  101.939254][ T7625] overlayfs: ...falling back to redirect_dir=nofollow.
[  101.941458][ T7625] overlayfs: ...falling back to index=off.
[  101.943390][ T7625] overlayfs: ...falling back to uuid=null.
[  101.951939][ T7625] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  101.982518][ T7632] tmpfs: Bad value for 'mpol'
[  102.081055][ T7639] netlink: 'syz.3.469': attribute type 1 has an invalid length.
[  102.092542][ T7639] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.116804][ T7639] bond1: (slave veth3): Enslaving as an active interface with a down link
[  102.132695][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.468'.
[  102.175425][ T7644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7644 comm=syz.3.469
[  102.195652][ T7644] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  102.228304][   T40] audit: type=1400 audit(1773549955.026:478): avc:  denied  { accept } for  pid=7645 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  102.327471][ T7661] overlay: Bad value for 'verity'
[  102.328795][ T7659] overlayfs: overlapping lowerdir path
[  102.363065][   T40] audit: type=1400 audit(1773549955.166:479): avc:  denied  { read } for  pid=7662 comm="syz.1.476" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  102.447499][ T7675] netlink: 'syz.1.479': attribute type 10 has an invalid length.
[  102.452179][ T7675] team0: Device ipvlan1 failed to register rx_handler
[  102.649792][ T7681] syzkaller0: entered promiscuous mode
[  102.651678][ T7681] syzkaller0: entered allmulticast mode
[  102.657831][ T7681] qnx6: unable to read the first superblock
[  102.660348][ T7681] qnx6: unable to read the first superblock
[  102.662306][ T7681] qnx6: unable to read the first superblock
[  102.954063][ T7693] Invalid source name
[  102.955460][ T7693] UBIFS error (pid: 7693): cannot open "/dev/sg0", error -22
[  102.960206][ T7696] x_tables: ip_tables: osf match: only valid for protocol 6
[  102.978889][ T7696] comedi comedi3: comedi_config --init_data is deprecated
[  103.016510][ T7703] Can't find a SQUASHFS superblock on nullb0
[  103.075878][ T7716] Can't find a SQUASHFS superblock on nullb0
[  103.242832][   T50] IPVS: starting estimator thread 0...
[  103.320547][ T7741] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2 sclass=netlink_tcpdiag_socket pid=7741 comm=syz.0.501
[  103.347890][ T7731] IPVS: using max 43 ests per chain, 103200 per kthread
[  103.400986][   T50] usb 7-1: USB disconnect, device number 5
[  103.481156][ T7757] overlay: Unknown parameter 'smackfsfloor'
[  103.523399][ T7762] netlink: 'syz.0.508': attribute type 10 has an invalid length.
[  103.528056][ T7762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.531899][ T7762] .`: (slave batadv0): Enslaving as an active interface with an up link
[  103.587679][ T7769] sctp: [Deprecated]: syz.1.510 (pid 7769) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.587679][ T7769] Use struct sctp_sack_info instead
[  103.739174][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[  104.368679][ T7798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'.
[  104.483067][ T7806] xt_cgroup: xt_cgroup: no path or classid specified
[  104.487095][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  104.487106][   T40] audit: type=1400 audit(1773549957.286:494): avc:  denied  { shutdown } for  pid=7804 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  104.537608][ T7812] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  104.736322][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'.
[  104.741470][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'.
[  104.775775][ T7832] veth0_to_bond: entered allmulticast mode
[  104.805488][ T7834] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[  104.808293][ T1027] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  104.829089][ T7834] netlink: 'syz.0.529': attribute type 10 has an invalid length.
[  104.831783][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'.
[  104.834716][ T7834] dummy0: entered promiscuous mode
[  104.842677][ T7834] team0: Port device dummy0 removed
[  104.908697][ T7833] delete_channel: no stack
[  104.937887][ T1027] usb 6-1: device descriptor read/64, error -71
[  105.197870][ T1027] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  105.235437][ T7870] futex_wake_op: syz.0.537 tries to shift op by 32; fix this program
[  105.347864][ T1027] usb 6-1: device descriptor read/64, error -71
[  105.347964][   T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  105.368128][   T40] audit: type=1400 audit(1773549958.176:495): avc:  denied  { map } for  pid=7872 comm="syz.0.538" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  105.377949][   T40] audit: type=1400 audit(1773549958.176:496): avc:  denied  { execute } for  pid=7872 comm="syz.0.538" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  105.468300][ T1027] usb usb6-port1: attempt power cycle
[  105.507851][   T24] usb 7-1: Using ep0 maxpacket: 32
[  105.510856][   T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  105.513560][   T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  105.516378][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  105.519654][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  105.522759][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  105.525966][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102
[  105.531458][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  105.535820][   T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  105.541279][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.545548][   T24] usb 7-1: config 0 descriptor??
[  105.547725][ T7864] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  105.753647][   T24] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  105.772427][ T6079] usb 7-1: USB disconnect, device number 6
[  105.788518][ T6079] usblp0: removed
[  105.827883][ T1027] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  105.848794][ T1027] usb 6-1: device descriptor read/8, error -71
[  105.923067][   T40] audit: type=1400 audit(1773549958.726:497): avc:  denied  { write } for  pid=7896 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  105.990712][ T7895] syzkaller0: entered promiscuous mode
[  105.992560][ T7895] syzkaller0: entered allmulticast mode
[  106.001549][   T40] audit: type=1400 audit(1773549958.806:498): avc:  denied  { mount } for  pid=7894 comm="syz.2.546" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  106.010873][ T7895] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  106.011161][   T40] audit: type=1400 audit(1773549958.806:499): avc:  denied  { write } for  pid=7894 comm="syz.2.546" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  106.016320][ T7903] 9p: Bad value for 'msize'
[  106.022624][   T40] audit: type=1400 audit(1773549958.806:500): avc:  denied  { bpf } for  pid=7894 comm="syz.2.546" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  106.100651][ T1027] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  106.119027][ T1027] usb 6-1: device descriptor read/8, error -71
[  106.169228][   T40] audit: type=1400 audit(1773549958.976:501): avc:  denied  { perfmon } for  pid=7911 comm="syz.0.553" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  106.238630][ T1027] usb usb6-port1: unable to enumerate USB device
[  106.307745][ T7921] trusted_key: encrypted_key: hex blob is missing
[  106.319699][ T7921] openvswitch: netlink: IP tunnel dst address not specified
[  106.970794][ T7932] program syz.0.560 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.012693][   T40] audit: type=1400 audit(1773549959.816:502): avc:  denied  { unmount } for  pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  107.235561][ T7951] netlink: 'syz.3.568': attribute type 1 has an invalid length.
[  107.252576][ T7951] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.258446][   T40] audit: type=1400 audit(1773549960.066:503): avc:  denied  { write } for  pid=7957 comm="syz.0.569" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  107.286270][ T7951] bond2: (slave veth5): Enslaving as an active interface with a down link
[  107.293738][ T7958] pim6reg: entered allmulticast mode
[  107.301993][ T7951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7951 comm=syz.3.568
[  107.320905][ T7951] bond2: (slave dummy0): making interface the new active one
[  107.324639][ T7951] dummy0: entered promiscuous mode
[  107.326502][ T7951] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  107.332361][ T7951] netlink: 'syz.3.568': attribute type 10 has an invalid length.
[  107.343292][ T7951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.568'.
[  107.349047][ T7951] bond2: (slave dummy0): Releasing active interface
[  107.721837][ T7995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  107.724022][ T7995] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  107.726785][ T7995] vhci_hcd vhci_hcd.0: Device attached
[  107.731030][ T7999] vhci_hcd: connection closed
[  107.731595][   T79] vhci_hcd vhci_hcd.0: stop threads
[  107.734848][   T79] vhci_hcd vhci_hcd.0: release socket
[  107.736589][   T79] vhci_hcd vhci_hcd.0: disconnect device
[  107.759547][ T8002] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  107.789238][ T8002] overlay: ./file0 is not a directory
[  107.792468][ T8002] xt_hashlimit: max too large, truncated to 1048576
[  107.845348][ T8004] loop2: detected capacity change from 0 to 3
[  107.851192][ T8004] ldm_validate_privheads(): Disk read failed.
[  107.853729][ T8004] Dev loop2: unable to read RDB block 3
[  107.855547][ T8004]  loop2: unable to read partition table
[  107.857537][ T8004] loop2: partition table beyond EOD, truncated
[  107.860600][ T8004] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  108.217891][   T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  108.287544][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'.
[  108.290904][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'.
[  108.354066][ T8051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.370041][   T24] usb 6-1: Using ep0 maxpacket: 8
[  108.373002][   T24] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  108.375811][   T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  108.380530][   T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  108.384478][   T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  108.389336][   T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  108.393196][   T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.397426][   T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  108.400593][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.607618][   T24] usb 6-1: usb_control_msg returned -32
[  108.610033][   T24] usbtmc 6-1:16.0: can't read capabilities
[  108.627650][   T50] usb 6-1: USB disconnect, device number 11
[  108.671902][ T8095] program syz.0.606 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.672432][ T8096] program syz.0.606 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.685714][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'.
[  108.690170][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'.
[  108.691472][ T8096] binder: 8094:8096 ioctl 5000943f 200000002ec0 returned -22
[  108.693094][ T8099] netlink: 'syz.3.607': attribute type 11 has an invalid length.
[  108.699361][ T8095] random: crng reseeded on system resumption
[  108.708379][ T8099] netlink: 'syz.3.607': attribute type 7 has an invalid length.
[  108.760678][ T8108] fuse: Unknown parameter '0x0000000000000004'
[  108.785290][ T8112] netlink: 'syz.1.611': attribute type 1 has an invalid length.
[  108.831599][ T8118] program syz.0.613 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.917316][ T8131] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  108.929179][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[  108.976378][ T8144] netlink: 'syz.1.623': attribute type 3 has an invalid length.
[  109.189158][ T8163] misc userio: The device must be registered before sending interrupts
[  109.238440][ T8180] Bluetooth: MGMT ver 1.23
[  109.240981][ T8180] Bluetooth: hci0: invalid len left 7, exp >= 50
[  109.283265][ T8189] 9pnet_virtio: no channels available for device syz
[  109.363408][ T8187] overlayfs: failed to resolve './bus': -2
[  109.476069][ T8212] kvm: pic: single mode not supported
[  109.492139][   T40] kauditd_printk_skb: 91 callbacks suppressed
[  109.492153][   T40] audit: type=1400 audit(1773549962.296:595): avc:  denied  { read } for  pid=8213 comm="syz.3.647" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  109.505932][   T40] audit: type=1400 audit(1773549962.296:596): avc:  denied  { read append } for  pid=8213 comm="syz.3.647" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  109.515728][   T40] audit: type=1400 audit(1773549962.296:597): avc:  denied  { open } for  pid=8213 comm="syz.3.647" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  109.526302][   T40] audit: type=1400 audit(1773549962.296:598): avc:  denied  { ioctl } for  pid=8213 comm="syz.3.647" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  109.599952][   T40] audit: type=1400 audit(1773549962.406:599): avc:  denied  { nlmsg_read } for  pid=8218 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  109.606799][   T40] audit: type=1400 audit(1773549962.406:600): avc:  denied  { mounton } for  pid=8218 comm="syz.1.648" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  109.664700][   T40] audit: type=1400 audit(1773549962.466:601): avc:  denied  { append } for  pid=8226 comm="syz.0.650" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  109.676067][   T40] audit: type=1400 audit(1773549962.476:602): avc:  denied  { bind } for  pid=8226 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  109.686175][   T40] audit: type=1400 audit(1773549962.476:603): avc:  denied  { setopt } for  pid=8226 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  109.732442][ T8236] dvmrp1: tun_chr_ioctl cmd 1074025672
[  109.734329][ T8236] dvmrp1: ignored: set checksum disabled
[  109.740176][   T40] audit: type=1400 audit(1773549962.546:604): avc:  denied  { open } for  pid=8235 comm="syz.1.653" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  109.855339][ T8242] netlink: 'syz.1.655': attribute type 1 has an invalid length.
[  109.878986][ T8242] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.883096][ T8242] bond1: (slave bond2): making interface the new active one
[  109.885946][ T8242] bond1: (slave bond2): Enslaving as an active interface with an up link
[  109.896162][ T8242] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  109.902201][ T8242] __nla_validate_parse: 1 callbacks suppressed
[  109.902212][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.655'.
[  109.909650][ T8242] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.014100][ T8248] netlink: 'syz.1.657': attribute type 1 has an invalid length.
[  110.267874][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  110.407458][ T8258] FAULT_INJECTION: forcing a failure.
[  110.407458][ T8258] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  110.414987][ T8258] CPU: 2 UID: 0 PID: 8258 Comm: syz.2.662 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.415014][ T8258] Tainted: [L]=SOFTLOCKUP
[  110.415022][ T8258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.415031][ T8258] Call Trace:
[  110.415037][ T8258]  <TASK>
[  110.415044][ T8258]  dump_stack_lvl+0x100/0x190
[  110.415077][ T8258]  should_fail_ex.cold+0x5/0xa
[  110.415099][ T8258]  _copy_from_user+0x2e/0xd0
[  110.415129][ T8258]  copy_msghdr_from_user+0x9f/0x4f0
[  110.415164][ T8258]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  110.415203][ T8258]  ___sys_sendmsg+0x106/0x1e0
[  110.415232][ T8258]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.415287][ T8258]  __sys_sendmsg+0x170/0x220
[  110.415311][ T8258]  ? __pfx___sys_sendmsg+0x10/0x10
[  110.415347][ T8258]  do_syscall_64+0x106/0xf80
[  110.415370][ T8258]  ? clear_bhb_loop+0x40/0x90
[  110.415391][ T8258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.415409][ T8258] RIP: 0033:0x7f1dd619c799
[  110.415424][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.415456][ T8258] RSP: 002b:00007f1dd43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.415474][ T8258] RAX: ffffffffffffffda RBX: 00007f1dd6415fa0 RCX: 00007f1dd619c799
[  110.415486][ T8258] RDX: 0000000000008010 RSI: 00002000000002c0 RDI: 0000000000000004
[  110.415496][ T8258] RBP: 00007f1dd43f6090 R08: 0000000000000000 R09: 0000000000000000
[  110.415506][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.415516][ T8258] R13: 00007f1dd6416038 R14: 00007f1dd6415fa0 R15: 00007fff31672278
[  110.415538][ T8258]  </TASK>
[  110.417825][   T10] usb 6-1: Using ep0 maxpacket: 8
[  110.481701][   T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  110.484228][   T10] usb 6-1: config 179 has no interface number 0
[  110.486307][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  110.490173][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  110.493837][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  110.498581][   T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  110.502308][   T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  110.506583][   T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  110.509591][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.515785][ T8248] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  110.628832][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'.
[  110.653514][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'.
[  110.733231][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input9
[  110.837664][ T8286] openvswitch: netlink: IP tunnel dst address not specified
[  110.895358][ T8291] FAULT_INJECTION: forcing a failure.
[  110.895358][ T8291] name failslab, interval 1, probability 0, space 0, times 1
[  110.900977][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.2.675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.900996][ T8291] Tainted: [L]=SOFTLOCKUP
[  110.901000][ T8291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  110.901006][ T8291] Call Trace:
[  110.901010][ T8291]  <TASK>
[  110.901015][ T8291]  dump_stack_lvl+0x100/0x190
[  110.901036][ T8291]  should_fail_ex.cold+0x5/0xa
[  110.901050][ T8291]  should_failslab+0xc2/0x120
[  110.901062][ T8291]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  110.901078][ T8291]  ? __alloc_skb+0x140/0x710
[  110.901093][ T8291]  __alloc_skb+0x140/0x710
[  110.901105][ T8291]  ? __alloc_skb+0x5b7/0x710
[  110.901117][ T8291]  ? __pfx___alloc_skb+0x10/0x10
[  110.901133][ T8291]  netlink_alloc_large_skb+0x69/0x150
[  110.901150][ T8291]  netlink_sendmsg+0x680/0xda0
[  110.901168][ T8291]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.901187][ T8291]  ? __might_fault+0x20/0x140
[  110.901207][ T8291]  ____sys_sendmsg+0x9e1/0xb70
[  110.901223][ T8291]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.901240][ T8291]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.901262][ T8291]  ___sys_sendmsg+0x190/0x1e0
[  110.901281][ T8291]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.901314][ T8291]  __sys_sendmsg+0x170/0x220
[  110.901328][ T8291]  ? __pfx___sys_sendmsg+0x10/0x10
[  110.901350][ T8291]  do_syscall_64+0x106/0xf80
[  110.901364][ T8291]  ? clear_bhb_loop+0x40/0x90
[  110.901377][ T8291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.901388][ T8291] RIP: 0033:0x7f1dd619c799
[  110.901398][ T8291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.901409][ T8291] RSP: 002b:00007f1dd43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.901420][ T8291] RAX: ffffffffffffffda RBX: 00007f1dd6415fa0 RCX: 00007f1dd619c799
[  110.901426][ T8291] RDX: 0000000000008010 RSI: 00002000000002c0 RDI: 0000000000000004
[  110.901432][ T8291] RBP: 00007f1dd43f6090 R08: 0000000000000000 R09: 0000000000000000
[  110.901438][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.901444][ T8291] R13: 00007f1dd6416038 R14: 00007f1dd6415fa0 R15: 00007fff31672278
[  110.901458][ T8291]  </TASK>
[  110.994015][ T6028] usb 6-1: USB disconnect, device number 12
[  110.994065][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  110.999066][    C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  111.141473][ T8314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8314 comm=syz.0.682
[  111.368647][ T8321] nfs4: Unknown parameter '��������'
[  111.373002][ T8321] use of bytesused == 0 is deprecated and will be removed in the future,
[  111.376639][ T8321] use the actual size instead.
[  111.379947][ T8321] fuse: Bad value for 'user_id'
[  111.381740][ T8321] fuse: Bad value for 'user_id'
[  112.032959][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'.
[  112.050124][ T8341] netlink: 3 bytes leftover after parsing attributes in process `syz.3.689'.
[  112.116974][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'.
[  112.275306][ T8358] FAULT_INJECTION: forcing a failure.
[  112.275306][ T8358] name failslab, interval 1, probability 0, space 0, times 0
[  112.282458][ T8358] CPU: 1 UID: 0 PID: 8358 Comm: syz.2.697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.282486][ T8358] Tainted: [L]=SOFTLOCKUP
[  112.282492][ T8358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.282501][ T8358] Call Trace:
[  112.282515][ T8358]  <TASK>
[  112.282522][ T8358]  dump_stack_lvl+0x100/0x190
[  112.282560][ T8358]  should_fail_ex.cold+0x5/0xa
[  112.282584][ T8358]  should_failslab+0xc2/0x120
[  112.282602][ T8358]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  112.282625][ T8358]  ? skb_clone+0x190/0x400
[  112.282657][ T8358]  skb_clone+0x190/0x400
[  112.282678][ T8358]  netlink_deliver_tap+0xaed/0xcc0
[  112.282708][ T8358]  netlink_unicast+0x650/0x870
[  112.282736][ T8358]  ? __pfx_netlink_unicast+0x10/0x10
[  112.282769][ T8358]  netlink_sendmsg+0x8b0/0xda0
[  112.282798][ T8358]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.282820][ T8358]  ? __might_fault+0x20/0x140
[  112.282853][ T8358]  ____sys_sendmsg+0x9e1/0xb70
[  112.282876][ T8358]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.282902][ T8358]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.282938][ T8358]  ___sys_sendmsg+0x190/0x1e0
[  112.282967][ T8358]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.283025][ T8358]  __sys_sendmsg+0x170/0x220
[  112.283048][ T8358]  ? __pfx___sys_sendmsg+0x10/0x10
[  112.283086][ T8358]  do_syscall_64+0x106/0xf80
[  112.283107][ T8358]  ? clear_bhb_loop+0x40/0x90
[  112.283128][ T8358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.283147][ T8358] RIP: 0033:0x7f1dd619c799
[  112.283168][ T8358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.283183][ T8358] RSP: 002b:00007f1dd43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.283201][ T8358] RAX: ffffffffffffffda RBX: 00007f1dd6415fa0 RCX: 00007f1dd619c799
[  112.283212][ T8358] RDX: 0000000000008010 RSI: 00002000000002c0 RDI: 0000000000000004
[  112.283222][ T8358] RBP: 00007f1dd43f6090 R08: 0000000000000000 R09: 0000000000000000
[  112.283231][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.283241][ T8358] R13: 00007f1dd6416038 R14: 00007f1dd6415fa0 R15: 00007fff31672278
[  112.283265][ T8358]  </TASK>
[  112.811946][ T8383] FAULT_INJECTION: forcing a failure.
[  112.811946][ T8383] name failslab, interval 1, probability 0, space 0, times 0
[  112.816342][ T8383] CPU: 3 UID: 0 PID: 8383 Comm: syz.0.708 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.816368][ T8383] Tainted: [L]=SOFTLOCKUP
[  112.816374][ T8383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  112.816384][ T8383] Call Trace:
[  112.816391][ T8383]  <TASK>
[  112.816399][ T8383]  dump_stack_lvl+0x100/0x190
[  112.816430][ T8383]  should_fail_ex.cold+0x5/0xa
[  112.816453][ T8383]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[  112.816481][ T8383]  should_failslab+0xc2/0x120
[  112.816497][ T8383]  __kmalloc_noprof+0xe0/0x850
[  112.816527][ T8383]  genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280
[  112.816556][ T8383]  ? cred_has_capability.isra.0+0x186/0x300
[  112.816592][ T8383]  genl_family_rcv_msg_doit+0xc7/0x300
[  112.816621][ T8383]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  112.816656][ T8383]  ? bpf_lsm_capable+0x9/0x10
[  112.816673][ T8383]  ? security_capable+0x80/0x260
[  112.816693][ T8383]  ? ns_capable+0xd2/0xf0
[  112.816715][ T8383]  genl_rcv_msg+0x560/0x800
[  112.816745][ T8383]  ? __pfx_genl_rcv_msg+0x10/0x10
[  112.816772][ T8383]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  112.816790][ T8383]  ? __pfx_nl80211_join_mesh+0x10/0x10
[  112.816816][ T8383]  ? __pfx_nl80211_post_doit+0x10/0x10
[  112.816837][ T8383]  ? __lock_acquire+0x4a5/0x2630
[  112.816869][ T8383]  netlink_rcv_skb+0x159/0x420
[  112.816893][ T8383]  ? __pfx_genl_rcv_msg+0x10/0x10
[  112.816922][ T8383]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  112.816957][ T8383]  ? netlink_deliver_tap+0x1ae/0xcc0
[  112.816985][ T8383]  genl_rcv+0x28/0x40
[  112.817008][ T8383]  netlink_unicast+0x5aa/0x870
[  112.817036][ T8383]  ? __pfx_netlink_unicast+0x10/0x10
[  112.817071][ T8383]  netlink_sendmsg+0x8b0/0xda0
[  112.817099][ T8383]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.817127][ T8383]  ? __might_fault+0x20/0x140
[  112.817160][ T8383]  ____sys_sendmsg+0x9e1/0xb70
[  112.817186][ T8383]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.817212][ T8383]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.817246][ T8383]  ___sys_sendmsg+0x190/0x1e0
[  112.817275][ T8383]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.817334][ T8383]  __sys_sendmsg+0x170/0x220
[  112.817357][ T8383]  ? __pfx___sys_sendmsg+0x10/0x10
[  112.817396][ T8383]  do_syscall_64+0x106/0xf80
[  112.817417][ T8383]  ? clear_bhb_loop+0x40/0x90
[  112.817438][ T8383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.817456][ T8383] RIP: 0033:0x7f1d98f9c799
[  112.817471][ T8383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.817486][ T8383] RSP: 002b:00007f1d99ee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.817503][ T8383] RAX: ffffffffffffffda RBX: 00007f1d99215fa0 RCX: 00007f1d98f9c799
[  112.817514][ T8383] RDX: 0000000000008010 RSI: 00002000000002c0 RDI: 0000000000000004
[  112.817523][ T8383] RBP: 00007f1d99ee5090 R08: 0000000000000000 R09: 0000000000000000
[  112.817533][ T8383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.817542][ T8383] R13: 00007f1d99216038 R14: 00007f1d99215fa0 R15: 00007ffca758fcd8
[  112.817566][ T8383]  </TASK>
[  113.075946][ T8389] syzkaller0: entered promiscuous mode
[  113.077918][ T8389] syzkaller0: entered allmulticast mode
[  113.099118][ T8389] hfsplus: unable to find HFS+ superblock
[  113.292948][ T8405] macsec1: entered promiscuous mode
[  113.294741][ T8405] macsec1: entered allmulticast mode
[  113.296639][ T8407] FAULT_INJECTION: forcing a failure.
[  113.296639][ T8407] name failslab, interval 1, probability 0, space 0, times 0
[  113.301082][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.0.718 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  113.301100][ T8407] Tainted: [L]=SOFTLOCKUP
[  113.301104][ T8407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  113.301110][ T8407] Call Trace:
[  113.301114][ T8407]  <TASK>
[  113.301119][ T8407]  dump_stack_lvl+0x100/0x190
[  113.301140][ T8407]  should_fail_ex.cold+0x5/0xa
[  113.301155][ T8407]  should_failslab+0xc2/0x120
[  113.301166][ T8407]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  113.301182][ T8407]  ? __alloc_skb+0x140/0x710
[  113.301197][ T8407]  __alloc_skb+0x140/0x710
[  113.301209][ T8407]  ? __alloc_skb+0x5b7/0x710
[  113.301221][ T8407]  ? __pfx___alloc_skb+0x10/0x10
[  113.301233][ T8407]  ? genl_rcv_msg+0x4be/0x800
[  113.301253][ T8407]  netlink_ack+0x117/0xb80
[  113.301273][ T8407]  netlink_rcv_skb+0x333/0x420
[  113.301288][ T8407]  ? __pfx_genl_rcv_msg+0x10/0x10
[  113.301306][ T8407]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  113.301328][ T8407]  ? netlink_deliver_tap+0x1ae/0xcc0
[  113.301344][ T8407]  genl_rcv+0x28/0x40
[  113.301360][ T8407]  netlink_unicast+0x5aa/0x870
[  113.301377][ T8407]  ? __pfx_netlink_unicast+0x10/0x10
[  113.301398][ T8407]  netlink_sendmsg+0x8b0/0xda0
[  113.301416][ T8407]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.301430][ T8407]  ? __might_fault+0x20/0x140
[  113.301450][ T8407]  ____sys_sendmsg+0x9e1/0xb70
[  113.301466][ T8407]  ? __pfx_netlink_sendmsg+0x10/0x10
[  113.301482][ T8407]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.301506][ T8407]  ___sys_sendmsg+0x190/0x1e0
[  113.301524][ T8407]  ? __pfx____sys_sendmsg+0x10/0x10
[  113.301559][ T8407]  __sys_sendmsg+0x170/0x220
[  113.301572][ T8407]  ? __pfx___sys_sendmsg+0x10/0x10
[  113.301595][ T8407]  do_syscall_64+0x106/0xf80
[  113.301609][ T8407]  ? clear_bhb_loop+0x40/0x90
[  113.301627][ T8407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.301639][ T8407] RIP: 0033:0x7f1d98f9c799
[  113.301649][ T8407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.301660][ T8407] RSP: 002b:00007f1d99ee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.301696][ T8407] RAX: ffffffffffffffda RBX: 00007f1d99215fa0 RCX: 00007f1d98f9c799
[  113.301705][ T8407] RDX: 0000000000008010 RSI: 00002000000002c0 RDI: 0000000000000004
[  113.301714][ T8407] RBP: 00007f1d99ee5090 R08: 0000000000000000 R09: 0000000000000000
[  113.301723][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.301729][ T8407] R13: 00007f1d99216038 R14: 00007f1d99215fa0 R15: 00007ffca758fcd8
[  113.301744][ T8407]  </TASK>
[  113.487500][ T8426] fuse: Unknown parameter 'g'
[  113.495418][ T8427] option changes via remount are deprecated (pid=8425 comm=syz.0.725)
[  113.536547][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'.
[  113.544619][ T8434] hsr_slave_1 (unregistering): left promiscuous mode
[  113.595034][ T8436] ALSA: seq fatal error: cannot create timer (-22)
[  113.677080][ T8442] cgroup: release_agent respecified
[  113.780513][ T8459] xt_hashlimit: size too large, truncated to 1048576
[  113.821408][ T8465] netlink: del zone limit has 4 unknown bytes
[  113.937972][ T8440] netfs: Couldn't get user pages (rc=-14)
[  113.975863][ T8440] afs: Unknown parameter 'au�������yn'
[  114.040610][ T8482] SELinux: failed to load policy
[  114.134755][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'.
[  114.139316][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'.
[  114.151162][ T8497] netlink: 'syz.0.750': attribute type 4 has an invalid length.
[  114.186339][ T8501] netlink: 'syz.3.751': attribute type 1 has an invalid length.
[  114.214076][ T8505] veth1_to_team: entered promiscuous mode
[  114.227336][ T8511] libceph: secret too big 289
[  114.235343][ T8511] netlink: 'syz.0.754': attribute type 5 has an invalid length.
[  114.252350][ T8514] sctp: [Deprecated]: syz.2.755 (pid 8514) Use of int in max_burst socket option deprecated.
[  114.252350][ T8514] Use struct sctp_assoc_value instead
[  114.288343][ T8504] veth1_to_team: left promiscuous mode
[  114.318067][ T8523] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  114.324826][ T8523] macsec1: entered promiscuous mode
[  114.326479][ T8523] macsec1: entered allmulticast mode
[  114.382618][ T8532] FAULT_INJECTION: forcing a failure.
[  114.382618][ T8532] name failslab, interval 1, probability 0, space 0, times 0
[  114.388283][ T8532] CPU: 0 UID: 0 PID: 8532 Comm: syz.3.763 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.388309][ T8532] Tainted: [L]=SOFTLOCKUP
[  114.388314][ T8532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  114.388324][ T8532] Call Trace:
[  114.388330][ T8532]  <TASK>
[  114.388336][ T8532]  dump_stack_lvl+0x100/0x190
[  114.388366][ T8532]  should_fail_ex.cold+0x5/0xa
[  114.388388][ T8532]  should_failslab+0xc2/0x120
[  114.388404][ T8532]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  114.388443][ T8532]  ? skb_clone+0x190/0x400
[  114.388468][ T8532]  skb_clone+0x190/0x400
[  114.388488][ T8532]  netlink_deliver_tap+0xaed/0xcc0
[  114.388514][ T8532]  netlink_unicast+0x70c/0x870
[  114.388540][ T8532]  ? __pfx_netlink_unicast+0x10/0x10
[  114.388561][ T8532]  ? __alloc_skb+0x5b7/0x710
[  114.388585][ T8532]  ? genl_rcv_msg+0x4be/0x800
[  114.388615][ T8532]  netlink_ack+0x655/0xb80
[  114.388643][ T8532]  netlink_rcv_skb+0x333/0x420
[  114.388664][ T8532]  ? __pfx_genl_rcv_msg+0x10/0x10
[  114.388690][ T8532]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  114.388722][ T8532]  ? netlink_deliver_tap+0x1ae/0xcc0
[  114.388746][ T8532]  genl_rcv+0x28/0x40
[  114.388768][ T8532]  netlink_unicast+0x5aa/0x870
[  114.388793][ T8532]  ? __pfx_netlink_unicast+0x10/0x10
[  114.388823][ T8532]  netlink_sendmsg+0x8b0/0xda0
[  114.388850][ T8532]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.388870][ T8532]  ? __might_fault+0x20/0x140
[  114.388900][ T8532]  ____sys_sendmsg+0x9e1/0xb70
[  114.388922][ T8532]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.388945][ T8532]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.388979][ T8532]  ___sys_sendmsg+0x190/0x1e0
[  114.389005][ T8532]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.389056][ T8532]  __sys_sendmsg+0x170/0x220
[  114.389076][ T8532]  ? __pfx___sys_sendmsg+0x10/0x10
[  114.389111][ T8532]  do_syscall_64+0x106/0xf80
[  114.389131][ T8532]  ? clear_bhb_loop+0x40/0x90
[  114.389151][ T8532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.389167][ T8532] RIP: 0033:0x7f5465d9c799
[  114.389181][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.389197][ T8532] RSP: 002b:00007f5466cf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.389213][ T8532] RAX: ffffffffffffffda RBX: 00007f5466015fa0 RCX: 00007f5465d9c799
[  114.389223][ T8532] RDX: 0000000000008010 RSI: 00002000000002c0 RDI: 0000000000000004
[  114.389233][ T8532] RBP: 00007f5466cf1090 R08: 0000000000000000 R09: 0000000000000000
[  114.389243][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.389252][ T8532] R13: 00007f5466016038 R14: 00007f5466015fa0 R15: 00007ffe52b378b8
[  114.389274][ T8532]  </TASK>
[  114.448267][ T8528] fuseblk: Unknown parameter 'fd0x0000000000000005'
[  114.490484][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'.
[  114.598053][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  114.703071][   T40] kauditd_printk_skb: 116 callbacks suppressed
[  114.703089][   T40] audit: type=1400 audit(1773549967.506:721): avc:  denied  { getopt } for  pid=8540 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  114.748142][   T10] usb 5-1: Using ep0 maxpacket: 8
[  114.751216][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  114.753999][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  114.757235][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  114.760665][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  114.764049][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.768576][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  114.771648][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.805640][ T8549] tipc: Started in network mode
[  114.807392][ T8549] tipc: Node identity cad5e906066c, cluster identity 4711
[  114.810341][ T8549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.812702][ T8550] syzkaller0: entered promiscuous mode
[  114.814574][ T8550] syzkaller0: entered allmulticast mode
[  114.825604][ T8550] tipc: Resetting bearer <eth:syzkaller0>
[  114.843518][ T8550] tipc: Disabling bearer <eth:syzkaller0>
[  114.980118][   T10] usb 5-1: usb_control_msg returned -32
[  114.982073][   T10] usbtmc 5-1:16.0: can't read capabilities
[  114.990984][   T40] audit: type=1400 audit(1773549967.796:722): avc:  denied  { execute } for  pid=8553 comm="syz.1.768" name="file2" dev="tmpfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  114.998120][   T40] audit: type=1400 audit(1773549967.796:723): avc:  denied  { execute_no_trans } for  pid=8553 comm="syz.1.768" path="/210/file2" dev="tmpfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  115.023631][ T8557] __nla_validate_parse: 3 callbacks suppressed
[  115.023645][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'.
[  115.032633][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'.
[  115.173321][ T8571] FAULT_INJECTION: forcing a failure.
[  115.173321][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.177956][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.2.773 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.177973][ T8571] Tainted: [L]=SOFTLOCKUP
[  115.177977][ T8571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  115.177984][ T8571] Call Trace:
[  115.177987][ T8571]  <TASK>
[  115.177992][ T8571]  dump_stack_lvl+0x100/0x190
[  115.178013][ T8571]  should_fail_ex.cold+0x5/0xa
[  115.178028][ T8571]  _copy_to_user+0x32/0xd0
[  115.178047][ T8571]  simple_read_from_buffer+0xcb/0x170
[  115.178066][ T8571]  proc_fail_nth_read+0x1af/0x230
[  115.178083][ T8571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.178098][ T8571]  ? rw_verify_area+0xce/0x6d0
[  115.178114][ T8571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.178129][ T8571]  vfs_read+0x1e4/0xb30
[  115.178147][ T8571]  ? __pfx_vfs_read+0x10/0x10
[  115.178163][ T8571]  ? __fget_files+0x215/0x3d0
[  115.178177][ T8571]  ? __fget_files+0x21f/0x3d0
[  115.178199][ T8571]  ksys_read+0x12a/0x250
[  115.178215][ T8571]  ? __pfx_ksys_read+0x10/0x10
[  115.178236][ T8571]  do_syscall_64+0x106/0xf80
[  115.178250][ T8571]  ? clear_bhb_loop+0x40/0x90
[  115.178266][ T8571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.178277][ T8571] RIP: 0033:0x7f1dd615cfce
[  115.178287][ T8571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  115.178297][ T8571] RSP: 002b:00007f1dd43f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.178307][ T8571] RAX: ffffffffffffffda RBX: 00007f1dd43f66c0 RCX: 00007f1dd615cfce
[  115.178314][ T8571] RDX: 000000000000000f RSI: 00007f1dd43f60a0 RDI: 0000000000000005
[  115.178320][ T8571] RBP: 00007f1dd43f6090 R08: 0000000000000000 R09: 0000000000000000
[  115.178327][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  115.178333][ T8571] R13: 00007f1dd6416038 R14: 00007f1dd6415fa0 R15: 00007fff31672278
[  115.178347][ T8571]  </TASK>
[  115.182607][   T40] audit: type=1400 audit(1773549967.986:724): avc:  denied  { connect } for  pid=8572 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  115.257259][   T40] audit: type=1400 audit(1773549967.996:725): avc:  denied  { create } for  pid=8572 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  115.263506][   T40] audit: type=1400 audit(1773549967.996:726): avc:  denied  { write } for  pid=8572 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  115.269671][   T40] audit: type=1400 audit(1773549968.016:727): avc:  denied  { execute } for  pid=8576 comm="syz.2.775" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  115.284225][   T40] audit: type=1400 audit(1773549968.086:728): avc:  denied  { create } for  pid=8583 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  115.292480][   T40] audit: type=1400 audit(1773549968.106:729): avc:  denied  { write } for  pid=8583 comm="syz.2.777" path="socket:[24264]" dev="sockfs" ino=24264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  115.301508][   T40] audit: type=1400 audit(1773549968.116:730): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  115.518162][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  115.574226][ T8598] cgroup: fork rejected by pids controller in /syz3
[  115.688693][   T10] usb 6-1: Using ep0 maxpacket: 8
[  115.695784][   T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.700366][   T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.703575][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  115.704806][ T6018] usb 5-1: USB disconnect, device number 4
[  115.705879][   T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  115.717822][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.722820][   T10] usb 6-1: config 0 descriptor??
[  115.783913][ T8607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8607 comm=syz.0.784
[  115.884756][   T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.003992][   T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.053626][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  116.058913][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  116.062722][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  116.066377][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  116.076104][   T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.081067][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  116.137349][   T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  116.141438][   T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  116.144485][   T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  116.159319][   T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  116.162462][   T10] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0
[  116.168453][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'.
[  116.179954][   T10] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  116.187334][   T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.270914][ T8617] chnl_net:caif_netlink_parms(): no params data found
[  116.300053][ T8633] warning: `syz.2.794' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.341638][   T10] usb 6-1: USB disconnect, device number 13
[  116.410045][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.412562][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.415325][ T8617] bridge_slave_0: entered allmulticast mode
[  116.418534][ T8617] bridge_slave_0: entered promiscuous mode
[  116.422390][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.424827][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.427480][ T8617] bridge_slave_1: entered allmulticast mode
[  116.430427][ T8617] bridge_slave_1: entered promiscuous mode
[  116.462142][ T8617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.472591][ T8644] netlink: 184 bytes leftover after parsing attributes in process `syz.0.797'.
[  116.477261][ T8644] xt_socket: unknown flags 0xd0
[  116.479246][ T8617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.507137][   T79] bridge_slave_1: left allmulticast mode
[  116.510231][   T79] bridge_slave_1: left promiscuous mode
[  116.513982][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.520085][   T79] bridge_slave_0: left allmulticast mode
[  116.522306][   T79] bridge_slave_0: left promiscuous mode
[  116.524701][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.881676][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.890030][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.896333][   T79] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  116.904355][   T79] bond0 (unregistering): (slave team0): Releasing backup interface
[  116.910789][   T79] bond0 (unregistering): Released all slaves
[  116.918977][   T79] bond1 (unregistering): (slave veth3): Releasing active interface
[  116.923938][   T79] bond1 (unregistering): Released all slaves
[  116.937948][ T8654] nfs4: Unknown parameter '��������'
[  116.941382][   T79] bond2 (unregistering): (slave veth5): Releasing active interface
[  116.946951][   T79] bond2 (unregistering): Released all slaves
[  116.960399][ T8617] team0: Port device team_slave_0 added
[  116.964600][ T8617] team0: Port device team_slave_1 added
[  116.979188][ T8617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.981459][ T8617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.986450][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'.
[  116.989991][ T8617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.992923][ T8656] netlink: 'syz.1.801': attribute type 30 has an invalid length.
[  116.996974][ T8617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.998736][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'.
[  117.001595][ T8617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.012754][ T8617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.049612][ T8617] hsr_slave_0: entered promiscuous mode
[  117.051909][ T8617] hsr_slave_1: entered promiscuous mode
[  117.054352][ T8617] debugfs: 'hsr0' already exists in 'hsr'
[  117.056212][ T8617] Cannot create hsr debugfs directory
[  117.137276][ T8672] overlayfs: failed to resolve './file0': -2
[  117.146466][ T8673] affs: No valid root block on device nullb0
[  117.279673][ T8686] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  117.305918][ T8689] ksmbd: Unknown IPC event: 1, ignore.
[  117.432616][   T79] hsr_slave_0: left promiscuous mode
[  117.434964][   T79] hsr_slave_1: left promiscuous mode
[  117.437461][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.445314][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.448604][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.451126][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.455381][   T79] veth1_macvtap: left promiscuous mode
[  117.457433][   T79] veth0_macvtap: left promiscuous mode
[  117.462808][   T79] veth1_vlan: left promiscuous mode
[  117.464631][   T79] veth0_vlan: left promiscuous mode
[  117.622682][   T79] team0 (unregistering): Port device team_slave_1 removed
[  117.631644][   T79] team0 (unregistering): Port device team_slave_0 removed
[  117.723206][ T8704] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.812'.
[  117.781417][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.035712][ T8617] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  118.060592][ T8617] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  118.068504][ T8617] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  118.080766][ T8617] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  118.098039][ T5945] Bluetooth: hci2: command tx timeout
[  118.155933][ T8617] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.165097][ T8617] 8021q: adding VLAN 0 to HW filter on device team0
[  118.171963][  T111] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.175000][  T111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.187729][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.190155][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.209761][ T8736] syzkaller0: entered promiscuous mode
[  118.211788][ T8736] syzkaller0: entered allmulticast mode
[  118.340778][ T8617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.364934][ T8617] veth0_vlan: entered promiscuous mode
[  118.372967][ T8617] veth1_vlan: entered promiscuous mode
[  118.393745][ T8617] veth0_macvtap: entered promiscuous mode
[  118.399735][ T8617] veth1_macvtap: entered promiscuous mode
[  118.414500][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.426582][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.439246][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.442224][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.446484][ T8755] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  118.446636][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.448775][ T8755] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  118.449220][ T8755] vhci_hcd vhci_hcd.0: Device attached
[  118.452807][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.459720][ T8756] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13)
[  118.462679][ T8756] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  118.467882][ T8756] vhci_hcd vhci_hcd.0: Device attached
[  118.470817][ T8758] vhci_hcd: connection closed
[  118.470906][ T8757] vhci_hcd: connection closed
[  118.473668][   T12] vhci_hcd vhci_hcd.2: stop threads
[  118.473809][ T8762] erspan1: entered promiscuous mode
[  118.475756][   T12] vhci_hcd vhci_hcd.2: release socket
[  118.482897][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  118.486372][   T12] vhci_hcd vhci_hcd.2: stop threads
[  118.488968][   T12] vhci_hcd vhci_hcd.2: release socket
[  118.491367][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  118.533189][ T1252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.536135][ T1252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.549989][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.552562][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.626556][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'.
[  118.635414][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'.
[  118.635794][   T66] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.642892][   T66] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.646443][   T66] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.649102][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'.
[  118.649726][   T66] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.784764][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  118.958703][   T10] usb 6-1: Using ep0 maxpacket: 32
[  118.961923][   T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  118.965170][   T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  118.969858][   T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  118.975169][   T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  118.981910][   T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  118.984820][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.987370][   T10] usb 6-1: Product: syz
[  118.989013][   T10] usb 6-1: Manufacturer: syz
[  118.990620][   T10] usb 6-1: SerialNumber: syz
[  118.998412][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  119.005037][   T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input11
[  119.014061][ T8790] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  119.024595][ T8789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26901 sclass=netlink_route_socket pid=8789 comm=syz.2.835
[  119.217904][   T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  119.220644][   T10]  (id 0x00)
[  119.267876][   T10] rc_core: IR keymap rc-imon-pad not found
[  119.269916][   T10] Registered IR keymap rc-empty
[  119.271500][   T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  119.274774][   T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  119.408982][   T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0
[  119.414718][   T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input12
[  119.426752][   T10] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:14> initialized
[  119.650666][ T6079] usb 6-1: USB disconnect, device number 14
[  119.650688][ T8764] imon:send_packet: packet tx failed (-71)
[  119.668020][ T8764] imon:vfd_write: send packet #0 failed
[  119.975858][   T40] kauditd_printk_skb: 51 callbacks suppressed
[  119.975869][   T40] audit: type=1400 audit(1773549972.776:782): avc:  denied  { map } for  pid=8817 comm="syz.2.843" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  119.986611][   T40] audit: type=1400 audit(1773549972.776:783): avc:  denied  { execute } for  pid=8817 comm="syz.2.843" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  120.014464][   T40] audit: type=1400 audit(1773549972.816:784): avc:  denied  { setopt } for  pid=8817 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  120.092828][   T40] audit: type=1400 audit(1773549972.896:785): avc:  denied  { create } for  pid=8821 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  120.100959][   T40] audit: type=1400 audit(1773549972.896:786): avc:  denied  { getopt } for  pid=8821 comm="syz.2.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  120.137964][   T40] audit: type=1400 audit(1773549972.946:787): avc:  denied  { connect } for  pid=8825 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  120.145835][   T40] audit: type=1400 audit(1773549972.946:788): avc:  denied  { mount } for  pid=8825 comm="syz.2.846" name="/" dev="rpc_pipefs" ino=25598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  120.177895][ T5945] Bluetooth: hci2: command tx timeout
[  120.202969][   T40] audit: type=1400 audit(1773549973.006:789): avc:  denied  { read } for  pid=8829 comm="syz.1.848" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  120.212681][   T40] audit: type=1400 audit(1773549973.006:790): avc:  denied  { open } for  pid=8829 comm="syz.1.848" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  120.222706][   T40] audit: type=1400 audit(1773549973.016:791): avc:  denied  { ioctl } for  pid=8829 comm="syz.1.848" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  120.238377][ T6079] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  120.248960][ T8834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5125 sclass=netlink_tcpdiag_socket pid=8834 comm=syz.2.850
[  120.285130][ T8838] __nla_validate_parse: 2 callbacks suppressed
[  120.285142][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'.
[  120.294028][ T8838] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.410102][ T6079] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 191, changing to 7
[  120.415189][ T6079] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  120.418522][ T6079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.421138][ T6079] usb 5-1: Product: ј
[  120.422493][ T6079] usb 5-1: Manufacturer: ▾鉶ᶾ鷊麱鰛흡辀鄣ᅫ᛻蜗槶⯭☈ஊ蝱饁Ӌ㉢꤬‼璷烙舚迺훼倖뽻⏡䶫韖弘ꥉ냐㤦扡ᐛ챘䴢鹩豁莙鋻
[  120.427916][ T6079] usb 5-1: SerialNumber: ꮶ舷鿷≦༣䣶荔鳨璘뼺偫쉎啡钫檘캆燇㭁䄆槀얹匯叜鬄આ澰靳掘瓼憼ጟ⋩꘠稡眼瞯롼ꈊ㳾꟤く᝿찦祋쟍펕䉞氟飭뚘ッ窼蒰⩤훰躔븿虇釲㚌唣䢞讪둼뗔隆㐉ռ籆瞩禱悼ꅼ묗┴
[  120.438828][ T6079] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  120.441731][ T6079] usb 5-1: no configuration chosen from 1 choice
[  120.597838][   T59] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  120.767952][   T59] usb 7-1: Using ep0 maxpacket: 8
[  120.771044][   T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  120.775533][   T59] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  120.778683][   T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.783097][   T59] usb 7-1: config 0 descriptor??
[  120.987924][   T59] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  121.198745][ T8852] i2c i2c-1: Invalid block write size 34
[  121.204870][ T8854] i2c i2c-1: Invalid block write size 34
[  121.264479][ T8858] netlink: 64 bytes leftover after parsing attributes in process `syz.1.857'.
[  121.337056][ T8864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8864 comm=syz.1.859
[  121.341892][ T8864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8864 comm=syz.1.859
[  121.463977][ T8876] --map-set only usable from mangle table
[  121.740113][ T8901] netlink: 80 bytes leftover after parsing attributes in process `syz.1.870'.
[  121.741948][ T8902] tmpfs: Bad value for 'mpol'
[  121.798745][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'.
[  121.802219][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'.
[  121.854869][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'.
[  121.857720][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'.
[  121.910556][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'.
[  121.913473][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'.
[  122.257908][ T5945] Bluetooth: hci2: command tx timeout
[  122.402185][ T8944] libceph: resolve '4' (ret=-3): failed
[  122.983295][ T6018] usb 5-1: USB disconnect, device number 5
[  123.282022][ T8955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.352423][ T6079] usb 7-1: USB disconnect, device number 7
[  123.506356][ T8974] vlan2: entered allmulticast mode
[  123.508475][ T8974] dummy0: entered allmulticast mode
[  123.510558][ T8974] bridge0: port 3(vlan2) entered blocking state
[  123.512666][ T8974] bridge0: port 3(vlan2) entered disabled state
[  123.516783][ T8974] vlan2: entered promiscuous mode
[  123.521763][ T8974] dummy0: entered promiscuous mode
[  123.670206][ T8988] netlink: 3 bytes leftover after parsing attributes in process `syz.3.896'.
[  123.677426][ T8988] batman_adv: batadv0: Adding interface: gretap1
[  123.679903][ T8988] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.689914][ T8988] batman_adv: batadv0: Interface activated: gretap1
[  123.698065][ T8988] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  123.701020][ T8988] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  123.705052][ T8988] /dev/sg0: Can't lookup blockdev
[  123.752151][ T8991] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  123.920744][ T9003] Bluetooth: MGMT ver 1.23
[  123.923560][ T9003] cgroup: release_agent respecified
[  123.928267][ T9003] Cannot find del_set index 4 as target
[  124.296056][ T9016] netlink: 'syz.2.907': attribute type 9 has an invalid length.
[  124.337940][ T5948] Bluetooth: hci2: command tx timeout
[  124.628388][ T9038] syzkaller0: entered promiscuous mode
[  124.630228][ T9038] syzkaller0: entered allmulticast mode
[  124.674284][ T9041] /dev/sg0: Can't lookup blockdev
[  124.677377][ T9041] netlink: 'syz.0.914': attribute type 8 has an invalid length.
[  124.721664][ T9043] wg1 speed is unknown, defaulting to 1000
[  124.725476][ T9043] wg1 speed is unknown, defaulting to 1000
[  124.730097][ T9043] wg1 speed is unknown, defaulting to 1000
[  124.808747][ T6079] wg1 speed is unknown, defaulting to 1000
[  124.811119][ T9043] infiniband syz2: set down
[  124.813369][ T9043] infiniband syz2: added wg1
[  124.843832][ T9043] RDS/IB: syz2: added
[  124.845476][ T9043] smc: adding ib device syz2 with port count 1
[  124.847635][ T9043] smc:    ib device syz2 port 1 has no pnetid
[  124.851841][ T9043] wg1 speed is unknown, defaulting to 1000
[  124.860262][ T6079] wg1 speed is unknown, defaulting to 1000
[  124.944239][ T9043] wg1 speed is unknown, defaulting to 1000
[  125.057230][ T9043] wg1 speed is unknown, defaulting to 1000
[  125.151934][ T9043] wg1 speed is unknown, defaulting to 1000
[  125.281330][ T9063] macvlan2: entered promiscuous mode
[  125.319643][ T9068] __nla_validate_parse: 7 callbacks suppressed
[  125.319659][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'.
[  125.329440][ T9065] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  125.425465][   T40] kauditd_printk_skb: 27 callbacks suppressed
[  125.425481][   T40] audit: type=1400 audit(1773549978.226:819): avc:  denied  { setopt } for  pid=9077 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  125.440348][ T9079] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  125.505081][ T9083] netlink: 15 bytes leftover after parsing attributes in process `syz.2.925'.
[  125.548931][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'.
[  125.552134][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'.
[  125.631134][ T9085] netlink: 'syz.3.927': attribute type 5 has an invalid length.
[  125.636867][ T9085] ip6erspan0: entered promiscuous mode
[  125.714609][   T40] audit: type=1400 audit(1773549978.516:820): avc:  denied  { setattr } for  pid=9086 comm="syz.0.928" name="NETLINK" dev="sockfs" ino=30097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  125.839043][ T9097] netlink: 312 bytes leftover after parsing attributes in process `syz.0.931'.
[  125.855214][ T9099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9099 comm=syz.3.932
[  125.977660][   T40] audit: type=1400 audit(1773549978.776:821): avc:  denied  { create } for  pid=9102 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  125.994267][   T40] audit: type=1400 audit(1773549978.786:822): avc:  denied  { ioctl } for  pid=9102 comm="syz.3.934" path="socket:[28206]" dev="sockfs" ino=28206 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  126.018531][   T40] audit: type=1400 audit(1773549978.796:823): avc:  denied  { create } for  pid=9105 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  126.109976][ T9078] syz.2.925 (9078): drop_caches: 2
[  126.154383][ T9127] XFS (nullb0): Invalid superblock magic number
[  126.168575][ T9128] XFS (nullb0): Invalid superblock magic number
[  126.219298][ T9143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9143 comm=syz.3.943
[  126.265616][ T9148] netlink: 'syz.3.945': attribute type 2 has an invalid length.
[  126.502475][ T9171] netlink: 'syz.2.949': attribute type 12 has an invalid length.
[  126.505915][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'.
[  126.531375][ T1252] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.537094][ T9171] netlink: 'syz.2.949': attribute type 12 has an invalid length.
[  126.540871][ T1252] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.542514][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'.
[  126.544666][ T1252] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.558652][ T1252] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.603485][ T9184] wg1 speed is unknown, defaulting to 1000
[  126.699191][ T9189] wg1 speed is unknown, defaulting to 1000
[  126.702450][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[  126.714374][ T9196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9196 comm=syz.2.953
[  126.777856][ T9096] comedi comedi3: reset error (fatal)
[  126.985435][ T9206] bond4: Unable to set up delay as MII monitoring is disabled
[  126.989057][ T9206] bond4 (unregistering): Released all slaves
[  127.112528][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.960'.
[  127.155757][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  127.201108][   T40] audit: type=1400 audit(1773549980.006:824): avc:  denied  { mounton } for  pid=9219 comm="syz.1.964" path="/proc/792/task" dev="proc" ino=27361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  127.358527][ T9238] 9pnet_fd: p9_fd_create_tcp (9238): problem connecting socket to 127.0.0.1
[  127.390166][   T40] audit: type=1400 audit(1773549980.196:825): avc:  denied  { write } for  pid=9241 comm="syz.0.971" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  127.570322][ T9255] tipc: Started in network mode
[  127.571921][ T9255] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  127.576007][ T9255] tipc: Enabled bearer <udp:syz1>, priority 10
[  127.813247][   T40] audit: type=1400 audit(1773549980.616:826): avc:  denied  { read } for  pid=9277 comm="syz.2.980" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  127.823341][   T40] audit: type=1400 audit(1773549980.616:827): avc:  denied  { open } for  pid=9277 comm="syz.2.980" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  128.067017][   T40] audit: type=1400 audit(1773549980.866:828): avc:  denied  { write } for  pid=9289 comm="syz.2.984" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  128.260002][ T5945] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  128.265597][ T5945] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  128.299027][ T1027] libceph: connect (1)[c::]:6789 error -101
[  128.301928][ T1027] libceph: mon0 (1)[c::]:6789 connect error
[  128.330767][ T9317] 9p: Could not find request transport: tcp?port=0x000000000004e22
[  128.342620][ T9313] ceph: No mds server is up or the cluster is laggy
[  128.349908][ T9312] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  128.569797][    T9] tipc: Node number set to 4269801492
[  128.819168][ T9382] netlink: 'syz.1.1006': attribute type 32 has an invalid length.
[  128.835426][ T9387] netlink: 'syz.0.1007': attribute type 3 has an invalid length.
[  128.965441][ T9383] netlink: 'syz.1.1006': attribute type 32 has an invalid length.
[  129.311339][ T9435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  129.315752][ T9435] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  129.334478][ T9435] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.340798][ T9435] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  129.344969][ T9435] bond4: entered allmulticast mode
[  129.355557][ T9435] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  129.737850][   T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  129.738584][ T9457] ------------[ cut here ]------------
[  129.742157][ T9457] 1
[  129.742163][ T9457] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#3: syz.0.1028/9457
[  129.746978][ T9457] Modules linked in:
[  129.748888][ T9457] CPU: 3 UID: 0 PID: 9457 Comm: syz.0.1028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.753926][ T9457] Tainted: [L]=SOFTLOCKUP
[  129.755709][ T9457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  129.760175][ T9457] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0
[  129.762766][ T9457] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 61 92 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41
[  129.769046][ T9457] RSP: 0018:ffffc900038af7a0 EFLAGS: 00010246
[  129.771356][ T9457] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  129.774686][ T9457] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040cc0
[  129.778156][ T9457] RBP: 000000000000000d R08: 0000000000000005 R09: 0000000000000009
[  129.781486][ T9457] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000040cc0
[  129.784910][ T9457] R13: 1ffff92000715f43 R14: 000000000000000d R15: 1ffff92000715f0d
[  129.787990][ T9457] FS:  00007f1d99ee56c0(0000) GS:ffff8880d6642000(0000) knlGS:0000000000000000
[  129.791901][ T9457] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  129.794765][ T9457] CR2: 00007f1d99ea3d58 CR3: 0000000037c1e000 CR4: 0000000000352ef0
[  129.798242][ T9457] Call Trace:
[  129.800061][ T9457]  <TASK>
[  129.801426][ T9457]  ? bpf_ksym_find+0x128/0x1c0
[  129.803437][ T9457]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  129.806119][ T9457]  ? is_bpf_text_address+0x94/0x1a0
[  129.808751][ T9457]  ? kernel_text_address+0x8d/0x100
[  129.811075][ T9457]  ? __kernel_text_address+0xd/0x30
[  129.813350][ T9457]  ? unwind_get_return_address+0x59/0xa0
[  129.815453][ T9457]  ? arch_stack_walk+0xa6/0xf0
[  129.817023][ T9457]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  129.819231][ T9457]  ? tomoyo_path_number_perm+0x46d/0x580
[  129.821237][ T9457]  ? stack_trace_save+0x8e/0xc0
[  129.823394][ T9457]  ? __lock_acquire+0x4a5/0x2630
[  129.825600][ T9457]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  129.828360][ T9457]  ? policy_nodemask+0xed/0x4f0
[  129.830437][ T9457]  alloc_pages_mpol+0x1fb/0x550
[  129.832407][ T9457]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  129.834835][ T9457]  ? find_held_lock+0x2b/0x80
[  129.836920][ T9457]  ? avc_has_extended_perms+0x33a/0x1080
[  129.839501][ T9457]  ? avc_has_extended_perms+0x33a/0x1080
[  129.841954][ T9457]  ? drm_syncobj_array_find+0x34/0x3b0
[  129.844310][ T9457]  ___kmalloc_large_node+0x104/0x150
[  129.846490][ T9457]  __kmalloc_large_node_noprof+0x1c/0x70
[  129.848980][ T9457]  __kmalloc_noprof+0x5be/0x850
[  129.850580][ T9457]  drm_syncobj_array_find+0x34/0x3b0
[  129.852253][ T9457]  drm_syncobj_signal_ioctl+0x20b/0x460
[  129.854324][ T9457]  ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10
[  129.856959][ T9457]  ? drm_dev_exit+0x41/0x60
[  129.859192][ T9457]  ? drm_dev_exit+0x41/0x60
[  129.861071][ T9457]  drm_ioctl_kernel+0x1f3/0x3e0
[  129.863123][ T9457]  ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10
[  129.865709][ T9457]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  129.868052][ T9457]  drm_ioctl+0x5e6/0xc60
[  129.869801][ T9457]  ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10
[  129.872310][ T9457]  ? __pfx_drm_ioctl+0x10/0x10
[  129.873959][ T9457]  ? selinux_file_ioctl+0x139/0x290
[  129.876063][ T9457]  ? selinux_file_ioctl+0xb4/0x290
[  129.877889][ T9457]  ? __pfx_drm_ioctl+0x10/0x10
[  129.879930][ T9457]  __x64_sys_ioctl+0x18e/0x210
[  129.881991][ T9457]  do_syscall_64+0x106/0xf80
[  129.883980][ T9457]  ? clear_bhb_loop+0x40/0x90
[  129.885882][ T9457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.887842][   T24] usb 7-1: Using ep0 maxpacket: 8
[  129.888401][ T9457] RIP: 0033:0x7f1d98f9c799
[  129.892336][   T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.892355][ T9457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.896094][   T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.902624][ T9457] RSP: 002b:00007f1d99ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.905690][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  129.909544][ T9457] RAX: ffffffffffffffda RBX: 00007f1d99215fa0 RCX: 00007f1d98f9c799
[  129.911395][   T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  129.914616][ T9457] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000047
[  129.914631][ T9457] RBP: 00007f1d99032c99 R08: 0000000000000000 R09: 0000000000000000
[  129.914642][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.917840][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.921249][ T9457] R13: 00007f1d99216038 R14: 00007f1d99215fa0 R15: 00007ffca758fcd8
[  129.925135][   T24] usb 7-1: config 0 descriptor??
[  129.927194][ T9457]  </TASK>
[  129.927207][ T9457] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  129.927223][ T9457] CPU: 3 UID: 0 PID: 9457 Comm: syz.0.1028 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  129.927247][ T9457] Tainted: [L]=SOFTLOCKUP
[  129.927254][ T9457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  129.927264][ T9457] Call Trace:
[  129.927271][ T9457]  <TASK>
[  129.927278][ T9457]  dump_stack_lvl+0x100/0x190
[  129.927311][ T9457]  vpanic+0x552/0x970
[  129.927329][ T9457]  ? __pfx_vpanic+0x10/0x10
[  129.927353][ T9457]  panic+0xd1/0xe0
[  129.927370][ T9457]  ? __pfx_panic+0x10/0x10
[  129.927394][ T9457]  ? check_panic_on_warn+0x1f/0x90
[  129.927424][ T9457]  check_panic_on_warn.cold+0x19/0x34
[  129.927444][ T9457]  ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0
[  129.927469][ T9457]  __warn.cold+0x191/0x348
[  129.927495][ T9457]  __report_bug+0x296/0x3d0
[  129.927515][ T9457]  ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0
[  129.927541][ T9457]  ? __pfx___report_bug+0x10/0x10
[  129.927560][ T9457]  ? __lock_acquire+0x4a5/0x2630
[  129.927593][ T9457]  ? __lock_acquire+0x4a5/0x2630
[  129.927621][ T9457]  ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0
[  129.927646][ T9457]  report_bug+0xb2/0x220
[  129.927665][ T9457]  ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0
[  129.927689][ T9457]  handle_bug+0x16a/0x2a0
[  129.927714][ T9457]  exc_invalid_op+0x17/0x50
[  129.927739][ T9457]  asm_exc_invalid_op+0x1a/0x20
[  129.927773][ T9457] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0
[  129.927799][ T9457] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 61 92 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41
[  129.927816][ T9457] RSP: 0018:ffffc900038af7a0 EFLAGS: 00010246
[  129.927832][ T9457] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  129.927842][ T9457] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040cc0
[  129.927852][ T9457] RBP: 000000000000000d R08: 0000000000000005 R09: 0000000000000009
[  129.927862][ T9457] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000040cc0
[  129.927872][ T9457] R13: 1ffff92000715f43 R14: 000000000000000d R15: 1ffff92000715f0d
[  129.927896][ T9457]  ? bpf_ksym_find+0x128/0x1c0
[  129.927914][ T9457]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  129.927939][ T9457]  ? is_bpf_text_address+0x94/0x1a0
[  129.927963][ T9457]  ? kernel_text_address+0x8d/0x100
[  129.927982][ T9457]  ? __kernel_text_address+0xd/0x30
[  129.928000][ T9457]  ? unwind_get_return_address+0x59/0xa0
[  129.928022][ T9457]  ? arch_stack_walk+0xa6/0xf0
[  129.928044][ T9457]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  129.928074][ T9457]  ? tomoyo_path_number_perm+0x46d/0x580
[  129.928097][ T9457]  ? stack_trace_save+0x8e/0xc0
[  129.928127][ T9457]  ? __lock_acquire+0x4a5/0x2630
[  129.928153][ T9457]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  129.928180][ T9457]  ? policy_nodemask+0xed/0x4f0
[  129.928200][ T9457]  alloc_pages_mpol+0x1fb/0x550
[  129.928219][ T9457]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  129.928237][ T9457]  ? find_held_lock+0x2b/0x80
[  129.928259][ T9457]  ? avc_has_extended_perms+0x33a/0x1080
[  129.928286][ T9457]  ? avc_has_extended_perms+0x33a/0x1080
[  129.928316][ T9457]  ? drm_syncobj_array_find+0x34/0x3b0
[  129.928333][ T9457]  ___kmalloc_large_node+0x104/0x150
[  129.928356][ T9457]  __kmalloc_large_node_noprof+0x1c/0x70
[  129.928378][ T9457]  __kmalloc_noprof+0x5be/0x850
[  129.928407][ T9457]  drm_syncobj_array_find+0x34/0x3b0
[  129.928430][ T9457]  drm_syncobj_signal_ioctl+0x20b/0x460
[  129.928451][ T9457]  ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10
[  129.928469][ T9457]  ? drm_dev_exit+0x41/0x60
[  129.928492][ T9457]  ? drm_dev_exit+0x41/0x60
[  129.928513][ T9457]  drm_ioctl_kernel+0x1f3/0x3e0
[  129.928530][ T9457]  ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10
[  129.928551][ T9457]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  129.928575][ T9457]  drm_ioctl+0x5e6/0xc60
[  129.928596][ T9457]  ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10
[  129.928617][ T9457]  ? __pfx_drm_ioctl+0x10/0x10
[  129.928644][ T9457]  ? selinux_file_ioctl+0x139/0x290
[  129.928668][ T9457]  ? selinux_file_ioctl+0xb4/0x290
[  129.928693][ T9457]  ? __pfx_drm_ioctl+0x10/0x10
[  129.928711][ T9457]  __x64_sys_ioctl+0x18e/0x210
[  129.928739][ T9457]  do_syscall_64+0x106/0xf80
[  129.928760][ T9457]  ? clear_bhb_loop+0x40/0x90
[  129.928781][ T9457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.928798][ T9457] RIP: 0033:0x7f1d98f9c799
[  129.928814][ T9457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.928830][ T9457] RSP: 002b:00007f1d99ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.928846][ T9457] RAX: ffffffffffffffda RBX: 00007f1d99215fa0 RCX: 00007f1d98f9c799
[  129.928857][ T9457] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000047
[  129.928868][ T9457] RBP: 00007f1d99032c99 R08: 0000000000000000 R09: 0000000000000000
[  129.928878][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.928888][ T9457] R13: 00007f1d99216038 R14: 00007f1d99215fa0 R15: 00007ffca758fcd8
[  129.928913][ T9457]  </TASK>
[  129.930465][ T9457] Kernel Offset: disabled