last executing test programs: 11m16.954885736s ago: executing program 4 (id=340): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r2, 0x1, 0x5, 0x0, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x184, 0x7, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x140, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x5c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x80}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x184}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000540)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f000001a340)=""/102389, 0x18ff5) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) r7 = syz_ublk_setup_io_uring(0x1000155a, &(0x7f0000000440)={0x0, 0x4ee24, 0x20, 0x6, 0x15a}, &(0x7f0000000680), &(0x7f0000000400), &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x4000000) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061197002000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) accept4(r0, 0x0, 0x0, 0x80000) syz_usb_connect(0x5, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b0102030109d66e7a28e10400000042bb91667400d1a8ff9dd4c6bc0046ce36b1bb5a3c5c86389d9b4c8150e7bf3843615141b52a6a999842164979958cca31207c0667473c7facf83ceac0114f6d385c2d5e51bd01ed4811d5df2a17eb62248fbb5750080000001c0367e3c93d11f00bb8f394044f90ae85c8e9b294229485bcfd4c0d6498f2e4d689c0e2c3e300"/170], 0x0) 11m13.807918456s ago: executing program 4 (id=348): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) writev(r1, &(0x7f0000003600)=[{&(0x7f00000001c0)="cbb29b2c01defafbd37c35ab899d4dc88d2fdc20222863d6c397e8f824eea77b993e8f08455699f2609ad5153fc045236aabb77594c9a245e2369d56bdf5ca93e233a80f5d5d89c8fbc21a18a4152ba7cf33a18e50ce2d0fdcbd2919", 0x5c}, {&(0x7f0000000300)="20b47eeb2cae15", 0x7}], 0x2) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001080)={0x34, &(0x7f0000000e40)={0x40, 0x15, 0x2, "5aa7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xc0) bind$bt_rfcomm(r0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfd}, 0xa) 11m10.95148765s ago: executing program 4 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11m10.764411804s ago: executing program 4 (id=365): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6", 0x35}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x9, 0x4, 0x0, 0x3c, 0x50, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xb, 0x7, [@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m10.614327883s ago: executing program 4 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./proc\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:usr_t:s0\x00', 0x1b, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfc0, 0x0) syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x21, r3, 0x5, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002180)={0x50, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x38, 0x1, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xab, 0x0, 0x0, @fd}, @typed={0x8, 0x43, 0x0, 0x0, @pid}, @nested={0x1c, 0x10a, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x78, 0x0, 0x0, @str='[@(\x00'}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) write$vga_arbiter(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) close_range(r4, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11m9.435804865s ago: executing program 4 (id=369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000580)={0x40, 0x13, 0x4, "539f3e76"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x16, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10m53.743480321s ago: executing program 32 (id=369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000580)={0x40, 0x13, 0x4, "539f3e76"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x16, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6m46.527912516s ago: executing program 0 (id=1494): syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$FIOCLEX(r0, 0x5451) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8085}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 6m46.330722987s ago: executing program 3 (id=1496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000080)=0x2000000, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r6, &(0x7f0000000000)='-0', 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x165, 0x8, 0x4, 0x2}, {0x88f, 0x8, 0x1, 0x2}, {0xf, 0x2, 0x24, 0xd}]}) 6m45.45179786s ago: executing program 3 (id=1500): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x3f0, &(0x7f0000000400)=[{&(0x7f0000000180)="b8", 0x1}], 0x1}}], 0x1, 0x4000080) 6m44.372005669s ago: executing program 3 (id=1504): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='password\x00', &(0x7f00000004c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xf7, 0x9, 0x4, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x20, 0x6, 0x800}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newchain={0x2ac, 0x64, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xa}, {0xffe0, 0xffff}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x274, 0x2, [@TCA_CGROUP_EMATCHES={0x270, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x800}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x8000, 0x7f, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f}, {0x4, 0xfc, 0x1}}}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_VAR="a5494f48035a3289", @TCF_META_TYPE_VAR="133afa", @TCF_META_TYPE_VAR="cafc", @TCF_META_TYPE_VAR="f809f7977b21", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1dfa", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="7baef6335aca"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1f7e7165369ed6e2"]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="ea43127fbed4b8e5eed0", @TCF_META_TYPE_VAR="2b8b26f7529b2b79", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="de19", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5ba45aa72c2d0e", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="cc96", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e492", @TCF_META_TYPE_VAR="6c2e6da68d4b1e2ec074", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0x7ff, 0x0, 0x442}, "c0a74561ef8b6b34c23dbe6f7704ecfece05adfad7beae96ae22234677f6b957309b2673a1030149f8226ee6d7c4bec0"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4798, 0x3, 0xfffb}, {0x2, 0x1, 0xfffffc01, 0xc904}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x8000}, {{0x4, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x9}, {0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xdd04}, {0x4, 0x6, 0x3, "824b7f3b54a8"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x7}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xbd, 0x1, 0x7}, {0x8, 0xffff3f9e, 0x8000, 0x6, 0x7, 0x1, 0x1}}}, @TCF_EM_IPT={0xe4, 0x3, 0x0, 0x0, {{0x4e2, 0x9, 0x80d}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9a, 0x5, "a0cbeef968a3898575b6766884a1fadf8ad6333d9e92fa4acf3806e3d6b266df02c3baf27ad7780cb76a388337a2e66f1eb0f057a1a1c76c2e52d4700bc70a8c136fffb0526f198c5743ca80fd0346b132be71763403cede2bc0d0849bcdfced00b2c019954d2cec3c1c2f9ef120a8016773b866517d198d4cd8092854325e5a26c9eca2d7a1c4a9f8a00bfb05b90cb008e29fa80d07"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x80}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x320, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x300, 0x70bd2b, 0x25df9c00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0xc}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 6m43.508439192s ago: executing program 0 (id=1506): creat(0x0, 0xc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2b}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa82, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="100e0400000053016a31"], 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) 6m43.465187299s ago: executing program 3 (id=1507): syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) 6m42.970434408s ago: executing program 0 (id=1510): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000900030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async) r3 = userfaultfd(0x80000) (async) write$UHID_INPUT(r0, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x3, 0x8, &(0x7f0000001740)=ANY=[@ANYRES32=r2, @ANYRES32=r1], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x20007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r7 = syz_io_uring_setup(0xbf7, &(0x7f0000000300)={0x0, 0xab54, 0x800, 0x3, 0x800000c2}, &(0x7f0000000580)=0x0, &(0x7f0000001640)=0x0, &(0x7f0000001600)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) (async) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000001380)=@gcm_256={{0x303}, "61e9762d427c17f6", "07d05433b7b218805b43009849da922196f3222ae50d0058e7afb1a493aa6018", "8169b5c1", "f9737d6c95c5a772"}, 0x38) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, &(0x7f00000000c0)) writev(r1, &(0x7f00000015c0)=[{&(0x7f00000013c0)="5b64e52efa9c51c30357bf765789eb74aa16eec53f75e40019973117ec5314eade0dac5ea52a5a69189754c5a5d4f4ae6d9d0fd40e248d9246919536eae16151dee2f8d36cc84c7b8e910e24040048207e4900aa5d0fb30b0627db48aef82c0b080d1e459826ca0bcd6af588b3fa68d4cd7bd8506c8d572b2658a0ff1c332edf38c8d43fdd76837de166fa", 0x8b}, {&(0x7f0000001480)="53d158ae983d6b24d731386178620ba715ee56257d2ba80e80be694da383", 0x1e}, {&(0x7f00000014c0)="5c034a82071d3ca49f125df7259ca0cc08458f6e1f9a91cd5c5e5663a8b0c09ef4be586f6e51744d2d41e5a889ce5cb2d3dae5e782b7debf5e2666b99a7f2d9df75359e1d26b932fe6d769bb3107c186b3c363c816cb5892f50251a816992d2ac945d5008b12c7d2b61937c4c2dc6253748733b11cefec598fd858650c94bb96ece90f172d032bb0cc1e4a0babd343458738502d356b7edb7d8ee011bcd6075833caa87322d807a51eaf6bdaed0a85cf4aaadca3b7899f8b1f6d24c03bc3760f100b0873df2865ff0fa72056", 0xcc}], 0x3) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 6m42.872330118s ago: executing program 3 (id=1511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x200102, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x0, {0xc5, 0xfc}, 0x4}, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r7, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x4048810}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9", 0xe2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200140c4}, 0x4080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000007060103000000000000000001000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x4) 6m42.715704222s ago: executing program 0 (id=1512): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x121080) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000440)=0x6) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0xd, 0x7fff}, &(0x7f0000001040)=0x90) unshare(0x26020480) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x5c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6}, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/49, 0x31}, {&(0x7f0000000300)=""/224, 0x63}], 0x2}, 0x2}], 0x1, 0x0, 0x0) 6m41.812074275s ago: executing program 0 (id=1515): syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0xa800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1a1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003700)={r5, 0x0, 0x9b, 0x0, &(0x7f0000000300)="a8ba55a9c7701fbafbf819fad33c5623762fd3c30fd9c648d53cd162e15ceb0e05b6167359ecd99d942ab254f1652afc211d235aec8a695d71f6ccf0f255329357bb261f28aa00c50631c10494894cffab63c603f1543c5f6be8f704125b1b009343c8f049135d94c578f4b95201ddf4837601a564ecf3f7e77b6112892122416941f781e851d5775ae04c022832ef6d56095e4ec0404e935545e6", 0x0, 0x10000, 0x0, 0x800, 0x1000, &(0x7f0000000480)="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", &(0x7f0000002700)="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", 0x2, 0x0, 0x9449}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 6m40.519003452s ago: executing program 0 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m40.376086482s ago: executing program 3 (id=1519): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@newae={0x164, 0x1e, 0x200, 0x70bd29, 0x25dfdbff, {{@in=@remote, 0x4d6, 0x2, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xf9d, 0x34ff}, [@algo_auth_trunc={0xe7, 0x14, {{'sha3-224-ce\x00'}, 0x4d8, 0x180, "57169c05a4f4b87a608f150801a68a640b1bd46e74f1f7c0ddc90bd346b4e177dbff9d71d4da9b5d7641e7513ef5d9afe2d9eadf8d9b287d0ada5efa0e6f40351bac5227d8f35c8290a8147c5c1f2cc4746735c32157f91c3abe94efe98225e5bb3f40b7580efb3ac0bca3301b428df6cbed94407e09632c361e761c87ef77382162e0da141e52165a1ee180e7af2d001584671b7e7440859527b5"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @lifetime_val={0x24, 0x9, {0x6, 0x81, 0x6, 0x4}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xef}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20044890}, 0x840) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000001c0)=""/87, &(0x7f0000000480)=""/57, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000006c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r7, 0x7af, &(0x7f0000000000)={@local, 0xffff}) 6m25.268411501s ago: executing program 33 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m25.124183956s ago: executing program 34 (id=1519): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@newae={0x164, 0x1e, 0x200, 0x70bd29, 0x25dfdbff, {{@in=@remote, 0x4d6, 0x2, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xf9d, 0x34ff}, [@algo_auth_trunc={0xe7, 0x14, {{'sha3-224-ce\x00'}, 0x4d8, 0x180, "57169c05a4f4b87a608f150801a68a640b1bd46e74f1f7c0ddc90bd346b4e177dbff9d71d4da9b5d7641e7513ef5d9afe2d9eadf8d9b287d0ada5efa0e6f40351bac5227d8f35c8290a8147c5c1f2cc4746735c32157f91c3abe94efe98225e5bb3f40b7580efb3ac0bca3301b428df6cbed94407e09632c361e761c87ef77382162e0da141e52165a1ee180e7af2d001584671b7e7440859527b5"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @lifetime_val={0x24, 0x9, {0x6, 0x81, 0x6, 0x4}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xef}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20044890}, 0x840) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000001c0)=""/87, &(0x7f0000000480)=""/57, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000006c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r7, 0x7af, &(0x7f0000000000)={@local, 0xffff}) 38.018520799s ago: executing program 6 (id=2693): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x205, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, &(0x7f00000009c0)='1', 0x20, 0xf, 0x0, 0x0, r5}]) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) dup3(r5, r3, 0x80000) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000480)={0x0, 0x0, @ioapic={0x41000, 0xfffffeff, 0x10, 0x49, 0x0, [{0xd5, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x69, 0x3, '\x00', 0x9}, {0x76, 0x4, 0x7, '\x00', 0x4}, {0x6b, 0x3, 0xff, '\x00', 0x7}, {0x8, 0x4, 0x8, '\x00', 0x3}, {0x9f, 0xdf, 0x2, '\x00', 0x24}, {0xa0, 0x2, 0x92, '\x00', 0xc}, {0x7, 0x2, 0xff, '\x00', 0x8}, {0x4, 0x3, 0x1}, {0xa, 0x0, 0x4, '\x00', 0xe}, {0x8, 0x3, 0x10, '\x00', 0x8}, {0x9, 0xf5, 0xf6, '\x00', 0x12}, {0x2, 0x8, 0x7}, {0x6, 0x4, 0x9, '\x00', 0x2}, {0x7f, 0x59, 0xf, '\x00', 0xff}, {0x8, 0x8, 0xe, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0x5}, {0x2, 0x9, 0xb9, '\x00', 0x7}, {0x40, 0x8, 0x7f}, {0x5, 0x7, 0x3, '\x00', 0x6}, {0x1, 0x4, 0x6, '\x00', 0x9}, {0x3, 0x6, 0x6, '\x00', 0x4}, {0x1, 0x40, 0x3, '\x00', 0x42}, {0xf7, 0x6, 0x7, '\x00', 0x1}]}}) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}], 0x20}, 0x40002160) 35.427328594s ago: executing program 6 (id=2703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x40}}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a0000000705820200020007050302000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000440)={0xcac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x35}}}}, [@NL80211_ATTR_TX_RATES={0x224, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8dd, 0xf, 0x9, 0x100, 0x100, 0x2, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x8}, {0x0, 0x2}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe5, 0x401, 0x1, 0x9d, 0x4, 0x0, 0x401, 0xf2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf2f, 0x2, 0x4, 0xbae8, 0x9, 0x2, 0x3e]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x6, 0x3, 0x6, 0x16, 0x1, 0x48, 0x0, 0x4, 0x3, 0x36, 0x1, 0x30, 0x3, 0xb, 0x1b, 0xb, 0x24, 0x6, 0x24]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0xa}, {0x2, 0x9}, {0x6}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x2}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x6}, {0x6, 0x1}, {}, {0x6, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x6}, {0x5, 0x1}, {0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x3, 0x8}, {0x2, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8001, 0x5, 0x0, 0x6, 0x2, 0x400, 0x80]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x1, 0x30, 0x6c, 0x1, 0xc, 0x30, 0x6c, 0x3, 0x48, 0x48, 0x1, 0x18, 0xc, 0x9, 0x1, 0xb, 0x30, 0x9, 0x4, 0x60, 0x12, 0x6, 0x36, 0x60, 0x3]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x2}, {0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0x1e}, {0x5, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc, 0xb203, 0x5, 0x100, 0x4, 0x1, 0x3]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x1c}, {0x2, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x6, 0x5}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0xa}, {0x6}, {0x7, 0x9}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x2, 0x5}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x6}, {0x7}, {0x6, 0x1}, {0x2, 0x2}, {0x5, 0x6}, {0x5, 0x6}, {0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0x3}, {0x6, 0x7}, {0x3, 0x5}, {}, {0x1, 0x4}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0x3}, {}, {0x3, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x8, 0x8, 0xc9f4, 0x7, 0x7, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x7e9e, 0x8, 0x10, 0x3, 0x100, 0x1ff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x1b, 0x60, 0x9, 0x6]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x62ff, 0x3, 0xa0, 0xa1f0, 0x7f, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1000, 0xfff, 0x4, 0xfffb, 0x1, 0x6, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x7ff, 0x10, 0xbb5, 0x4, 0x1, 0xc]}}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xb, 0x4, 0xd24651af552844fe, 0x1, 0x9, 0x2, 0x1, 0x24, 0xb, 0xc, 0x1b, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x3}, {0x7, 0x3}, {0x5, 0xa}, {}, {0x0, 0x6}, {0x7, 0x9}, {0x7, 0x4}, {0x6, 0x4}, {0x3, 0x3}, {0x7}, {0x5, 0xa}, {0x3, 0x4}, {0x7, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x2}, {0x5, 0xa}, {0x2, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x8}, {0x3}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x9}, {}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x3, 0x2}, {0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0x5}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x6}, {0x6}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0xa}, {0x2, 0x2}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0x0, 0x5, 0x4, 0x1, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x5, 0x6aa, 0x401, 0x5, 0x2, 0x401, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0xc, 0x8, 0x1, 0x8]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x3}, {0x7, 0x5}, {0x6, 0x2}, {0x7, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x5, 0x5}, {0x0, 0x5}, {0x3, 0x6}, {0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x3}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x3}, {0x2, 0xa}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {}, {0x6, 0xa}, {0x2, 0xa}, {}, {0x5, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x8}, {0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x3}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x5}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x2, 0x9, 0x60, 0x60, 0x24, 0x6c, 0x0, 0x30, 0x48, 0x4, 0x6, 0x7, 0x5, 0x6c, 0x48, 0x9, 0x36, 0x36, 0x6, 0x5, 0x60, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1, 0x1, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9da, 0xff, 0x8, 0x401, 0xf9cc, 0x3, 0x2]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x6c, 0x0, 0x6c, 0x30, 0x2, 0x6c, 0x12, 0x2, 0x6, 0xb, 0x1, 0x5, 0xb, 0xc, 0x9, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0xff, 0x2, 0x7, 0x9, 0xa, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x4, 0x8, 0x8001, 0x2, 0x2, 0xdb28]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x401, 0x2, 0x1000, 0xfffa, 0xffff, 0xfffa, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0xc, 0x6, 0x9, 0x2, 0x5a242423f8e6b18b, 0x16, 0x6, 0x1, 0x3, 0x18, 0x5, 0xb, 0x60, 0x36, 0x2, 0x18, 0x6, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x5f89, 0xffff, 0x6, 0x101, 0x1000, 0x2a9]}}]}, @NL80211_BAND_2GHZ={0x120, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x2}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {}, {0x1, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x9}, {0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x4}, {0x6, 0x8}, {0x6}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0x8}, {0x4, 0x2}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x3}, {}, {0x6, 0xa}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x4}, {0x5, 0x7}, {0x2}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x4}, {0x6}, {0x1, 0x2}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x1}, {0x3, 0x6}, {0x4, 0x3}, {0x6, 0xa}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x6, 0x6}, {0x2}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0xa}, {0x3, 0x6}, {0x1}, {0x6, 0x5}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x4, 0xa}, {0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x6}, {0x4, 0x3}, {0x1}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x3, 0x4}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x4}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x6, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x3}, {0x6, 0x6}, {0x6}, {0x6, 0x9}, {0x2}, {0x7, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x9}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc0, 0x7, 0x2, 0x8, 0x8, 0x9, 0x2, 0x826]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x5, 0x3, 0x16, 0x3, 0x1, 0x6, 0x16, 0x6c, 0x6c, 0x9, 0xc, 0x30, 0x0, 0x9, 0x18, 0x44b3564a3748b80, 0xddc88659aa490fd6, 0x48]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x1, 0x0, 0xb, 0x6d, 0x12, 0x1, 0xb, 0x12, 0x66, 0x24, 0xc, 0x4, 0x25, 0x6c, 0x24, 0x28, 0x4, 0x24, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x36, 0xb, 0x1b, 0x16, 0x1b, 0x12, 0x3, 0x12, 0x9, 0xc, 0x48, 0x1, 0x60, 0x36, 0x16, 0x3, 0x60, 0x1, 0x6, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7, 0x3, 0x1, 0x401, 0x401, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc79c, 0x208a, 0x5, 0x75, 0x163, 0x386, 0x1]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x9}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x2}, {0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe6c5, 0x3, 0x1, 0x7, 0x3, 0x9, 0x7ff, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x2, 0x2, 0x6, 0xb1, 0x7fd, 0x3]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0xc, 0x401, 0x8, 0x5, 0x1000, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x4, 0x9, 0x8, 0xa36e, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xc1a, 0x9, 0x3000, 0x2, 0x10, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x800, 0x3, 0x10, 0x4, 0x74, 0x5]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x93e, 0x3, 0x2, 0x27e, 0x6, 0xb, 0xfff, 0x2]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x0, 0x1b, 0x5, 0x6, 0x24, 0x5, 0xc, 0x5]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0xb, 0xc, 0x2, 0x12, 0xc, 0x9, 0x24, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0xfffb, 0x4, 0x85, 0x0, 0x76]}}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x7}, {0x6}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x9}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x8}, {0x7, 0x6}, {0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x1}, {0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x5}, {0x6, 0x4}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x5}, {0x7, 0x7}, {0x6, 0x2}, {0x0, 0x8}, {}, {0x0, 0x4}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x18, 0x36, 0x2, 0x24, 0x2, 0x30, 0x9, 0x60, 0x9, 0x6c, 0x24, 0x4, 0x12, 0x16, 0x60, 0xb, 0x24, 0x2f, 0x1, 0x6, 0x24, 0x36, 0xb, 0x37, 0x6c, 0x9, 0x48, 0x5, 0x36, 0xc, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x401, 0x10, 0xfffa, 0x1e5e, 0x31, 0x5, 0x6000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa, 0xfe01, 0x6, 0x3, 0x8, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x4}, {0x7, 0x7}, {0x3, 0x3}, {0x2}, {0x6, 0x3}, {0x1, 0x8}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x8}, {0x1}, {0x2, 0x9}, {0x7, 0x6}, {0x4, 0x5}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x2}, {0x5}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x3}, {0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xd, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x6, 0xffa8, 0xefbd, 0x3, 0x9, 0x3]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x6, 0x4, 0x2, 0x5, 0x9, 0x81]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xff, 0x1ff, 0xf548, 0x200, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x1}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7d, 0x8, 0xff81, 0x7, 0x9, 0xee2c, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x7}, {0x5, 0x8}, {0x6, 0x6}, {0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x6}, {}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x5}, {0x5, 0x8}, {0x1, 0xa}, {0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x4}, {0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0xa}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x5, 0x3}, {0x2, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x3}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x2, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x101, 0x3, 0x3, 0x6, 0x7f, 0x9, 0xfeff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0xa}, {}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x4}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x9}, {0x5, 0xa}, {0x5, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x6c, 0x24, 0x9, 0x24, 0x30, 0x30, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc000, 0xf, 0x7ff, 0x8000, 0x1, 0xb6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x215, 0x0, 0x3, 0x0, 0x4, 0x7, 0x761]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x12, 0x6, 0x3b, 0x34, 0x24, 0x3e, 0x30, 0x16, 0xb, 0x4, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x3, 0xfff7, 0x7, 0x0, 0x9, 0x3, 0xf6cb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x80, 0x1000, 0x99e0, 0x401, 0xce99, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0xa}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x8}, {}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x5}, {0x2, 0x7}, {0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x6}, {0x1, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x36, 0x16, 0x18, 0x9, 0x3, 0x4, 0xb, 0x6, 0x16, 0xc, 0xb, 0x24, 0xc, 0x16, 0xb, 0x1, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x9, 0x1, 0x1, 0x6, 0x1, 0x80]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x3, 0x6c, 0x3, 0x12, 0x4, 0xc, 0x3, 0x18, 0x1, 0x12, 0x2, 0x5, 0x60, 0x5, 0x48, 0x62, 0x4, 0x48, 0x2, 0x60, 0x30, 0x14, 0x18, 0x18, 0x60, 0x1, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x4, 0x8000, 0x4, 0x3, 0xfff, 0x6]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{}, {0x3, 0x3}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x7, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0xa}, {0x2, 0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0x5, 0x6, 0x491, 0x3, 0x8, 0x800]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0xb3b6, 0x2, 0x6, 0x10, 0x30, 0x2]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x23, 0x18, 0x4a87bd7f47f68d15, 0x30, 0x24, 0x3, 0xb, 0x30, 0xf74807e73ae3d317, 0x60, 0x30, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xda6d, 0x2, 0x2, 0x7, 0xa9, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x8000, 0x9, 0xf01a, 0x8, 0x9, 0x5]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x40, 0x5, 0x1a1, 0x81, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x4}, {0x7, 0x8}, {0x4, 0x6}, {0x6, 0x1}, {}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x2}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x8}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x3}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x4}, {0x1}, {0x5, 0xa}, {0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x7, 0x2}, {0x7, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x4, 0x8}, {0x5}, {0x7, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6a, 0x1, 0x1, 0x3, 0xf, 0x0, 0x6, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0xcac}, 0x1, 0x0, 0x0, 0x80}, 0x4004090) syz_usb_control_io(r2, 0x0, 0x0) 31.908855308s ago: executing program 6 (id=2723): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='password\x00', &(0x7f00000004c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xf7, 0x9, 0x4, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x20, 0x6, 0x800}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newchain={0x2ac, 0x64, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xa}, {0xffe0, 0xffff}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x274, 0x2, [@TCA_CGROUP_EMATCHES={0x270, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x800}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x8000, 0x7f, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f}, {0x4, 0xfc, 0x1}}}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_VAR="a5494f48035a3289", @TCF_META_TYPE_VAR="133afa", @TCF_META_TYPE_VAR="cafc", @TCF_META_TYPE_VAR="f809f7977b21", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1dfa", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="7baef6335aca"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1f7e7165369ed6e2"]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="ea43127fbed4b8e5eed0", @TCF_META_TYPE_VAR="2b8b26f7529b2b79", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="de19", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5ba45aa72c2d0e", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="cc96", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e492", @TCF_META_TYPE_VAR="6c2e6da68d4b1e2ec074", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0x7ff, 0x0, 0x442}, "c0a74561ef8b6b34c23dbe6f7704ecfece05adfad7beae96ae22234677f6b957309b2673a1030149f8226ee6d7c4bec0"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4798, 0x3, 0xfffb}, {0x2, 0x1, 0xfffffc01, 0xc904}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x8000}, {{0x4, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x9}, {0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xdd04}, {0x4, 0x6, 0x3, "824b7f3b54a8"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x7}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xbd, 0x1, 0x7}, {0x8, 0xffff3f9e, 0x8000, 0x6, 0x7, 0x1, 0x1}}}, @TCF_EM_IPT={0xe4, 0x3, 0x0, 0x0, {{0x4e2, 0x9, 0x80d}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9a, 0x5, "a0cbeef968a3898575b6766884a1fadf8ad6333d9e92fa4acf3806e3d6b266df02c3baf27ad7780cb76a388337a2e66f1eb0f057a1a1c76c2e52d4700bc70a8c136fffb0526f198c5743ca80fd0346b132be71763403cede2bc0d0849bcdfced00b2c019954d2cec3c1c2f9ef120a8016773b866517d198d4cd8092854325e5a26c9eca2d7a1c4a9f8a00bfb05b90cb008e29fa80d07"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x80}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 30.625155586s ago: executing program 6 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x1d2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x1cfc, 0x2, [@TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xd}}, @TCA_BASIC_ACT={0x1ce4, 0x3, [@m_ct={0x2c, 0x16, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x1cb4, 0x4, 0x0, 0x0, {{0xb}, {0x1c88, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3efb, 0x9, 0x0, 0x7, 0x0, 0x1ff, 0xfffffc01, 0x10001, 0x0, 0x40ae457a, 0x69d2, 0xfffffffe, 0x8, 0x3, 0x6, 0x3, 0x0, 0xffffffff, 0x8a12, 0xffffffff, 0x0, 0x5, 0x9, 0xf, 0xffff52d9, 0x100, 0x6, 0x80000000, 0x6, 0x8, 0x8, 0x4, 0x2, 0x2, 0x2, 0x3ff, 0x1, 0xfff, 0xffff, 0x7, 0x9, 0x902f, 0x8, 0x1ff, 0x3, 0x4, 0x0, 0x2, 0x1000, 0x8, 0x446d4ca1, 0x6, 0xfff, 0xbb, 0x7, 0x9, 0x9477, 0x88a2, 0xb69d, 0xfffffff8, 0xed, 0x3, 0x3, 0xe, 0x7, 0x8, 0x10, 0xfb, 0x0, 0x1ff, 0x9, 0x890b, 0x5, 0x7, 0xd, 0x6, 0x6, 0x3ff, 0x9, 0x3, 0x200, 0x200, 0x3, 0xfffff52d, 0x7, 0x2, 0x2, 0x10001, 0x8, 0x6, 0x8, 0xc000, 0xa, 0x2, 0xbd94, 0x7d, 0x72c0, 0x7, 0x3, 0x2, 0x6, 0x472, 0x5, 0x1, 0x3, 0x4, 0x8000, 0xff, 0x9, 0x8, 0x80000000, 0x1, 0x0, 0x4, 0x3d, 0x0, 0x7, 0x4, 0x9d8, 0x3, 0x6, 0x0, 0xffffffc0, 0x6, 0x8, 0xf20787c, 0x3d, 0x0, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0xc, 0x1000, 0x9, 0x4, 0x2, 0xc, 0xec, 0x51f1, 0x9, 0x7, 0x6, 0x800, 0x1, 0xee, 0x4, 0x2, 0x7, 0x6c57, 0xffffffff, 0x10000, 0x9, 0x0, 0x401, 0x3ff, 0x3, 0x7, 0x5, 0x6, 0xe69, 0x10, 0x8a22, 0x1ff, 0x1, 0x7, 0x10, 0xfffffffa, 0xb901, 0x8, 0x5, 0x0, 0x7, 0x6, 0x8, 0x0, 0x24, 0x54, 0x8, 0x7, 0x8, 0x9, 0x101, 0x93, 0x2, 0x4, 0xff, 0x8, 0x6, 0x80, 0x4fe, 0xfff, 0x80000000, 0x80000001, 0x80000001, 0x7, 0x1, 0x2, 0x5, 0xd, 0x5, 0x6, 0x2, 0x7, 0x3, 0x1, 0x10, 0x8000, 0x5, 0x10, 0xf, 0x80, 0x1, 0x401, 0x3, 0x8, 0x3, 0x8001, 0x18, 0x75, 0x9, 0x3, 0x7, 0x1, 0x65a, 0x100, 0x4, 0xa0, 0xffff, 0x5, 0x8, 0x3, 0xd40, 0x7ff, 0x101, 0x1, 0x1ff, 0x5, 0xafc, 0x9, 0x3ff, 0x7, 0x81, 0x3, 0x3, 0x7ff, 0xaed, 0x8, 0x7fffffff, 0x6, 0x8000, 0x7, 0x6, 0x46, 0x1e]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1ad7, 0x5, 0x8, 0x3, 0x6, 0xa, 0x17140, 0x4, 0x0, 0x8, 0x3, 0x7, 0x3, 0xad2f, 0x1, 0xd1, 0x10000, 0x8, 0x6, 0x4, 0xf, 0xd, 0xcd, 0xe1, 0x7ff, 0x9, 0xd, 0x1, 0x6, 0x9cbf, 0x7, 0x4, 0x800, 0x2, 0xaa2, 0x0, 0x0, 0xfffffff8, 0x2, 0x70000, 0x5, 0x3, 0x7, 0x1, 0x3, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x800, 0x7ff, 0x92, 0x0, 0x0, 0x2c806931, 0x9, 0x4, 0x401, 0xfffffffc, 0x10000, 0x6, 0x1, 0x0, 0xfffffffa, 0x4, 0x3, 0x7, 0xfffffffe, 0x4, 0x100, 0x3, 0x5, 0x0, 0x7, 0x10001, 0xfffffffb, 0x7, 0x1, 0x80000000, 0x4, 0xbf2c, 0x85e, 0x6b, 0x0, 0x7fff, 0x0, 0x6, 0xffffffff, 0x2, 0x6, 0x832, 0x6, 0x3, 0x1, 0x7, 0x1000, 0x6, 0x9000000, 0x4, 0xf04, 0xa516, 0xfffffffd, 0x2, 0x3, 0x8, 0xfffffffb, 0x3, 0x882b, 0x100, 0xfffffeff, 0x1, 0x100, 0x0, 0x34919b6b, 0xa452, 0x6, 0x7, 0x1, 0x4, 0x1, 0xbd, 0x10001, 0x526, 0x5, 0xa063, 0x60, 0xffff8000, 0xd, 0x7, 0xfff, 0x10, 0x6, 0x3, 0x1, 0x5, 0x10, 0x3f8e, 0xee21, 0x6, 0x400, 0x7ff, 0xffffffff, 0xa5fc, 0xe, 0x3, 0x4, 0x4, 0x81, 0x100, 0x2, 0x0, 0xffff, 0x194, 0x40, 0x6, 0xffffffff, 0x3, 0x10001, 0x8000, 0x8, 0x4, 0x5577, 0x469, 0x1ff, 0x3, 0x1, 0x648, 0xe, 0x3, 0x3, 0x800, 0x4, 0x5, 0x100, 0x8001, 0xe19, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x8000, 0x3, 0x0, 0xffff, 0xf997, 0x4, 0x40, 0xd, 0x7, 0x6, 0x8, 0x0, 0x1, 0x6, 0x5, 0x7ff, 0x6, 0xeb34, 0x7, 0x7, 0xfffffff8, 0x0, 0x6, 0x6, 0x7, 0xa8c, 0x401, 0x13, 0x2, 0x3, 0x6, 0x10, 0x8, 0x7, 0x8, 0x1, 0x821e, 0x1, 0x8001, 0x8, 0x504, 0xbd1, 0x9, 0xfffff000, 0x9, 0x1, 0xe15, 0x8, 0x8, 0x6, 0x1000, 0x1, 0x80000001, 0x1, 0x5, 0x959, 0x4, 0x4, 0x7, 0xe31, 0x1, 0x6, 0x54, 0x5, 0x80, 0x9e5, 0x7ff, 0xbe3, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x80000000, 0xe, 0x6, 0x4, 0x4, 0x6, 0x8, 0x2, 0x4, 0x81, 0x1, 0x9, 0x0, 0x81, 0xff, 0x40, 0x4, 0x8, 0x4, 0x6, 0x6, 0x3, 0x3ade, 0x800, 0x8, 0x5, 0x5, 0xa61d, 0xb228, 0x61874111, 0x200, 0xfffffffa, 0x5, 0x7, 0x2, 0x7, 0x99b5, 0xb, 0x8000, 0x0, 0x7ff, 0x5, 0x200, 0xb48, 0x2, 0x9, 0x7, 0x0, 0x100, 0x40, 0x695, 0x5, 0x5, 0x7, 0x10, 0x1, 0x4, 0x401, 0x41d9, 0x7, 0xedd6, 0x45, 0xe00000, 0x1000, 0x3, 0x9, 0x8, 0x9, 0x80000001, 0x87, 0x6, 0x4, 0x80000001, 0x8, 0x10001, 0x5, 0x3, 0xc3, 0x0, 0x1, 0x5, 0x546, 0x0, 0x8, 0x9, 0x0, 0x7, 0x3, 0x5, 0x8000, 0x7ff, 0x7, 0xb, 0x5, 0x8, 0x1, 0x4, 0x8, 0x1, 0xffffffff, 0x8, 0x1, 0x101, 0x62, 0xfff, 0x984, 0xc, 0xa3e, 0x6, 0x1ff, 0x8, 0x9, 0xbc, 0x9086, 0x9, 0x9, 0x8, 0x4dc, 0x200, 0x1, 0x7, 0x5, 0x7, 0x5b9, 0x4, 0x80000001, 0x1, 0x4, 0x0, 0xe, 0x8000, 0x8, 0x2, 0x8, 0x7, 0x1, 0x5, 0x4, 0x1, 0x1, 0x1053, 0x2, 0xd8, 0x0, 0x8, 0x7f, 0xd, 0x2, 0xfffffffa, 0x2, 0x4, 0x3db, 0x670, 0x4d28, 0x8, 0x7fffffff, 0x2, 0xfff, 0x40, 0xc, 0x8, 0xa, 0x1, 0x7, 0x100, 0xb, 0x5, 0xffffffff, 0x9, 0x429, 0x120000, 0x9c7, 0x8, 0x1, 0xaecf, 0x1ff, 0x101, 0x2, 0x5, 0x80000000, 0x5, 0x9, 0x800, 0x101, 0x4, 0x6, 0x1ff, 0x8179104, 0xfac5, 0x6, 0x7, 0xe7, 0xb, 0xfffffff8, 0x0, 0x1, 0x2, 0x7, 0x1, 0xff, 0x7, 0x7d45, 0x6, 0x0, 0xc, 0x7, 0x7f, 0x90d, 0x9, 0x1cff4574, 0x8459, 0x3, 0x8, 0x7, 0x1, 0x5, 0x1, 0x80, 0x4, 0x1, 0x90000, 0x4, 0x8, 0x400, 0x401, 0xa, 0x746, 0x0, 0xffffffff, 0x55c, 0x10, 0xfffffe00, 0x37, 0x10000, 0x6, 0x1, 0xe, 0xfffffff7, 0x1, 0x8001, 0xb6a, 0x59ce1367, 0x5, 0x5, 0xa, 0x2, 0x3, 0x8, 0x10, 0x0, 0x4, 0x1, 0x9, 0xffff, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x93, 0x5, 0x3ff, 0x8000, 0x1, 0x1, 0x4, 0x10, 0x5, 0x8, 0x0, 0xb0, 0x7fff, 0xfff, 0x3, 0x4, 0x5, 0x652, 0x2, 0x1ff, 0x4, 0x0, 0x2, 0xe, 0x3, 0x1bb5, 0xfffffffe, 0x0, 0x4, 0x2, 0x400, 0x8, 0xfffffffa, 0x1, 0x1, 0x7, 0x2, 0x1ff, 0x4, 0x7, 0x4, 0x3, 0x6, 0xfffffffd, 0x7ff, 0x101, 0x41c, 0x8, 0x2, 0x3e, 0x1c00000, 0x3, 0x6, 0x7, 0xd, 0x1, 0x6, 0x80000001, 0x10001, 0x401, 0xa, 0x5, 0x1, 0xfffffffe, 0x7, 0x1ff, 0x8001, 0x3d, 0x8000, 0x0, 0x7ff, 0x0, 0x3, 0x1, 0x6, 0x5, 0x1e, 0x8, 0xeb6, 0x6, 0xc, 0x0, 0xc6d, 0x53, 0x9, 0x8b35, 0x1, 0x96, 0x7, 0x80, 0x1, 0x2, 0x0, 0x6, 0x10, 0x1, 0x7fffffff, 0xffffff81, 0xfff, 0x5, 0x1, 0xc6ba, 0xac, 0x1, 0x7df, 0x9, 0x3, 0x1, 0x4a5, 0x9, 0x4, 0x7, 0x7, 0x5c8, 0x66, 0x1, 0xd5e, 0x80000001, 0xc, 0x6a, 0x553549cf, 0xffffff01, 0x6, 0x507, 0x4, 0x2, 0x101, 0x0, 0xb202, 0x2, 0x2, 0x2, 0x81, 0x4, 0x33b, 0x5c000, 0x101, 0x9f6, 0x619, 0x4, 0x2b, 0x2, 0x8001, 0x5, 0x4, 0x8, 0x2, 0x7fffffff, 0x1, 0x10001, 0x0, 0x2, 0x104aba9f, 0x3, 0x1000000, 0x1, 0x8cb, 0xfffffffb, 0x1, 0xffff96c5, 0x6, 0xa58d, 0x1418, 0xed1, 0x5, 0x0, 0x6, 0x8000, 0x1, 0x5, 0x4, 0xd, 0x1077, 0x3, 0x1, 0x400, 0x3, 0x2, 0xd1b, 0x6, 0x3, 0xe632, 0xc7, 0x0, 0x5, 0x5, 0x80000001, 0x8, 0xff, 0x1, 0x1000, 0x0, 0x0, 0x1, 0x69, 0x4a, 0xc, 0x7, 0x3, 0x8, 0x400, 0x0, 0xa, 0x8, 0x1, 0x0, 0x5, 0xffffff81, 0x4, 0xf6, 0x7, 0x5, 0x800, 0xffff, 0x3, 0x8000, 0x3, 0x401, 0xffff, 0x200, 0x7fab, 0x10, 0x8, 0x2, 0x10000, 0x2, 0xfffff3b4, 0xae2a, 0x7ff, 0x7, 0x8aa, 0x4, 0x3, 0xd3, 0x7fffffff, 0x6, 0x7, 0x2, 0x3, 0x400, 0x27, 0x15, 0xfffffff7, 0x80, 0x1667, 0x8000, 0x8, 0x4, 0x7, 0x101, 0xa99c, 0xf, 0x58, 0x40, 0x9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xb, 0xffff, 0x3, 0xfffffffe, 0x8001, 0x3, 0x3, 0x6, 0x7fff, 0x9, 0x5, 0x8000, 0x6, 0x1, 0xd, 0x3, 0x0, 0x0, 0x6, 0x1, 0xbc, 0x10000, 0x5, 0x0, 0x6, 0xe2, 0x3a5, 0xf, 0x3, 0x80000000, 0xe, 0x0, 0x6774, 0x60, 0x5, 0x7, 0xa035, 0xa4, 0x401, 0x10001, 0x8, 0x6, 0x40, 0x0, 0x20, 0x3, 0x1, 0xff, 0xffffff61, 0x7, 0x4, 0x5, 0x1, 0x1, 0x0, 0x8, 0x0, 0x8, 0x4, 0xfffffffb, 0xc, 0x7, 0x81, 0x8, 0x1, 0x8, 0xff, 0x7fff, 0x4, 0x9, 0xb0b, 0x8, 0x3b72, 0xd, 0x7fffffff, 0x6, 0x4, 0xffffffff, 0x6, 0xfffff7fb, 0x58, 0x4, 0x1, 0x5, 0x80000001, 0xfffffffa, 0x8, 0x9, 0x5, 0x5, 0x437c, 0xefe0, 0xcd, 0x4, 0x3ff, 0x10000, 0x8, 0x7, 0x8, 0x80000001, 0x6, 0x5, 0xff, 0x8, 0xa54, 0x0, 0x1000, 0x3, 0x4, 0x9, 0xad66, 0x2, 0x0, 0xfff, 0xffff8000, 0x8, 0x7, 0x3, 0x6, 0x8001, 0xce54, 0x1, 0x7, 0x5, 0x4cc7, 0x6, 0x53, 0x8, 0x5, 0x200, 0x5, 0x1, 0x0, 0x9, 0x3, 0x7, 0xffff7fff, 0x7fff, 0xfffffffe, 0x7, 0x6, 0xffff0001, 0x7, 0x5, 0x8, 0x4, 0xffffffff, 0x4, 0x3b, 0x1aad, 0xe, 0x5, 0x8, 0x8, 0x4, 0x5bde, 0xf, 0x0, 0x10000, 0x0, 0x6, 0xbb, 0x6, 0x6, 0x1, 0x9, 0x1, 0x3, 0x1287, 0x9, 0x4, 0x7, 0x3, 0x5, 0xa, 0x6, 0x800, 0x3, 0x4, 0x1, 0x6, 0xe4bc, 0x4, 0xfff, 0x9d3, 0x7, 0x3c8a, 0xe, 0xfffffff0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x3, 0x5, 0x2, 0x0, 0x40, 0x8, 0x5, 0xfffffffa, 0x6, 0x155, 0xd36, 0xf4, 0x5, 0x510, 0x1, 0x50, 0x8, 0x6, 0x7f, 0x6, 0xa0a, 0x4, 0xf, 0xffffff64, 0x9, 0x8, 0xa58, 0x3, 0xb, 0x4, 0x563ea11a, 0xe, 0x8001, 0x7, 0x800, 0xfff, 0x7, 0x7, 0xfffffff9, 0x400, 0x3, 0x921, 0x7ff, 0x8, 0x2, 0x7fffffff, 0x7, 0x1, 0x7fff, 0x0, 0x8, 0x7fff, 0x5, 0x6, 0x200, 0x5, 0x9, 0x8, 0x4f1, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2d, 0xc, 0x6, 0x9, 0x9, 0x4, 0x2a, 0xace, 0xc, 0x7, 0x7fffffff, 0x1, 0x2, 0x7fff, 0x0, 0x7, 0x6, 0x5, 0x1, 0x8, 0x5, 0x0, 0xe, 0xffffffff, 0x8, 0x7fffffff, 0x2, 0x7, 0x10000, 0x3, 0x200, 0x83, 0x4, 0x800, 0x4, 0x6a, 0x100, 0x7, 0x200000a, 0x1000, 0xe947, 0xfff, 0x8, 0x7fd1, 0x6, 0x6d, 0x40, 0x6, 0x2, 0x8, 0x3, 0x1, 0x636, 0xfffffff7, 0x7, 0x7, 0x6, 0x8001, 0x7, 0x6, 0x2e6b800, 0xf, 0x40, 0xa, 0x7, 0xdd, 0x6, 0x3a3, 0x0, 0xfff, 0xd, 0x7, 0x7ff, 0x9, 0x564, 0xd1, 0x8, 0x8, 0x6, 0x7, 0x8, 0x4, 0x0, 0x7, 0x8, 0x8, 0x2d8f, 0x5, 0xc0b, 0x4d, 0x4ab, 0x6, 0xacf, 0xdfad, 0x2, 0x405, 0xffffffff, 0x1, 0x7, 0x3, 0x5, 0x4, 0x80, 0x5000000, 0x7, 0x0, 0x7, 0x4, 0x100, 0xa5e, 0x71, 0x6, 0xb7, 0x80, 0x101, 0x2, 0x2, 0x7, 0x8001, 0x1004000, 0x100, 0x5, 0x73, 0x80000000, 0xfffeffff, 0x1, 0x1, 0x5, 0x9, 0x83a5, 0x2, 0x2, 0x4, 0x8, 0x4, 0x5, 0x8001, 0x1f, 0x4, 0x200, 0x3, 0x1800000, 0x1000, 0x9, 0x3, 0x5, 0xc3a9, 0x6, 0x5, 0x1, 0x8, 0x0, 0x7fff, 0x402, 0xff, 0x3, 0x7, 0x9, 0x2, 0x2, 0x7, 0x4, 0x8, 0xfffffffd, 0x7f, 0xb7b, 0x7, 0x1, 0x0, 0x3, 0x5, 0x4, 0x1, 0x100, 0x7, 0x6, 0x2, 0x2, 0x10, 0x80, 0x7, 0xb, 0x23c, 0x3, 0x6, 0x7, 0x30f, 0xffffffff, 0x8, 0x1, 0x971, 0xf59, 0x0, 0x1, 0x8, 0x7ff, 0x0, 0x4, 0x0, 0x1ff, 0xed6, 0xfe, 0x1, 0x5, 0x6, 0x2, 0xb, 0x10, 0x5, 0x5, 0x3, 0x3, 0x4, 0x2, 0x0, 0x8ed, 0x81, 0xffffffa5, 0x0, 0x2, 0x4, 0x6, 0x5, 0x8, 0x6, 0x5, 0x2, 0x9, 0x7, 0x4, 0x8, 0x77f, 0x6, 0xf8000000, 0x38a35b26, 0x4, 0x0, 0x0, 0x18000, 0xc7, 0x5, 0xc0000000, 0x2, 0x4, 0x10000, 0x7fffffff, 0xbb66, 0x7, 0x80, 0x40, 0x0, 0xffffffff, 0x6, 0x2, 0x3, 0xffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0xe, 0xcc9, 0x3, 0x0, 0x543, 0xc367, 0x6, 0x7, 0x1ce4dbb7, 0x6e, 0x7f, 0x0, 0x2, 0xd, 0xffc0000, 0x8, 0xf4aa, 0x3ff, 0x68, 0xe56, 0x0, 0xffffffff, 0xfffff001, 0x9, 0x5, 0x8, 0x76, 0x3ff, 0x4, 0x2, 0x5, 0x80000000, 0x6ffe01de, 0xbdee, 0x5, 0x0, 0x5, 0x2, 0x3, 0x7f, 0xd, 0x2, 0x10001, 0xb, 0x28, 0x3, 0x8, 0x2, 0x7fffffff, 0x9, 0x8000, 0x6, 0x2, 0x5, 0x7, 0x7, 0x2, 0x4, 0x100, 0x6, 0x800, 0xfff, 0x53e2, 0xfffffffc, 0x3, 0x100, 0x24, 0xfffffff4, 0x9, 0x1, 0xff, 0xffffff58, 0x6, 0x4, 0x8, 0x9, 0x7, 0x35, 0x8000, 0x6, 0x3, 0x7fffffff, 0x1, 0x2, 0xfff, 0x4, 0x8, 0x17, 0x5, 0xc, 0x28d0e453, 0xffffff33, 0x7, 0x1000, 0xffffffe7, 0xb, 0x8, 0x0, 0x5, 0x400, 0x9, 0x9, 0x7, 0x4, 0x1, 0x3, 0x3ff, 0xde, 0x9e, 0x5, 0x1000, 0xd, 0xffffff01, 0x4, 0x5b, 0x60000, 0x2, 0x80000000, 0x8, 0x7fffffff, 0x8, 0x9, 0x5, 0x6, 0x3, 0x40, 0x2, 0xffff, 0x7fffffff, 0x3, 0x4, 0x800, 0x8001, 0x9, 0x3c, 0x4, 0x2, 0x4ec, 0x1, 0x3, 0x1, 0x8, 0x5, 0x1ff, 0x15, 0x81, 0xc, 0x40, 0x400, 0x4, 0x3, 0x8, 0x7, 0xa, 0xfffffff7, 0x3, 0x400, 0x7fff, 0x1, 0x5, 0x80000001, 0x81, 0x5, 0x4, 0xffffffff, 0x14, 0x9, 0xc0000000, 0x8, 0x6, 0x8, 0x4, 0x4, 0x12, 0x7fff, 0x106, 0x3, 0xdc, 0x8, 0x9, 0x4, 0x8, 0x7fffffff, 0x7f, 0x81, 0xf, 0x7, 0x4, 0x8, 0x9, 0x3, 0x8, 0x8001, 0x7f, 0xf72, 0x1, 0x1, 0x1, 0x6, 0x3, 0x5, 0x1, 0x7, 0x0, 0x81, 0x9, 0x868, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x2, 0x4, 0xcf, 0x8, 0x8, 0x3, 0xfb800000, 0x0, 0x3800000, 0x6, 0xa68, 0x40, 0x1, 0xc, 0x0, 0x3, 0x151c3a2c, 0x6, 0x6, 0x401, 0xb, 0x81, 0x2, 0x4, 0x5, 0x9, 0xc580, 0x6, 0xc00, 0x80000001, 0xf05, 0x800, 0x1, 0x9, 0x2, 0x6, 0x4, 0x0, 0x6, 0x9, 0x1]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1d2c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000180)=0x7f, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="0100"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef59ba490cec9e660f218d8ec02d1aa80000460f1c460041ae", 0x48}], 0x1, 0x75, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2a0000002700000000080001002e00004900"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 30.435558066s ago: executing program 6 (id=2732): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x40, 0x7fff0003}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000100)) sendto$inet6(r1, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000140)=0x5055, 0x4) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) 30.356548249s ago: executing program 6 (id=2733): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fanotify_init(0x8, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fanotify_mark(r4, 0x541, 0x40001031, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r6, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x13, 0xf7) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) ioprio_get$pid(0x1, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x108) fanotify_init(0xf00, 0x1) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "97983397639971ac", "a6ca8b5242717cb886e49062c44ed691", "60d7ece3", "2f1a372c7d5a9898"}, 0x28) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) 30.053828869s ago: executing program 35 (id=2733): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fanotify_init(0x8, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fanotify_mark(r4, 0x541, 0x40001031, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r6, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x13, 0xf7) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) ioprio_get$pid(0x1, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x108) fanotify_init(0xf00, 0x1) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "97983397639971ac", "a6ca8b5242717cb886e49062c44ed691", "60d7ece3", "2f1a372c7d5a9898"}, 0x28) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) 13.859237038s ago: executing program 7 (id=2769): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000340)=0x4, 0x4) 9.763614878s ago: executing program 7 (id=2772): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x10, 0x5, 0x1}}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) syz_emit_ethernet(0x1172, &(0x7f0000000340)={@multicast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x2, 0x1164, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010102}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x17, 0x3, [], "aa4662ec7b5a84f33b3aee93ba4ebd381f408143dc6488"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7, 0x6], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xfffd, 0xbdf], "38ae05a03af9fa3fc748f45bffaaa750961fc58ee00bd44fbc84ccb9131a070c0d5f8f272d23cf1a5cf5a59320fd5102c88c11fdef0ea9d97afe"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x3, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x8, 0x1, 0x0, 0x2, 0x7, 0x5}, 0x2, {0x3, 0x1000, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "6e6cd41ea5226cf5439ceee805d2fa2a2eaaaa8be8bd4e280f49949a0725717827600b3b775062fd1b0e707a02a924b77d0d4dcd854e9d6535f64ae8dc826c1836ba6bf93c310f5fe97fe47a10ff791cd9f12c9ee06480195827a5599b3cf7157949ad9c1d316fe89857679552aa6b914536bf82ca7dfcdaf3c2fcbd9565d3f1b6c64813d5629fa4e84f84901ede0f01e1e84faa3afb4302c65999007712806722ba188d2c0dd5f3be66fbcfd304f239f6988c"}}}}}}, 0x0) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) 9.661184644s ago: executing program 1 (id=2774): syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x6, 0x5b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, r2, 0x401, 0x70bd2c, 0x259fdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff9}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c455}, 0x2400c804) 8.735177658s ago: executing program 2 (id=2777): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x880) 8.734393738s ago: executing program 1 (id=2778): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB="905cb39254fd4e24a6f9c2ced6a18e53c0be12c1496c0f5e5337f019e7f048592acb797031c530ab03529d2c9c690092acb96d95a04750f1b7a40a66f5a1afaa5578c8a089e22386b374d2421353d676255f0bf52784f23f2ff145667da46e855506c92bf52147ff74ca099b4937fb7a53a81fd0ed8aa27075e222e93dd3a2827b65f9706ef4efb3bb06a29e978a8c3a9da9c73772e9e9643fdb6e9e5652c5c1489f7b622669a4158e0975acc1d93c9abb6d616ec64143886265928c26a0374b04190be1e4da7c02fe67349d3a8617fe5691b5e697f9cf06f0dcdd0aa58ac5144800"/241], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000880)={{0x9000, 0x100000, 0xa, 0x9, 0x1, 0x83, 0xf6, 0x86, 0x2c, 0xea, 0xa, 0x1}, {0x3000, 0xb000, 0x0, 0xff, 0x9, 0xab, 0xfd, 0x1, 0x6, 0x6, 0x3, 0xff}, {0x5000, 0x50000, 0xd, 0x2, 0x6, 0x0, 0x0, 0x81, 0x6, 0x8, 0x8, 0xf7}, {0x8000000, 0x10000, 0xa, 0xc, 0x0, 0x48, 0x3, 0x8, 0x4, 0x6, 0x8, 0x8}, {0x2, 0xffff1000, 0x10, 0xf4, 0x4, 0x0, 0xe3, 0x1, 0x2, 0x87, 0x9, 0x1}, {0xffff1000, 0xe000, 0xf, 0x4, 0x4, 0x5, 0x3, 0x2, 0x29, 0x4, 0xd, 0x5}, {0xd000, 0xd000, 0x8, 0x1, 0x4, 0x3, 0x4, 0x2, 0x2, 0x9, 0xc6, 0x71}, {0xeeee8000, 0xc000, 0x14, 0x4, 0x1, 0x0, 0x9, 0x3, 0x10, 0xd, 0x4, 0xe}, {0x0, 0x5}, {0x80a0000, 0xfff}, 0x10, 0x0, 0x41000, 0x10041, 0x0, 0x4000, 0x70000, [0x7, 0x1, 0xdad, 0xffffffffffffe8b6]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000340)={0x0, 'macsec0\x00'}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000300), 0x2, 0x4040) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="8c9b92241de2f9c4fa284ecd2f10ed4c863fd93ad4c9328d9cb97760", 0x1c}], 0x1}, 0x10) 8.66060616s ago: executing program 2 (id=2779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, r2, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 8.425883086s ago: executing program 7 (id=2781): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000340)=0x4, 0x4) 8.273543637s ago: executing program 7 (id=2782): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x2, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80047453, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x6, 0x9, 0x0, 0x7a9, 0x3}, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000440)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x4, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000240)={0x0, 0x0, 0xc}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffe}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 5.692274696s ago: executing program 2 (id=2785): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='password\x00', &(0x7f00000004c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xf7, 0x9, 0x4, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x20, 0x6, 0x800}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newchain={0x2ac, 0x64, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xa}, {0xffe0, 0xffff}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x274, 0x2, [@TCA_CGROUP_EMATCHES={0x270, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x800}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x1}, {0x8000, 0x7f, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f}, {0x4, 0xfc, 0x1}}}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_VAR="a5494f48035a3289", @TCF_META_TYPE_VAR="133afa", @TCF_META_TYPE_VAR="cafc", @TCF_META_TYPE_VAR="f809f7977b21", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1dfa", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="7baef6335aca"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1f7e7165369ed6e2"]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="ea43127fbed4b8e5eed0", @TCF_META_TYPE_VAR="2b8b26f7529b2b79", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="de19", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5ba45aa72c2d0e", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="cc96", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e492", @TCF_META_TYPE_VAR="6c2e6da68d4b1e2ec074", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0x7ff, 0x0, 0x442}, "c0a74561ef8b6b34c23dbe6f7704ecfece05adfad7beae96ae22234677f6b957309b2673a1030149f8226ee6d7c4bec0"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4798, 0x3, 0xfffb}, {0x2, 0x1, 0xfffffc01, 0xc904}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x8000}, {{0x4, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x9}, {0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xdd04}, {0x4, 0x6, 0x3, "824b7f3b54a8"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x7}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xbd, 0x1, 0x7}, {0x8, 0xffff3f9e, 0x8000, 0x6, 0x7, 0x1, 0x1}}}, @TCF_EM_IPT={0xe4, 0x3, 0x0, 0x0, {{0x4e2, 0x9, 0x80d}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9a, 0x5, "a0cbeef968a3898575b6766884a1fadf8ad6333d9e92fa4acf3806e3d6b266df02c3baf27ad7780cb76a388337a2e66f1eb0f057a1a1c76c2e52d4700bc70a8c136fffb0526f198c5743ca80fd0346b132be71763403cede2bc0d0849bcdfced00b2c019954d2cec3c1c2f9ef120a8016773b866517d198d4cd8092854325e5a26c9eca2d7a1c4a9f8a00bfb05b90cb008e29fa80d07"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x80}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x320, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 5.501578427s ago: executing program 5 (id=2786): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x218cc2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r5, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x10000, 0x590f}}, './file0\x00'}) sendmsg$nl_netfilter(r11, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x26c, 0x0, 0x8, 0x301, 0x70bd29, 0x25dfdbfb, {0x3, 0x0, 0x3}, [@generic="89acf95e94d9a412fdebd91eaf1e38217d84cfe31e3eebaca1ea1d8f6036e94c03bf9110bcff47829b5aaa444c46f660133d7a5396a27d72530da73e2798b5798197d72cb9c2be27b4171282c0a442c3ef9e1daed5bf6984922c08ff3cca170b051940254da48b0a74d3bd8c2bf882253a06e9b7f54ed0ecab5d93117fff4296", @generic="b07b7555f3b9bb20ffde4ac109544409d268c3d05ead72bd4cc57911423b889d7095f14f5bc9352eda97723fb59b5e60e495989fb9556af022edc02724fd75f4c3b752804dbff977d4c59de9f91a5b4f224b746d0b30c4e96354ef26b51519832bd59ea93e7f7a8bd983f0c16ac01f36b9e413cc33143ef32f72b5571174c7fd7fd3d509de6111a1c7fa6b9d857ce7dcfa6921649c96833bc4dfea1aae35807ebbed236c23927d", @generic="12340db427109c9fb347c074662273e59b40c940aa3705eb4f09d5136140b45078642d668cfc45b3437ef9f7a10cb50d399f61004c5ccb565f1a7f10e559bd4b96a01f37", @typed={0x8, 0xe8, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xd4, 0x10b, 0x0, 0x0, @binary="c96abaa07cc9d928d13f2fc62c5d6a9821dca703333cdfb64dd31b3c06ba3a5422bb1309455260547f1b4e5d010e4c5a8436b2193f756da04b12a4110f6b39a6310b4891e20bc9a29dadb98db31bda98d0e303b61cb1c23ad5189a25453a92f0a04300ae6e5516b90838124ff9d2e47bdda22c6c9ddf28182b35fd93d12dbacbdf711467e24c1ead2e1b1fa13b7c51b3941b31cc694f812c928df5cfc158c8091499785547885ad2bdaf7fd2a8ed874c656bb6a8214f90f9eed95feb901e57567be5d0c0bcd4455a1de5cf2f7a09410c"}, @typed={0x4, 0x13c}, @typed={0x4, 0x66}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80d5) 4.85813541s ago: executing program 7 (id=2787): sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x80000001, 0x80) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x8, 0x68c59a61, 'syz1\x00', 0x81}, 0x1, 0x20000812, 0x4, r1, 0x2, 0x4000, 'syz1\x00', &(0x7f0000000200)=[':]{@\\*`@--:@%\x00', '}\x9d:\x00'], 0x12}) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r5 = eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) ppoll(&(0x7f0000000040)=[{r2, 0x1082}, {r2, 0xc382}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={[0x4]}, 0x8) read$FUSE(r2, 0x0, 0x0) 4.727151142s ago: executing program 2 (id=2788): r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600000400"}, 0x80, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r0], 0x0) 4.141074399s ago: executing program 5 (id=2789): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffee8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000240)={0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000098f000/0x4000)=nil, 0x4000, 0xb635773f05ebbeec, 0x4000010, r5, 0xedb90000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0xd8, 0xb, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x2}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x5, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 4.082449392s ago: executing program 8 (id=2734): r0 = mq_open(&(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x2, 0xd2, 0x0) fcntl$getown(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700"/116], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r9, 0x0, 0x0) splice(r8, 0x0, r2, 0x0, 0x317e, 0x4) close_range(r1, 0xffffffffffffffff, 0x2000000) 3.187998126s ago: executing program 5 (id=2790): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='password\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0xf7, 0x9, 0x4, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x20, 0x6, 0x800}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x320, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x300, 0x70bd2b, 0x25df9c00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0xc}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 2.896048979s ago: executing program 1 (id=2791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000340)=0x4, 0x4) 2.773455616s ago: executing program 1 (id=2792): statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x3ffffffffffde, {0x0, 0x200000000, 0x8000001, 0x4, 0x6, 0x0, {0xfffffffffdfffffc, 0x10001, 0x200000000000, 0xd, 0x0, 0xfe, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r3, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880010002000000ffff000005"], 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000005c0)={r5, &(0x7f0000000480)='noextend', 0x40, &(0x7f0000000500)={@_ha_fsid={[0x1, 0x6]}, {0x2, 0x9, 0x1000, 0x1000}}, 0x1, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r6}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lsm_get_self_attr(0x1, 0x0, &(0x7f0000001bc0), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)={0x6c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x1000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x86c}, @NL80211_ATTR_PBSS={0x4}]}, 0x6c}}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a740)={0x90, 0x0, 0x3, {0xfffffffffffffffe, 0x1, 0x8000000000000001, 0x7, 0x9, 0xffffffff, {0x3, 0x7, 0x7, 0xc90e, 0x8, 0x9, 0x6, 0xdd, 0xc, 0x1000, 0x6, r7, r4, 0x4, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2408, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=virtio,version=9p2000,access=', @ANYRESDEC=r0, @ANYBLOB=',cachetag=[-.,noextend,mmap,access=', @ANYRESDEC, @ANYBLOB="2c63616368653d6673632b2047992efa896368653d6d6d52502c63616368653d6e6f6e652c646f6e745f61707072616973652c726f6f74636f6e5f752c666f776e65723ead14adf6f3f7bd442c5f06aa5b594cb7433e6d2e466d40c96d246424a70e6770964fd1d695d906a71e98667fda0d8994207c1b28c635422e0d7812e70282fcc96420e6342761743c0e6a99cf82b18409a1cde32ca41fadbf6db3c8522eb15892c54849e01f53d1a703535cbac68b459738d799ddb4cb28ace9c5dcda5bd90263b5312c4b4b6a61fecb4346086f6987bc5bb356e30397606a36e680d329d2136cec57", @ANYRESDEC=0xee01, @ANYBLOB="2cc30000003c", @ANYRESDEC=r7, @ANYBLOB=',\x00']) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r11, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x1, 0x0, 0x6}, 0xca, 0xc, 0x5}) ioctl$FS_IOC_SETVERSION(r11, 0x40087602, &(0x7f0000000000)=0x100) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000440)={0x10, 0x0, "23a22c4561787e395501127b8e4f0fe9"}) 2.62842173s ago: executing program 1 (id=2793): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000810) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r4 = syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe2, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x30, 0xf3, 0x8}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xc, 0xe6, 0x3, 0x40, 0x80}, 0x4b, &(0x7f0000000140)={0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x3953, 0xf000, 0x1, [0xf, 0xff000f, 0xc0, 0x0, 0xff00c0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x10, 0x5, 0x8, 0xf00, 0x3, [0x3f00, 0xc03f, 0x30, 0x30, 0xff00c0]}]}, 0x7, [{0x29, &(0x7f00000001c0)=@string={0x29, 0x3, "7eeca9e682df42ce29b783f14016b3b7be8280483d918c7ddf56f3a1e49c290c65767ad2ca6950"}}, {0xbc, &(0x7f0000000200)=@string={0xbc, 0x3, "c33b42bc4ca54a07db486637d043870e5def3cc1e523b015f17a3ff1faa5b641a92cae34698cdf5c89a6075f3fb3f5fa6bf99cb2719ae72208bc12a5f2fc64afb6d283ce3a7db5ec914e4d5e19effe0603c3b94eb14dfd2a4b6df546b57b66ea7a3db77019ee46cb3e120c787bdfcc5baf3516c8933c5fbebd9ee38f5c706bd3d39468d94ba9dca4bfb578d7a43742ff8715c597d963330ba895ea844b68d9e642475a9e59f9b09e5c5c94fa2b096bfe8a85edf2d4bca4488b08"}}, {0x101, &(0x7f0000000380)=@string={0x101, 0x3, "0eb06c58483cf449d2e6d091bc0b8cfa299dd0ca852000319c45e42ed5903ac7dea8dbd7d4c05b4c1d3fb50de2f9f512cf0d6c1fd821cb455d62d24b63bf465d863bc67b49c6868e9b00840668c3cf80fa61e60e81e130a4a262d380723872a0f3a5148a777c26544df878a22f9ef4bd6160712cf936cd1b1269b657a417ef2353f4f2beb2547993f416762b4a553de925c31ec8e10ce263ae53390806f25def07eb54d4529efd9eb21d5d81972eca5745e487a7485cb9b28d6e4c7e880d676e416fc680c20a796f3cb907d901e776e15d12f1b4bfab76d87fe49574d0dd139fee6c78bf74d9e513ab0f2a93b9103ff0313b38233d42c9990e69748f55c051"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44b}}, {0x88, &(0x7f0000000540)=@string={0x88, 0x3, "41b97342dfc9ee9e9d77d93d9d0ad0f680bb1fe3f0d212e8da1d2b2380f75dd7c8f0c0d55ff45d04fe46c510f87d2ff74edcdbd89c3ca64a2c7d3ee69730e5c7a89e3b3f2c2a205bef4cafdb702a71cf9c48f76abeb73f65c10542017318c3878ad9d24a4d027389d812722d6db4fa13fe337b57e5fdc8ab4153a187e0b0f54f9c5ba647e321"}}, {0x58, &(0x7f0000000600)=@string={0x58, 0x3, "d98fe8bfbaf00dc7e1e07bc290b757e8ff61842db22d6b8a9ba040d635e5fe65db909638c1aeb3a3979d7291d48198ef1035dbb1e8990f161453dec8c15d69ac69633334a561924575197ff3e4da9113e57583f9282c"}}, {0x4d, &(0x7f0000000680)=@string={0x4d, 0x3, "d2e9cd12a5f22f310d2627e33df77d1fd96f8ba5dbab78f09356310f654d7b8007d1a01ec44a1f29d94b8aeefdfe5756d13b395971700b4216e9b4ac9b407198bb940954e86232f0bb595b"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x20, 0x5, 0x12, {0x12, 0xa, "aa396fd3c8451248b7032cd86bec8910"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000880)={0x20, 0x12, 0x98, "754ab1680292d0c822744a60cc6e07a8db87c95132b3e947eec9001753b3415e50da1098b8ad727aa8abf553b26ea70a07297f7e81de7022556e4d55f092ce49a34b428b193ef68043b5d254903e0a0dd8b376298a12ef530cbc8d0fa72c45c73c674f35e1091c0a6ca9cdfb02c56db86bcdec14515b6b1cb7adc799780870bf6ebddd099eafdcc681655dd77ffe1939d530d9d4fefac682"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000009c0)={0x20, 0x0, 0xba, {0xb8, "4d09be7db1cc048e6f3fe18d8acbe23453bac6a705d8583e481d976b6325cbed8dc1339130b44175ce34f8c16021a6caa16c07a00d0440bb9a9b8e712463cb6379eb85490a398e302431e0fc5cc7ba7a67aa2d43837686c20eefada6e6984202e95cf4ffd551cb8688338c852eb650bf7f4b12508d43679c388cc898f7c4e1c51dc04ef42e8bde9af7253c16f7940aaa8e739df1edaed33528856eca30bae04cc63eea9ee7fd8c01e3b004905b406999063c5c2e63885810"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) 2.465709534s ago: executing program 8 (id=2794): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60e98dc258ded60aee45b", 0x2b) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="14000000300001000000000004000029b1000080d590a43be2eb23a80cbc99b660ce3c2c63ad0275189ce69c4a77db05cbc6696d85c9d49c2bebd3eeafc9a116207b962019800fc078fed7d7ca4d5cbadc8de6ffe56f"], 0x14}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x3) write(r5, &(0x7f0000000680)="769fbf82a57f985f3a8d01a17790137c619519a5e48bc1e675930d91a44ec0d3a4319e9c9df3704577f589907a05647a3a", 0x31) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) mmap$IORING_OFF_SQES(0x0, 0x3, 0x1000006, 0x80010, r6, 0x10000000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000140)={0x77, 0x1, 0x7f, 0x8, "a9d83f74be5393779e6494f428c68c581c8b7a91e2c2835cb0549bfdb6e35bf67115f291d818bd23bac4b614de924cd927151023b9a2fb9cd905692a89baa50dff37acfa44c5e50e12ad7f1a4cb5ac1f4550cc1462dd8d44772b21f0c4b5cc"}) 2.371393787s ago: executing program 8 (id=2795): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x218cc2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.536927761s ago: executing program 2 (id=2796): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x218cc2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r5, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x10000, 0x590f}}, './file0\x00'}) sendmsg$nl_netfilter(r11, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x26c, 0x0, 0x8, 0x301, 0x70bd29, 0x25dfdbfb, {0x3, 0x0, 0x3}, [@generic="89acf95e94d9a412fdebd91eaf1e38217d84cfe31e3eebaca1ea1d8f6036e94c03bf9110bcff47829b5aaa444c46f660133d7a5396a27d72530da73e2798b5798197d72cb9c2be27b4171282c0a442c3ef9e1daed5bf6984922c08ff3cca170b051940254da48b0a74d3bd8c2bf882253a06e9b7f54ed0ecab5d93117fff4296", @generic="b07b7555f3b9bb20ffde4ac109544409d268c3d05ead72bd4cc57911423b889d7095f14f5bc9352eda97723fb59b5e60e495989fb9556af022edc02724fd75f4c3b752804dbff977d4c59de9f91a5b4f224b746d0b30c4e96354ef26b51519832bd59ea93e7f7a8bd983f0c16ac01f36b9e413cc33143ef32f72b5571174c7fd7fd3d509de6111a1c7fa6b9d857ce7dcfa6921649c96833bc4dfea1aae35807ebbed236c23927d", @generic="12340db427109c9fb347c074662273e59b40c940aa3705eb4f09d5136140b45078642d668cfc45b3437ef9f7a10cb50d399f61004c5ccb565f1a7f10e559bd4b96a01f37", @typed={0x8, 0xe8, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xd4, 0x10b, 0x0, 0x0, @binary="c96abaa07cc9d928d13f2fc62c5d6a9821dca703333cdfb64dd31b3c06ba3a5422bb1309455260547f1b4e5d010e4c5a8436b2193f756da04b12a4110f6b39a6310b4891e20bc9a29dadb98db31bda98d0e303b61cb1c23ad5189a25453a92f0a04300ae6e5516b90838124ff9d2e47bdda22c6c9ddf28182b35fd93d12dbacbdf711467e24c1ead2e1b1fa13b7c51b3941b31cc694f812c928df5cfc158c8091499785547885ad2bdaf7fd2a8ed874c656bb6a8214f90f9eed95feb901e57567be5d0c0bcd4455a1de5cf2f7a09410c"}, @typed={0x4, 0x13c}, @typed={0x4, 0x66}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80d5) 1.535381782s ago: executing program 7 (id=2797): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x2, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80047453, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x6, 0x9, 0x0, 0x7a9, 0x3}, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000440)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x4, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000240)={0x0, 0x0, 0xc}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffe}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.527164023s ago: executing program 1 (id=2798): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r1 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) syz_open_dev$tty1(0xc, 0x4, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE_TAIL_CALL(0x1800, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 1.336533074s ago: executing program 8 (id=2799): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0', [{0x20, '#! '}], 0xa, "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"}, 0x202) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) fallocate(r0, 0x3, 0x0, 0xffffffff002) socket(0x10, 0x3, 0xc) (async) r2 = socket(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) (async) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) unshare(0x64000600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) unshare(0x800) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_format(r4, &(0x7f0000006240)='-1\x00', 0x3) writev(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x300, 0x0) (async) recvmmsg(r3, 0x0, 0x0, 0x300, 0x0) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4620040000010000000000000002000300090000001f03000000000000400000000000000002000000000000007f000000060038000100feff030005000300000003000000cafe00000000000011f0660d2a159d8cb088e0b0d76d5b000000000000000000000000000000e500000000000033feffffffffffffff0300000000000000"], 0x78) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4620040000010000000000000002000300090000001f03000000000000400000000000000002000000000000007f000000060038000100feff030005000300000003000000cafe00000000000011f0660d2a159d8cb088e0b0d76d5b000000000000000000000000000000e500000000000033feffffffffffffff0300000000000000"], 0x78) 1.328257691s ago: executing program 5 (id=2800): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) ustat(0x2, &(0x7f0000000140)) r0 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0xa) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000700)={0x19}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./dev\x00', 0x102) r6 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x100) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1, r8}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r9 = syz_usb_connect(0x4, 0x47, &(0x7f0000000000)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x12102, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) 1.008119283s ago: executing program 8 (id=2801): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_NUM_TX_QUEUES={0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5c4a}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="00006aed213982e6c84286ef9aa57a675f566426ff3db962b1075d6626e4d72652f42c4ef0fd76374f658c4e60780c7172e6cc6b5f706995b59673f4088085e9f1237a088309f2fba5fa4925bca9daabc91094b1efc82abf7a30f7c739ef1fe54b750e24da5e219455bdf5697caa65e0ce78837e4dc712901c4b9b9bae26d1c8b33ac4dd02e3af64fe23ccd7647b4dfaa48a613e7b7508d504b8e9584025bb115c9c6610797d5cda7334824b726dacbc959c66ae5595c5", @ANYRES16=r3, @ANYBLOB="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"], 0x1b4}}, 0x8000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0xc4, 0x9, 0x1, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000640)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r7, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) r9 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) fallocate(r9, 0x11, 0x0, 0x5345) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4082, 0xff2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0x7, 0xffffffffffffffff, 'id1\x00'}) write$P9_RREADDIR(r10, &(0x7f0000000380)={0x2a, 0x29, 0x1, {0x0, [{{0x1, 0x4, 0x2}, 0x3, 0x0, 0x7, './file0'}]}}, 0x2a) 556.3364ms ago: executing program 5 (id=2802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000340)=0x4, 0x4) 487.519909ms ago: executing program 5 (id=2803): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_submit(0x0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0}]) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 59.270142ms ago: executing program 8 (id=2804): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0xbec, @mcast1, 0xd4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0xfffffff9, @private1, 0x1c000}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}], 0x68) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000700)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xe3, 0x2, 0xd9, 0x8, 0xf}, 0x38, &(0x7f0000000540)=ANY=[@ANYBLOB="050f38000503100b0a10030004000b010200141004810e89a8329bca15ddba989a7f119738353a901f0b1001028a00031007009fa9d807100200e50b8e51e73c7f89365210b08754948a3939bb5cc0e6b6532c26b280f38ea21e0efb23fbf5b0aa71165d4f8d58eddc04bd99c0854a701bd1be90dd04b4e0eea65ca3415a71b7820ca3e7359f8cb3e1fb083e7dcdb72bab879ed2225da27452082a4b5f755e1cfb4e05be230b1787f525933997e46b474122990e734e184726ee529e418d3a031d0544e293b2a68539e09f5253122d178cf2c57acd03808ac8b4de04"]}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f000000a1c0)=[{{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000005700)=[{&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/102, 0x66}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/189, 0xbd}, {&(0x7f0000005500)=""/233, 0xe9}, {&(0x7f0000005600)=""/252, 0xfc}], 0xa, &(0x7f00000057c0)=""/59, 0x3b}, 0x8}, {{&(0x7f0000005800)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000007b40)=[{&(0x7f0000005880)=""/56, 0x38}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/240, 0xf0}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000006a00)=""/131, 0x83}, {&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/73, 0x49}], 0x7}, 0x25}, {{&(0x7f0000007bc0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000009e40)=[{&(0x7f0000007c40)=""/201, 0xc9}, {&(0x7f0000007d40)=""/4096, 0x1000}, {&(0x7f0000008d40)=""/2, 0x2}, {&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/178, 0xb2}], 0x5, &(0x7f0000009ec0)=""/3, 0x3}, 0xc}, {{&(0x7f0000009f00)=@x25={0x9, @remote}, 0x80, &(0x7f000000a000)=[{&(0x7f0000009f80)=""/122, 0x7a}, {0xfffffffffffffffe}], 0x2}, 0x3bb}, {{0x0, 0x0, &(0x7f000000a0c0)=[{&(0x7f000000a040)=""/115, 0x73}], 0x1, &(0x7f000000a100)=""/149, 0x95}, 0xe6f5}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex_waitv(&(0x7f0000002940)=[{0x0, &(0x7f0000001000), 0x82}, {0x0, &(0x7f0000001040), 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x0, &(0x7f00000010c0), 0x82}, {0x0, &(0x7f0000001100), 0x82}, {0x0, &(0x7f0000001140), 0x82}, {0x0, &(0x7f0000001180)}, {0x0, &(0x7f00000011c0)}, {0x0, &(0x7f0000001240)}, {0xa, &(0x7f0000001280)}, {0x0, &(0x7f00000012c0)}, {0x0, &(0x7f0000001300)}, {0x0, &(0x7f0000001340)}, {0x3, &(0x7f0000001380)}, {0x0, &(0x7f00000013c0)}, {0x0, &(0x7f0000001400)}, {0x0, &(0x7f0000001440)}, {0x0, &(0x7f0000001480)}, {0x0, &(0x7f00000014c0)}, {0x0, &(0x7f0000001500)}, {0x0, &(0x7f0000001540)}, {0x0, &(0x7f0000001580)}, {0x0, &(0x7f00000015c0)}, {0x0, &(0x7f0000001600)}, {0x0, &(0x7f0000001640)}, {0x0, &(0x7f0000001680)}, {0x0, &(0x7f0000001700)}, {0x0, &(0x7f0000001740)}, {0x3, &(0x7f0000001780)}, {0x0, &(0x7f00000017c0)}, {0x0, 0x0}, {0x0, &(0x7f0000001840)}, {0x0, &(0x7f0000001880)}, {0x0, &(0x7f00000018c0)}, {0x0, &(0x7f0000001900)}, {0x0, &(0x7f0000001940)}, {0x0, &(0x7f0000001980)}, {0x0, 0x0}, {0x0, &(0x7f0000001a00)}, {0x0, &(0x7f0000001a40)}, {0x0, &(0x7f0000001a80)}, {0x0, &(0x7f0000001ac0)}, {0x0, &(0x7f0000001b00)}, {0x0, &(0x7f0000001b40)}, {0x1, &(0x7f0000001b80)}, {0x0, &(0x7f0000001bc0)}, {0x0, &(0x7f0000001c40)}, {0x0, &(0x7f0000001c80)}, {0x0, &(0x7f0000001cc0)}, {0x0, &(0x7f0000001d00)}, {0x0, &(0x7f0000001d40)}, {0x0, &(0x7f0000001d80)}, {0x0, &(0x7f0000001dc0)}, {0x0, &(0x7f0000001e40)}, {0x0, &(0x7f0000001e80)}, {0x0, 0x0}, {0x0, &(0x7f00000001c0)}, {0x0, &(0x7f0000001f40)}, {0x0, &(0x7f0000001f80)}, {0x0, &(0x7f0000001fc0)}, {0x0, &(0x7f0000002000), 0x82}, {0x0, &(0x7f0000002040)}, {0x0, &(0x7f0000002080)}, {0x0, &(0x7f00000020c0)}, {0x0, &(0x7f0000002100)}, {0x5, 0x0}, {0x0, &(0x7f00000021c0)}, {0x0, &(0x7f0000002200), 0x2}, {0x1000000000000000, &(0x7f0000002280)}, {0x0, &(0x7f00000022c0)}, {0x0, &(0x7f0000002300)}, {0x0, &(0x7f0000002340)}, {0x0, &(0x7f0000002380)}, {0x0, &(0x7f00000023c0)}, {0x0, &(0x7f0000002400)}, {0x0, &(0x7f0000002440)}, {0x0, &(0x7f0000002480)}, {0x0, &(0x7f00000024c0)}, {0x0, &(0x7f0000002500)}, {0x0, &(0x7f0000002540)}, {0x0, &(0x7f0000002580)}, {0x0, &(0x7f00000025c0)}, {0x0, &(0x7f0000002600)}, {0x0, &(0x7f0000002640)}, {0x0, &(0x7f0000002680)}, {0x0, &(0x7f00000026c0)}, {0x0, &(0x7f0000002700)}, {0x0, &(0x7f0000002740)}, {0x0, &(0x7f0000002780)}, {0x0, &(0x7f00000027c0)}, {0x0, &(0x7f0000002800)}, {0x0, &(0x7f0000002840)=0xfffffffffffffffe}, {0x0, &(0x7f0000002880)}, {0x0, &(0x7f0000003380)}, {0x0, &(0x7f0000002900)}], 0x5f, 0x0, &(0x7f0000003300), 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x3f00) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="389671a630000000609541e3e63fac212d6c351be305c32bec14a8d409ead3452f5a1dfb6ed62b7057eb42628927f12e2641596d167ccf6ee3e79c3e03cde387e5a1c0d78bb00297c2b47264da8f85173c865e715f002acec5b8c45be12a6a39bc50167008b59eb3a23bb450fb5cef98fc61c532a9784ecca9fc45e2c967c73a9f652b1256f5379767e2d51b", @ANYRES16=r9, @ANYBLOB="010000000d000000000001000000000000000141000000030017"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4000080) sendmmsg(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, &(0x7f0000000ec0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0, 0xfffffffffffffee2}, {&(0x7f0000000500)="43816591347674edc8c1", 0xa}, {&(0x7f0000000b00)="9e10b0545b74690c88aff43178fa39a37c44385256d0dab6d79741071cb6eee93e23f0397f99543008a796069e591c87b3ba9337bd169abda09918a52035be80032c1c5adf342c8c8cfd56cabd6992c0512b6cf4ef9a1100dc162e474b34ac94e09072d50cd2906daee3e8d2a8a2f1ebc661492fac58258adf7dcb83cb5334d541babe90b40ed2054eab3f74eea73393477f6a5ea4d22a57b16854556b64012f5f94db6165969d3bcfdd64e8bcd8620d1579f6035d0f7ed033f9a848961f54cdea52bfc8c8353ab45d8a68e946c94d553414b0195e8d9b74c923eda20bfffbf9f2d8a1", 0xe3}, {&(0x7f0000000c00)="172f22a1849a4f88605b92892dee3cfce376a1b1f3a375be7304e0215a2c70ee9bac187c3719b5d57ea0ec89", 0x2c}, {&(0x7f0000000c40)="b592657a5eda6588633d9c2da3356779972948cc5466b0eb04522cec0b07781f215a2bbcb9a92dc853cb8062423faa7343750c1da1c4e76bd9fa19612e9756162f4b9c95429c0a6df81de2bcad1b04f0656044a95565faf1477a8e5d4758ac7571fda3c3a31b803a8b770c5585ed54f2f4338946a10d0fc510117e06a0f64e073c641ba6", 0x84}, {&(0x7f0000000dc0)="a99bf1a810c4cdf0c62d9038fbc53d5e60a64169f904cd53432df48839983391c3b8399030b4325d28d7af7e7bf0111532923051b33726fa1b7ed5cbdde1ade3d96249d5456c5a74b791478c65a93a56478ed825da012aebd8d0f34e85850394fb4e8f3d25040ef60851a7b144a3084e312c3326648ff85dd744fb338f1584681002d977b9def75eef0971b61d94820a11169ceece8f58a983c661bf6184f711494cf31cd6deb192b466cfef8a43cdd25f", 0xb1}, {&(0x7f0000000640)="2f6d86c1100478ec800a6985bc37bc982a1282f2ca803bd34c89731404a79c9927f40071d4cb1b38dbeb5d82b1e030b8b24d81d846c9a2054a59a9b9d957132ac7e9bcaa6b8db2d3225e472d45849014aa22fbd58233c8f119fd24041a3b5b42d47cb9bc8bd72d6d4f2a0c88920d3a22fa6cdad925d39aa26c216bdc33b4a3fff27ae3dfb54d618ffb4774dd686767720b71c7db09ed8423761d569c8b0cf59154afcbff46e1e9f8f5b9ffa6ba", 0xad}, {&(0x7f0000000e80)="bab6638f81750cc22bea6ebf6d5d5ca4b61c086b058621daaaedec9e6d85f91d782357c19311f959bdf8ffca325d570e8c6af856eb8a7e", 0x37}], 0x9) 0s ago: executing program 2 (id=2805): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000440)}, 0x10) mmap(&(0x7f00000f7000/0x3000)=nil, 0x3000, 0x2000008, 0x4030032, r0, 0xffffd000) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='/,\x00', 0x100, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x45ac}, {[0x9, 0x800, 0x1, 0x6]}, 0x4, 0x0, 0x0}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r7, &(0x7f0000000040)="343431303002aa36e47ed918665775f0eefed62c3438303030", 0x19) kernel console output (not intermixed with test programs): usable UNC path provided in device string! [ 624.184790][ T5731] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 624.250909][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2020'. [ 624.431005][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.443043][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.458436][ T5731] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 624.468189][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.546621][ T5731] usb 3-1: config 0 descriptor?? [ 624.824874][ T805] usb 6-1: USB disconnect, device number 54 [ 625.026990][ T5731] konepure 0003:1E7D:2DBE.0016: unknown main item tag 0x0 [ 625.100153][ T5731] konepure 0003:1E7D:2DBE.0016: unknown main item tag 0x7 [ 625.112764][ T5731] konepure 0003:1E7D:2DBE.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.2-1/input0 [ 625.324979][ T5731] usb 3-1: USB disconnect, device number 69 [ 625.409866][T13698] fido_id[13698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 626.262277][ T805] usb 7-1: USB disconnect, device number 20 [ 626.650634][T13718] hpfs: Bad magic ... probably not HPFS [ 626.663081][T13718] hpfs: Bad magic ... probably not HPFS [ 627.631846][ T30] audit: type=1804 audit(1785492264.030:1104): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2033" name="/newroot/89/file0" dev="tmpfs" ino=499 res=1 errno=0 [ 627.762703][T13737] syz.2.2031 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 629.266882][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2039'. [ 630.475367][ T805] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 630.949565][ T805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.442123][ T805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.470147][ T805] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 631.493107][ T805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.511292][ T805] usb 7-1: config 0 descriptor?? [ 631.960605][ T805] konepure 0003:1E7D:2DBE.0017: unknown main item tag 0x0 [ 631.984585][ T805] konepure 0003:1E7D:2DBE.0017: unknown main item tag 0x7 [ 632.119523][T13786] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2046'. [ 632.174969][ T805] konepure 0003:1E7D:2DBE.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.6-1/input0 [ 632.242229][ T805] usb 7-1: USB disconnect, device number 21 [ 632.328658][T13790] fido_id[13790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 633.205568][T13799] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 633.212120][T13799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.244028][T13804] Cannot find del_set index 0 as target [ 633.252792][T13799] vhci_hcd vhci_hcd.0: Device attached [ 634.013596][ T5700] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 634.021331][ T5731] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 634.207640][ T29] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 634.346322][ T5731] usb 7-1: Using ep0 maxpacket: 16 [ 634.423825][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2055'. [ 634.584752][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 634.591722][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 634.603532][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.614878][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.625237][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 634.638746][ T29] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 634.648399][T13801] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 634.670255][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.889033][ T29] usb 6-1: config 0 descriptor?? [ 635.040097][ T13] vhci_hcd vhci_hcd.6: stop threads [ 635.118766][ T13] vhci_hcd vhci_hcd.6: release socket [ 635.189111][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 635.222939][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 635.413349][ T5731] usb 7-1: unable to get BOS descriptor or descriptor too short [ 635.419122][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0018/input/input27 [ 635.434588][ T5731] usb 7-1: no configurations [ 635.778910][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0018/input/input28 [ 635.862236][ T5731] usb 7-1: can't read configurations, error -22 [ 635.982875][ T29] kye 0003:0458:5013.0018: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 636.088242][ T29] usb 6-1: USB disconnect, device number 55 [ 636.238170][T13845] fido_id[13845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 636.734786][ T5731] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 636.894783][ T5731] usb 7-1: Using ep0 maxpacket: 8 [ 636.908674][ T5731] usb 7-1: too many configurations: 150, using maximum allowed: 8 [ 636.936375][ T5731] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 637.040339][ T5731] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 113 [ 637.066548][ T5731] usb 7-1: can't read configurations, error -22 [ 637.085524][ T5731] usb usb7-port1: attempt power cycle [ 638.030732][T13872] tipc: Started in network mode [ 638.035686][T13872] tipc: Node identity 4, cluster identity 4711 [ 638.041913][T13872] tipc: Node number set to 4 [ 638.394916][ T5731] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 638.513238][T13875] netlink: 'syz.5.2067': attribute type 1 has an invalid length. [ 638.672362][ T5731] usb 7-1: Using ep0 maxpacket: 8 [ 638.684535][ T5731] usb 7-1: too many configurations: 150, using maximum allowed: 8 [ 638.795130][ T5731] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 638.803392][ T5731] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 113 [ 638.812829][ T5731] usb 7-1: can't read configurations, error -22 [ 638.835711][T13875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 638.979105][ T5731] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 639.114906][ T5731] usb 7-1: Using ep0 maxpacket: 8 [ 639.129369][ T5731] usb 7-1: too many configurations: 150, using maximum allowed: 8 [ 639.145102][ T5731] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 639.153773][ T5731] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 113 [ 639.163198][ T5731] usb 7-1: can't read configurations, error -22 [ 639.170256][ T5731] usb usb7-port1: unable to enumerate USB device [ 639.194862][ T5700] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 639.409781][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 639.500589][T13902] xt_l2tp: unknown flags: 17 [ 640.693884][T13907] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 640.700437][T13907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 641.157704][T13907] vhci_hcd vhci_hcd.0: Device attached [ 641.284892][ T29] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 641.404828][ T5825] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 641.465851][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 641.679679][T13918] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 641.709884][ T6489] vhci_hcd vhci_hcd.6: stop threads [ 641.727551][ T6489] vhci_hcd vhci_hcd.6: release socket [ 641.746065][ T6489] vhci_hcd vhci_hcd.6: disconnect device [ 641.839265][T13934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 641.851439][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2085'. [ 641.884858][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 641.904197][ T29] usb 7-1: no configurations [ 641.913889][ T29] usb 7-1: can't read configurations, error -22 [ 642.374785][ T5723] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 643.107150][ T5723] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 643.155700][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.403533][ T5723] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 643.691970][ T30] audit: type=1400 audit(1785492280.090:1105): avc: denied { setopt } for pid=13987 comm="syz.5.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 644.314822][ T5723] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 644.480096][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2103'. [ 644.502341][ T5723] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.655901][ T5723] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.677185][ T5723] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 645.248291][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 645.258793][ T5723] usb 6-1: SerialNumber: syz [ 645.480469][ T5730] libceph: connect (1)[c::]:6789 error -22 [ 645.510877][ T5723] usb 6-1: 0:2 : does not exist [ 645.516293][ T5730] libceph: mon0 (1)[c::]:6789 connect error [ 645.531016][ T5730] libceph: connect (1)[c::]:6789 error -22 [ 645.551687][ T5730] libceph: mon0 (1)[c::]:6789 connect error [ 645.565821][T14010] ceph: No mds server is up or the cluster is laggy [ 645.585403][ T5723] usb 6-1: USB disconnect, device number 56 [ 645.662385][T10242] udevd[10242]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.435079][ T5723] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 646.855093][ T5825] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 646.886136][ T5723] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 646.895444][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.111343][ T5723] cdc_acm 7-1:1.0: ttyACM1: USB ACM device [ 647.338196][T14036] netlink: 'syz.7.2113': attribute type 1 has an invalid length. [ 647.539362][T14039] CIFS mount error: No usable UNC path provided in device string! [ 647.539362][T14039] [ 647.549459][T14039] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 647.768125][T14040] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2113'. [ 647.779171][T14036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.964861][T14043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.537643][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 649.199155][ T5730] usb 3-1: USB disconnect, device number 70 [ 650.076543][T14071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2118'. [ 650.091678][T14071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.269796][ T5825] usb 7-1: USB disconnect, device number 28 [ 650.569080][T14081] can0: slcan on ttyS3. [ 650.583234][T14085] netlink: 132732 bytes leftover after parsing attributes in process `syz.6.2123'. [ 650.741394][T14087] syzkaller0: entered promiscuous mode [ 650.750906][T14087] syzkaller0: entered allmulticast mode [ 650.760746][T14080] can0 (unregistered): slcan off ttyS3. [ 654.167217][ T4925] Bluetooth: hci5: command 0x0406 tx timeout [ 655.329153][T14132] hpfs: Bad magic ... probably not HPFS [ 655.341306][T14132] hpfs: Bad magic ... probably not HPFS [ 655.939134][T14127] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2138'. [ 656.023257][T14127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.057495][T14128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2137'. [ 656.130880][T14128] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 656.942170][T14152] syzkaller0: entered promiscuous mode [ 656.956696][T14152] syzkaller0: entered allmulticast mode [ 657.319635][ T5723] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 660.401848][T14180] No such timeout policy "syz1" [ 660.408785][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2151'. [ 662.083066][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2149'. [ 662.092833][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 662.262546][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2154'. [ 662.396670][T14197] smc: net device veth0 applied user defined pnetid SYZ0 [ 662.399484][ T30] audit: type=1400 audit(1785492298.690:1106): avc: denied { listen } for pid=14186 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.440357][ T30] audit: type=1400 audit(1785492298.690:1107): avc: denied { write } for pid=14186 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.483387][ T30] audit: type=1400 audit(1785492298.700:1108): avc: denied { accept } for pid=14186 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.511762][ T30] audit: type=1400 audit(1785492298.700:1109): avc: denied { read } for pid=14186 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.812155][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'. [ 662.977093][ T5723] usb 3-1: device descriptor read/64, error -71 [ 663.224853][ T5723] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 664.244928][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 664.302255][ T5723] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 664.318793][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.478707][ T5723] usb 3-1: Product: syz [ 664.482979][ T5723] usb 3-1: Manufacturer: syz [ 664.487798][ T5723] usb 3-1: SerialNumber: syz [ 664.495623][ T5723] usb 3-1: config 0 descriptor?? [ 664.502983][ T5723] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 665.219514][ T5723] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 665.696595][T14250] overlayfs: missing 'lowerdir' [ 666.017794][T14223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.152806][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 666.837155][T14258] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2169'. [ 666.862327][ T805] usb 3-1: USB disconnect, device number 72 [ 666.973664][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2172'. [ 667.344974][ T805] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 667.645395][ T805] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 667.710094][ T805] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.759887][ T805] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 667.808708][ T805] usb 3-1: config 1 has no interface number 1 [ 667.867605][ T805] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 667.962984][ T805] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 667.984187][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2178'. [ 668.149366][ T805] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.643972][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.670562][ T805] usb 3-1: Product: syz [ 668.686428][ T805] usb 3-1: Manufacturer: syz [ 668.692333][ T805] usb 3-1: SerialNumber: syz [ 668.730290][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2175'. [ 669.292883][ T805] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 669.320296][ T805] usb 3-1: MIDIStreaming interface descriptor not found [ 669.403292][ T805] usb 3-1: USB disconnect, device number 73 [ 669.997146][T14270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2173'. [ 670.008151][ T30] audit: type=1400 audit(1785492306.390:1110): avc: denied { shutdown } for pid=14269 comm="syz.2.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 670.080903][T14304] udevd[14304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.446316][T14314] hpfs: Bad magic ... probably not HPFS [ 670.461673][T14314] hpfs: Bad magic ... probably not HPFS [ 671.030982][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 671.750359][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2187'. [ 675.127685][T14362] /dev/nullb0: Can't lookup blockdev [ 675.135058][T14362] /dev/nullb0: Can't lookup blockdev [ 675.363023][ T30] audit: type=1400 audit(1785492311.760:1111): avc: denied { execute } for pid=14353 comm="syz.2.2195" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 675.546313][T14367] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 675.552850][T14367] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 675.582569][T14367] vhci_hcd vhci_hcd.0: Device attached [ 676.154114][ T30] audit: type=1400 audit(1785492312.550:1112): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 676.244813][ T5825] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 676.252357][ T805] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 676.464855][ T805] usb 6-1: Using ep0 maxpacket: 16 [ 676.977815][T13176] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 677.129257][T14386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.176423][ T5825] usb 43-1: device descriptor read/64, error -71 [ 677.260894][T14368] vhci_hcd: connection closed [ 677.261186][ T6489] vhci_hcd vhci_hcd.5: stop threads [ 677.273373][ T805] usb 6-1: unable to get BOS descriptor or descriptor too short [ 677.299767][ T805] usb 6-1: no configurations [ 677.311244][ T6489] vhci_hcd vhci_hcd.5: release socket [ 677.321092][ T805] usb 6-1: can't read configurations, error -22 [ 677.329377][ T6489] vhci_hcd vhci_hcd.5: disconnect device [ 677.366941][ T5825] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 677.814858][T14403] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 677.824039][T14403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 678.161802][T14396] netlink: 'syz.6.2206': attribute type 1 has an invalid length. [ 678.238909][T14404] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2206'. [ 678.433616][T14396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.490078][T14383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.813329][T14419] hpfs: Bad magic ... probably not HPFS [ 678.825808][T14419] hpfs: Bad magic ... probably not HPFS [ 680.465288][ T5723] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 680.683174][ T5723] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 681.014650][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.094196][T14435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.163541][T14439] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 681.270807][ T5723] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 681.686741][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2219'. [ 681.835944][T14432] CIFS mount error: No usable UNC path provided in device string! [ 681.835944][T14432] [ 681.846042][T14432] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 681.955998][T14463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 681.962559][T14463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 681.971836][T14463] vhci_hcd vhci_hcd.0: Device attached [ 682.215111][ T805] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 682.222824][ T5825] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 682.300002][T14470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.375031][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 682.568056][ T805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 682.582784][T14464] vhci_hcd: connection closed [ 682.596003][ T805] usb 3-1: no configurations [ 682.611926][ T805] usb 3-1: can't read configurations, error -22 [ 682.625519][ T5825] usb 37-1: device descriptor read/64, error -71 [ 682.854268][T14484] /dev/nullb0: Can't lookup blockdev [ 682.861400][T14484] /dev/nullb0: Can't lookup blockdev [ 683.551155][ T6623] vhci_hcd vhci_hcd.2: stop threads [ 683.558375][ T5825] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 683.589802][ T6623] vhci_hcd vhci_hcd.2: release socket [ 683.621479][ T6623] vhci_hcd vhci_hcd.2: disconnect device [ 683.898865][T14495] netlink: 'syz.2.2229': attribute type 4 has an invalid length. [ 684.080057][ T5716] lo speed is unknown, defaulting to 1000 [ 684.086127][ T5716] syz2: Port: 1 Link DOWN [ 684.099212][ T5716] lo speed is unknown, defaulting to 1000 [ 684.325063][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 684.521652][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 684.545538][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.611815][T14497] lo speed is unknown, defaulting to 1000 [ 684.791483][ T24] cdc_acm 7-1:1.0: ttyACM1: USB ACM device [ 685.369572][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.378181][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.564768][T14506] CIFS mount error: No usable UNC path provided in device string! [ 685.564768][T14506] [ 685.574863][T14506] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 686.766524][ T5731] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 686.966038][ T5730] usb 7-1: USB disconnect, device number 29 [ 687.061101][ T5731] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.081371][ T5731] usb 3-1: config 0 has no interfaces? [ 687.110692][ T5731] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 687.219480][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.228468][ T5731] usb 3-1: Product: syz [ 687.233765][ T5731] usb 3-1: Manufacturer: syz [ 687.244770][ T5731] usb 3-1: SerialNumber: syz [ 687.258818][ T5731] usb 3-1: config 0 descriptor?? [ 687.338497][T14535] /dev/nullb0: Can't lookup blockdev [ 687.345902][T14535] /dev/nullb0: Can't lookup blockdev [ 687.841960][ T5716] usb 3-1: USB disconnect, device number 76 [ 688.264760][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 688.356726][ T5730] usb 6-1: USB disconnect, device number 59 [ 688.441674][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 688.482638][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.494253][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2241'. [ 688.559220][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 689.536936][ T5825] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 689.547340][ T24] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 689.921167][T14554] syzkaller0: entered promiscuous mode [ 689.927503][T14554] syzkaller0: entered allmulticast mode [ 689.993045][T14552] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 689.999563][T14552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 690.016831][T14552] vhci_hcd vhci_hcd.0: Device attached [ 690.265409][ T5731] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 690.430659][ T5731] usb 3-1: Using ep0 maxpacket: 16 [ 690.483998][ T5825] usb 37-1: device descriptor read/64, error -110 [ 690.612797][ T5825] usb usb37-port1: attempt power cycle [ 690.754799][ T5825] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 690.768588][ T5825] usb 37-1: SetAddress Request (4) to port 0 [ 690.811026][T14555] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 690.835960][ T6489] vhci_hcd vhci_hcd.2: stop threads [ 690.841406][ T6489] vhci_hcd vhci_hcd.2: release socket [ 690.847428][ T6489] vhci_hcd vhci_hcd.2: disconnect device [ 693.741568][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 693.814474][ T5731] usb 3-1: unable to get BOS descriptor or descriptor too short [ 693.845840][ T5731] usb 3-1: no configurations [ 693.865290][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2246'. [ 693.875894][ T5731] usb 3-1: can't read configurations, error -22 [ 694.724841][ T5730] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 694.838194][ T30] audit: type=1400 audit(1785492331.240:1113): avc: denied { connect } for pid=14575 comm="syz.2.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 695.027048][ T5730] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.130577][ T5723] usb 7-1: USB disconnect, device number 30 [ 695.218111][ T5730] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 695.665795][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.904390][ T5825] usb 37-1: device descriptor read/8, error -110 [ 696.200481][ T5825] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 696.460916][ T5730] usb 6-1: Product: syz [ 696.494620][ T5730] usb 6-1: Manufacturer: syz [ 696.523248][ T5730] usb 6-1: SerialNumber: syz [ 696.557160][ T5730] usb 6-1: config 0 descriptor?? [ 696.600296][ T5730] net1080 6-1:0.0: probe with driver net1080 failed with error -22 [ 696.822588][ T24] usb 6-1: USB disconnect, device number 60 [ 697.065872][T14604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.571045][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2261'. [ 697.645008][ T5730] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 698.266072][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 698.275776][ T5730] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 698.285052][ T5730] usb 6-1: config 0 has no interface number 0 [ 698.291556][ T5730] usb 6-1: config 0 interface 184 has no altsetting 0 [ 698.302427][ T5730] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 698.313414][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.435574][ T5730] usb 6-1: Product: syz [ 698.439796][ T5730] usb 6-1: Manufacturer: syz [ 698.444392][ T5730] usb 6-1: SerialNumber: syz [ 698.451370][ T5730] usb 6-1: config 0 descriptor?? [ 699.623014][ T5730] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 699.710101][ T5730] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 699.841626][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2263'. [ 701.186371][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 701.815680][ T30] audit: type=1400 audit(1785492338.210:1114): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 701.851640][ T5730] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 701.865407][ T30] audit: type=1400 audit(1785492338.250:1115): avc: denied { accept } for pid=14626 comm="syz.5.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 701.895587][ T5730] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 701.954629][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.964377][T14678] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 702.088838][ T5730] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 702.155225][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 702.186979][T14678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 702.187582][ T24] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 702.202984][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.211372][ T24] usb 7-1: Product: syz [ 702.217332][ T24] usb 7-1: Manufacturer: syz [ 702.223226][ T24] usb 7-1: SerialNumber: syz [ 702.266988][ T5730] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 702.336812][ T24] usb 7-1: config 0 descriptor?? [ 702.353757][ T5730] usb 6-1: USB disconnect, device number 61 [ 702.974517][T14693] hpfs: Bad magic ... probably not HPFS [ 702.990741][T14693] hpfs: Bad magic ... probably not HPFS [ 703.415715][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2277'. [ 704.783454][ T5730] usb 7-1: USB disconnect, device number 31 [ 705.062342][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 705.862241][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 706.071336][ T30] audit: type=1400 audit(1785492342.470:1116): avc: denied { shutdown } for pid=14722 comm="syz.5.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 707.028325][T14737] FAULT_INJECTION: forcing a failure. [ 707.028325][T14737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.082903][T14737] CPU: 1 UID: 0 PID: 14737 Comm: syz.5.2291 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.082934][T14737] Tainted: [L]=SOFTLOCKUP [ 707.082940][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 707.082951][T14737] Call Trace: [ 707.082957][T14737] [ 707.082965][T14737] dump_stack_lvl+0x100/0x190 [ 707.082993][T14737] should_fail_ex.cold+0x5/0xa [ 707.083017][T14737] _copy_from_user+0x2e/0xd0 [ 707.083044][T14737] alg_setsockopt+0x881/0xe80 [ 707.083067][T14737] ? __pfx_alg_setsockopt+0x10/0x10 [ 707.083088][T14737] ? selinux_socket_setsockopt+0x6a/0x80 [ 707.083114][T14737] ? __pfx_alg_setsockopt+0x10/0x10 [ 707.083135][T14737] do_sock_setsockopt+0xf3/0x1d0 [ 707.083165][T14737] __sys_setsockopt+0x195/0x220 [ 707.083191][T14737] __x64_sys_setsockopt+0xbd/0x160 [ 707.083211][T14737] ? do_syscall_64+0x90/0x870 [ 707.083232][T14737] ? lockdep_hardirqs_on+0x78/0x100 [ 707.083252][T14737] do_syscall_64+0x115/0x870 [ 707.083271][T14737] ? clear_bhb_loop+0x40/0x90 [ 707.083293][T14737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.083319][T14737] RIP: 0033:0x7ff46c79e019 [ 707.083334][T14737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.083351][T14737] RSP: 002b:00007ff46d668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 707.083368][T14737] RAX: ffffffffffffffda RBX: 00007ff46ca25fa0 RCX: 00007ff46c79e019 [ 707.083379][T14737] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 707.083388][T14737] RBP: 00007ff46d668090 R08: 000000000000001f R09: 0000000000000000 [ 707.083404][T14737] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 707.083414][T14737] R13: 00007ff46ca26038 R14: 00007ff46ca25fa0 R15: 00007ffc36513408 [ 707.083439][T14737] [ 707.484796][ T5730] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 707.662755][ T5730] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 707.675567][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.744790][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 707.779835][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2294'. [ 707.810608][T14747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.906024][ T5730] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 707.933016][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.949804][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 707.970495][ T24] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 707.986282][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.998899][ T24] usb 7-1: Product: syz [ 708.003157][ T24] usb 7-1: Manufacturer: syz [ 708.009383][ T24] usb 7-1: SerialNumber: syz [ 708.021143][ T24] usb 7-1: config 0 descriptor?? [ 709.199083][T14764] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2298'. [ 709.338896][T14772] netlink: 'syz.5.2301': attribute type 1 has an invalid length. [ 709.458180][T14774] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2301'. [ 709.582583][T14772] 8021q: adding VLAN 0 to HW filter on device bond6 [ 709.867487][T14778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.986630][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2303'. [ 710.104852][T14786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2304'. [ 710.502195][ T24] usb 7-1: USB disconnect, device number 32 [ 710.647087][T14788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.926851][T14804] syzkaller0: entered promiscuous mode [ 711.933513][T14804] syzkaller0: entered allmulticast mode [ 712.584619][T14813] netlink: 'syz.7.2312': attribute type 1 has an invalid length. [ 712.615476][T14813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 712.638416][T14813] bond4: (slave geneve2): making interface the new active one [ 712.646929][T14813] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 712.779088][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2309'. [ 712.952757][T14815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.128549][T14824] /dev/nullb0: Can't lookup blockdev [ 713.138187][T14824] /dev/nullb0: Can't lookup blockdev [ 713.732528][ T5730] usb 3-1: USB disconnect, device number 79 [ 713.982489][T14823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2313'. [ 714.001230][T14833] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 714.017312][T14833] 8021q: adding VLAN 0 to HW filter on device bond9 [ 714.677018][T14823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.965857][ T4925] Bluetooth: hci4: command 0x0406 tx timeout [ 717.144787][ T5723] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 717.700597][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2329'. [ 717.716214][ T5723] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 717.725525][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.942186][ T5723] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 717.988200][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2330'. [ 718.844252][ T5730] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 719.005031][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 719.018270][ T5730] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 719.032467][ T5730] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 719.042729][ T5730] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 719.054048][ T5730] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.090418][ T5730] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.123552][ T5730] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 719.143657][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.143757][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 719.916457][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2337'. [ 719.933448][ T5730] usb 3-1: usb_control_msg returned -32 [ 719.943899][T14899] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2335'. [ 720.030969][ T5730] usbtmc 3-1:16.0: can't read capabilities [ 720.074645][T14899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.347004][ T30] audit: type=1326 audit(1785492356.750:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14919 comm="syz.7.2340" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f9dd9e019 code=0x0 [ 720.534892][T14935] usbtmc 3-1:16.0: control status returned 0 [ 720.547414][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 720.641491][T14943] netlink: 'syz.7.2340': attribute type 3 has an invalid length. [ 720.664272][T14943] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2340'. [ 720.691424][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2345'. [ 721.717484][T14957] CIFS mount error: No usable UNC path provided in device string! [ 721.717484][T14957] [ 721.727924][T14957] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 721.843534][ T5730] usb 3-1: USB disconnect, device number 80 [ 722.137524][T14966] hpfs: Bad magic ... probably not HPFS [ 722.152019][T14966] hpfs: Bad magic ... probably not HPFS [ 723.278644][T14974] syzkaller0: entered promiscuous mode [ 723.284447][T14974] syzkaller0: entered allmulticast mode [ 723.431260][ T30] audit: type=1400 audit(1785492359.820:1118): avc: denied { ioctl } for pid=14977 comm="syz.6.2354" path="/138/mnt_trace/trace_marker" dev="tracefs" ino=2971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 723.463064][T14980] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2355'. [ 724.155528][ T24] usb 6-1: USB disconnect, device number 62 [ 724.569433][T14999] tipc: Failed to remove unknown binding: 66,0,0/4:568454405/568454407 [ 724.586275][T14999] netlink: 'syz.7.2360': attribute type 1 has an invalid length. [ 724.650021][T14994] tipc: Failed to remove unknown binding: 66,0,0/4:3581448412/3581448413 [ 725.024783][T14994] tipc: Failed to remove unknown binding: 66,0,0/4:3581448412/3581448413 [ 725.054204][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2357'. [ 725.265755][T14988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.483340][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 725.759193][ T5723] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 725.933657][ T5723] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 725.945251][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.039471][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 726.048750][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.155045][ T805] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 726.182715][ T5723] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 726.267915][ T24] cdc_acm 3-1:1.0: ttyACM1: USB ACM device [ 726.339074][ T805] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.352781][ T805] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 726.362156][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.377397][ T30] audit: type=1400 audit(1785492362.780:1119): avc: denied { wake_alarm } for pid=15027 comm="syz.7.2369" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.412616][ T805] usb 6-1: config 0 descriptor?? [ 726.422734][ T805] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 726.575275][T15035] netlink: 'syz.1.2371': attribute type 10 has an invalid length. [ 726.583412][T15035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2371'. [ 726.797395][T15015] CIFS mount error: No usable UNC path provided in device string! [ 726.797395][T15015] [ 726.807788][T15015] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 728.219672][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 728.418236][ T30] audit: type=1400 audit(1785492364.820:1120): avc: denied { connect } for pid=15058 comm="syz.7.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 728.438577][ T30] audit: type=1400 audit(1785492364.830:1121): avc: denied { write } for pid=15058 comm="syz.7.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 728.459085][ T30] audit: type=1400 audit(1785492364.840:1122): avc: denied { read } for pid=15058 comm="syz.7.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 728.792302][ T5723] usb 6-1: USB disconnect, device number 63 [ 728.982288][T15064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2378'. [ 728.994999][T15064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.143883][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 731.752938][ T5730] usb 3-1: USB disconnect, device number 81 [ 731.767967][ T5723] usb 7-1: USB disconnect, device number 33 [ 731.929123][ T30] audit: type=1400 audit(1785492368.320:1123): avc: denied { getopt } for pid=15078 comm="syz.5.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 732.124820][ T30] audit: type=1400 audit(1785492368.390:1124): avc: denied { write } for pid=15078 comm="syz.5.2383" name="qw_sign" dev="configfs" ino=49845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 732.831525][ T30] audit: type=1400 audit(1785492368.390:1125): avc: denied { open } for pid=15078 comm="syz.5.2383" path="/381/config/usb_gadget/g1/os_desc/qw_sign" dev="configfs" ino=49845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 733.393790][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2394'. [ 733.466377][T15115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.880551][T15121] hpfs: Bad magic ... probably not HPFS [ 733.893338][T15121] hpfs: Bad magic ... probably not HPFS [ 736.513235][T15153] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2408'. [ 736.591922][T15153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.621846][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2409'. [ 736.980584][T15170] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2411'. [ 737.127304][T15164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2410'. [ 737.268093][T15173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.894105][T15175] macvtap1: entered allmulticast mode [ 737.907212][T15175] dummy0: entered allmulticast mode [ 737.921516][T15175] dummy0: entered promiscuous mode [ 737.966676][T15175] dummy0: left allmulticast mode [ 737.999441][ T30] audit: type=1400 audit(1785492374.390:1126): avc: denied { getopt } for pid=15180 comm="syz.7.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 738.101819][ T5730] dummy0: left promiscuous mode [ 738.214818][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2420'. [ 738.405358][ T805] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 738.568076][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.583735][ T805] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 738.593392][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.603928][ T805] usb 3-1: config 0 descriptor?? [ 738.604853][ T5730] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 738.619277][ T805] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 738.764795][ T5730] usb 6-1: Using ep0 maxpacket: 8 [ 738.771402][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.782528][ T5730] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 738.792096][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.802120][ T5730] usb 6-1: config 0 descriptor?? [ 739.010479][ T5730] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 739.658651][ T5730] usb 6-1: USB disconnect, device number 64 [ 741.840118][ T805] usb 3-1: USB disconnect, device number 82 [ 743.536284][T15249] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 743.703649][T15241] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2434'. [ 743.774581][T15252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.085373][ T5723] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 746.266273][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.291915][ T5723] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 746.340176][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.376424][ T5723] usb 7-1: config 0 descriptor?? [ 746.403604][ T5723] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 746.806149][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.257305][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.258318][T15287] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2449'. [ 747.896950][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2451'. [ 747.916082][T15296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.571460][ T5723] usb 7-1: USB disconnect, device number 34 [ 749.235583][T15313] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 749.242139][T15313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 749.258440][T15313] vhci_hcd vhci_hcd.0: Device attached [ 749.464975][ T5825] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 749.494786][ T805] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 749.630087][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 749.890445][T15317] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 749.924383][ T57] vhci_hcd vhci_hcd.5: stop threads [ 749.949502][ T57] vhci_hcd vhci_hcd.5: release socket [ 749.973940][ T57] vhci_hcd vhci_hcd.5: disconnect device [ 750.030387][ T5825] usb 6-1: unable to get BOS descriptor or descriptor too short [ 750.066282][ T5825] usb 6-1: no configurations [ 750.086337][ T5825] usb 6-1: can't read configurations, error -22 [ 751.184102][ T30] audit: type=1400 audit(1785492387.570:1127): avc: denied { read } for pid=15352 comm="syz.5.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 751.784809][ T30] audit: type=1400 audit(1785492388.090:1128): avc: denied { write } for pid=15360 comm="syz.6.2471" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 751.958292][T15363] No source specified [ 752.257889][ T30] audit: type=1400 audit(1785492388.660:1129): avc: denied { getopt } for pid=15366 comm="syz.6.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 753.111770][T15378] bridge0: entered allmulticast mode [ 753.136145][T15376] syzkaller0: entered promiscuous mode [ 753.166217][T15376] syzkaller0: entered allmulticast mode [ 753.231452][T15372] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2475'. [ 753.366022][T15381] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 753.372561][T15381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 753.412806][T15381] vhci_hcd vhci_hcd.0: Device attached [ 753.575127][ T5825] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 753.654728][ T5723] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 753.735060][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 754.445131][T15382] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 754.499992][ T7601] vhci_hcd vhci_hcd.6: stop threads [ 754.537341][ T7601] vhci_hcd vhci_hcd.6: release socket [ 754.584229][ T7601] vhci_hcd vhci_hcd.6: disconnect device [ 754.612902][T15398] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 754.634834][ T805] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 754.754414][ T5825] usb 7-1: unable to get BOS descriptor or descriptor too short [ 754.772509][ T5825] usb 7-1: no configurations [ 754.789346][ T5825] usb 7-1: can't read configurations, error -22 [ 755.133475][T15411] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 755.801436][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2491'. [ 756.091526][ T30] audit: type=1400 audit(1785492392.490:1130): avc: denied { create } for pid=15428 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 756.150828][T15425] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2492'. [ 756.160163][ T30] audit: type=1400 audit(1785492392.550:1131): avc: denied { ioctl } for pid=15428 comm="syz.2.2494" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 756.245255][ T5825] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 756.405643][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 756.412134][ T5825] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 756.420525][ T5825] usb 7-1: config 0 has no interface number 0 [ 756.426676][ T5825] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 756.435804][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.450009][ T5825] usb 7-1: config 0 descriptor?? [ 756.566256][ T5825] viperboard 7-1:0.143: version 0.00 found at bus 007 address 036 [ 756.594667][ T5825] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 756.606062][ T5825] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 756.800874][T15416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.809817][T15416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.818796][ T30] audit: type=1400 audit(1785492393.220:1132): avc: denied { setopt } for pid=15415 comm="syz.6.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 756.907396][T15438] hpfs: Bad magic ... probably not HPFS [ 756.919888][T15438] hpfs: Bad magic ... probably not HPFS [ 757.354738][ T30] audit: type=1400 audit(1785492393.740:1133): avc: denied { bind } for pid=15415 comm="syz.6.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 757.394029][ T5825] usb 7-1: USB disconnect, device number 36 [ 757.529293][T15443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.595879][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 758.019469][T15454] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 758.026010][T15454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 758.037002][T15454] vhci_hcd vhci_hcd.0: Device attached [ 758.670461][T11810] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 758.683258][ T5730] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 758.834756][T11810] usb 3-1: Using ep0 maxpacket: 16 [ 759.020880][T15455] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 759.092102][T11810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 759.093902][ T13] vhci_hcd vhci_hcd.2: stop threads [ 759.138559][T11810] usb 3-1: no configurations [ 759.143446][T11810] usb 3-1: can't read configurations, error -22 [ 759.145196][ T30] audit: type=1400 audit(1785492395.520:1134): avc: denied { create } for pid=15472 comm="syz.7.2505" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 759.173367][ T13] vhci_hcd vhci_hcd.2: release socket [ 759.186081][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 759.410716][T15477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2506'. [ 760.381644][ T5723] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 760.399659][T15482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.895532][T11810] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 761.160052][T11810] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 761.191153][T11810] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 761.208985][T15503] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 761.215616][T15503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 761.223799][T15503] vhci_hcd vhci_hcd.0: Device attached [ 761.340536][T11810] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 761.372457][T11810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.435755][T11810] usb 3-1: Product: syz [ 761.485463][T11810] usb 3-1: Manufacturer: syz [ 761.550519][T11810] usb 3-1: SerialNumber: syz [ 761.594940][ T5731] usb 46-1: SetAddress Request (2) to port 0 [ 761.645500][ T5731] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 761.696223][T11810] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 761.890589][T15506] vhci_hcd: connection reset by peer [ 761.915459][ T7601] vhci_hcd vhci_hcd.6: stop threads [ 761.920876][ T7601] vhci_hcd vhci_hcd.6: release socket [ 761.932271][T11810] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 761.934517][ T7601] vhci_hcd vhci_hcd.6: disconnect device [ 761.946280][T11810] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 761.952113][T15487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.969494][T15487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.127515][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2517'. [ 762.542680][ T30] audit: type=1400 audit(1785492398.940:1135): avc: denied { connect } for pid=15525 comm="syz.6.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 762.934851][ T5716] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 763.476285][ T5716] usb 7-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 763.488199][ T5716] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.503028][ T5716] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 763.513101][ T5716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.540191][ T5716] usb 7-1: config 0 descriptor?? [ 763.863669][ T5716] usb 3-1: USB disconnect, device number 85 [ 763.913803][ T5716] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 763.914750][ T5730] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 763.941076][ T5716] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 763.993374][ T5716] ti_usb_3410_5052 3-1:2.0: device disconnected [ 764.193776][T15549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.584209][ T5723] usb 7-1: USB disconnect, device number 37 [ 766.190890][T15568] lo speed is unknown, defaulting to 1000 [ 766.560762][ T30] audit: type=1400 audit(1785492402.500:1136): avc: denied { create } for pid=15559 comm="syz.2.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 767.016297][ T5731] usb 46-1: device descriptor read/8, error -110 [ 767.036972][ T30] audit: type=1400 audit(1785492402.500:1137): avc: denied { sys_admin } for pid=15559 comm="syz.2.2532" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 767.108922][T15569] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2534'. [ 767.147015][T15569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.304351][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2537'. [ 767.490810][T13176] Bluetooth: hci6: unexpected event for opcode 0x0809 [ 767.502868][ T5731] usb usb46-port1: attempt power cycle [ 767.581762][ T30] audit: type=1400 audit(1785492403.970:1138): avc: denied { getattr } for pid=15582 comm="syz.2.2538" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 767.698158][ T30] audit: type=1400 audit(1785492404.090:1139): avc: denied { mount } for pid=15582 comm="syz.2.2538" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 767.789623][ T30] audit: type=1804 audit(1785492404.180:1140): pid=15583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2538" name="/newroot/467/file0" dev="tmpfs" ino=2489 res=1 errno=0 [ 768.206567][ T5731] usb usb46-port1: unable to enumerate USB device [ 768.479952][T15605] CIFS mount error: No usable UNC path provided in device string! [ 768.479952][T15605] [ 768.490057][T15605] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 769.448462][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2550'. [ 769.710944][T15629] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2551'. [ 772.068326][ T30] audit: type=1400 audit(1785492408.470:1141): avc: denied { read write } for pid=5607 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.244543][ T30] audit: type=1400 audit(1785492408.470:1142): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.356161][T15661] hpfs: Bad magic ... probably not HPFS [ 772.369022][T15661] hpfs: Bad magic ... probably not HPFS [ 772.726017][ T30] audit: type=1400 audit(1785492408.500:1143): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 772.763107][ T30] audit: type=1400 audit(1785492408.500:1144): avc: denied { read } for pid=15656 comm="syz.5.2558" name="v4l-subdev6" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 772.807272][ T30] audit: type=1400 audit(1785492408.500:1145): avc: denied { open } for pid=15656 comm="syz.5.2558" path="/dev/v4l-subdev6" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 772.863504][ T30] audit: type=1400 audit(1785492408.530:1146): avc: denied { allowed } for pid=15656 comm="syz.5.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 772.979045][T15662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2559'. [ 773.016028][ T30] audit: type=1400 audit(1785492408.540:1147): avc: denied { create } for pid=15656 comm="syz.5.2558" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 773.047895][T15662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.061750][ T30] audit: type=1400 audit(1785492408.630:1148): avc: denied { create } for pid=15658 comm="syz.2.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.083787][ T30] audit: type=1400 audit(1785492408.630:1149): avc: denied { ioctl } for pid=15658 comm="syz.2.2559" path="socket:[50978]" dev="sockfs" ino=50978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.115901][ T30] audit: type=1400 audit(1785492408.630:1150): avc: denied { create } for pid=15658 comm="syz.2.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 773.140962][ T30] audit: type=1400 audit(1785492408.730:1151): avc: denied { read } for pid=15656 comm="syz.5.2558" dev="nsfs" ino=4026533591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 773.172887][ T30] audit: type=1400 audit(1785492408.730:1152): avc: denied { open } for pid=15656 comm="syz.5.2558" path="net:[4026533591]" dev="nsfs" ino=4026533591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 773.505950][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2560'. [ 773.713826][T15666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.644885][T11810] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 775.808981][T11810] usb 7-1: Using ep0 maxpacket: 8 [ 775.822317][T11810] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 775.836930][T11810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.854521][T11810] usb 7-1: Product: syz [ 775.871253][T11810] usb 7-1: Manufacturer: syz [ 775.887123][T11810] usb 7-1: SerialNumber: syz [ 775.953554][T11810] usb 7-1: config 0 descriptor?? [ 775.970467][T11810] gspca_main: sq930x-2.14.0 probing 2770:930c [ 776.950237][T11810] gspca_sq930x: ucbus_write failed -71 [ 777.194741][T11810] gspca_sq930x: Sensor ov9630 not yet treated [ 777.314960][T11810] sq930x 7-1:0.0: probe with driver sq930x failed with error -22 [ 777.343828][T11810] usb 7-1: USB disconnect, device number 38 [ 777.904351][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 777.904369][ T30] audit: type=1400 audit(1785492414.300:1196): avc: denied { create } for pid=15718 comm="syz.6.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 778.010859][ T30] audit: type=1400 audit(1785492414.410:1197): avc: denied { prog_run } for pid=15720 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 778.161619][ T30] audit: type=1400 audit(1785492414.560:1198): avc: denied { setopt } for pid=15721 comm="syz.1.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 778.215296][ T5825] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 778.237654][ T30] audit: type=1400 audit(1785492414.640:1199): avc: denied { name_bind } for pid=15726 comm="syz.1.2581" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 778.311819][ T30] audit: type=1400 audit(1785492414.710:1200): avc: denied { watch } for pid=15728 comm="syz.5.2580" path="/419" dev="tmpfs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 778.533639][T15729] netlink: 'syz.5.2580': attribute type 1 has an invalid length. [ 779.019461][ T30] audit: type=1400 audit(1785492414.880:1201): avc: denied { read } for pid=15728 comm="syz.5.2580" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 779.036503][ T5825] usb 7-1: unable to get BOS descriptor or descriptor too short [ 779.062492][ T30] audit: type=1400 audit(1785492414.880:1202): avc: denied { open } for pid=15728 comm="syz.5.2580" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 779.094370][T15729] 8021q: adding VLAN 0 to HW filter on device bond7 [ 779.227188][ T5825] usb 7-1: too many configurations: 162, using maximum allowed: 8 [ 779.245094][ T5825] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 779.263009][ T5825] usb 7-1: can't read configurations, error -61 [ 779.275476][T15733] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 779.464743][T11810] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 779.484836][ T5825] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 779.521867][ T30] audit: type=1400 audit(1785492415.920:1203): avc: denied { write } for pid=15739 comm="syz.7.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 779.626525][T11810] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 779.644838][T11810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.756521][ T5825] usb 7-1: unable to get BOS descriptor or descriptor too short [ 779.769733][ T5825] usb 7-1: too many configurations: 162, using maximum allowed: 8 [ 779.796754][ T5825] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 779.814151][ T5825] usb 7-1: can't read configurations, error -61 [ 779.833806][ T5825] usb usb7-port1: attempt power cycle [ 780.184779][ T5825] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 780.203599][T11810] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 780.210456][ T5825] usb 7-1: unable to get BOS descriptor or descriptor too short [ 780.221743][ T5825] usb 7-1: too many configurations: 162, using maximum allowed: 8 [ 780.248184][ T5825] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 780.260654][ T5825] usb 7-1: can't read configurations, error -61 [ 780.405110][ T5825] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 780.447774][ T5825] usb 7-1: unable to get BOS descriptor or descriptor too short [ 780.455681][ T5825] usb 7-1: too many configurations: 162, using maximum allowed: 8 [ 780.465366][ T5825] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 780.472986][ T5825] usb 7-1: can't read configurations, error -61 [ 780.480148][ T5825] usb usb7-port1: unable to enumerate USB device [ 780.569595][ T30] audit: type=1400 audit(1785492416.970:1204): avc: denied { create } for pid=15753 comm="syz.7.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 780.604773][ T30] audit: type=1400 audit(1785492417.000:1205): avc: denied { bind } for pid=15753 comm="syz.7.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 782.067928][ T5825] usb 3-1: USB disconnect, device number 86 [ 782.253001][T15783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2593'. [ 782.274503][T15780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 782.946384][T15800] hpfs: Bad magic ... probably not HPFS [ 782.958895][T15800] hpfs: Bad magic ... probably not HPFS [ 782.985963][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 782.985993][ T30] audit: type=1400 audit(1785492419.390:1238): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 783.623166][ T30] audit: type=1400 audit(1785492420.020:1239): avc: denied { create } for pid=15811 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 783.676214][ T30] audit: type=1400 audit(1785492420.070:1240): avc: denied { create } for pid=15811 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 783.731021][ T30] audit: type=1400 audit(1785492420.120:1241): avc: denied { ioctl } for pid=15811 comm="syz.5.2605" path="socket:[52003]" dev="sockfs" ino=52003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 783.752442][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2607'. [ 783.756550][ T30] audit: type=1400 audit(1785492420.120:1242): avc: denied { bind } for pid=15811 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 783.785002][ T30] audit: type=1400 audit(1785492420.120:1243): avc: denied { write } for pid=15811 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 783.833024][ T30] audit: type=1400 audit(1785492420.130:1244): avc: denied { setopt } for pid=15811 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 783.854009][ T30] audit: type=1400 audit(1785492420.130:1245): avc: denied { ioctl } for pid=15811 comm="syz.5.2605" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 783.880058][ T30] audit: type=1400 audit(1785492420.190:1246): avc: denied { create } for pid=15811 comm="syz.5.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 784.426711][T15830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2610'. [ 784.448982][T15830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.700555][ T30] audit: type=1400 audit(1785492421.100:1247): avc: denied { create } for pid=15839 comm="syz.6.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 785.206921][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2612'. [ 785.474762][T11810] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 785.638293][T11810] usb 6-1: Using ep0 maxpacket: 32 [ 785.663099][T11810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.706686][T11810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.737173][T11810] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 785.756403][T11810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.789119][T11810] usb 6-1: config 0 descriptor?? [ 785.812552][T11810] hub 6-1:0.0: USB hub found [ 785.945024][ T5825] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 785.955702][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 786.096865][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.128026][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.149151][ T5825] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 786.240047][T11810] hub 6-1:0.0: 1 port detected [ 786.283670][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.300518][ T5825] usb 3-1: config 0 descriptor?? [ 786.422373][T15875] hpfs: Bad magic ... probably not HPFS [ 786.434097][T15875] hpfs: Bad magic ... probably not HPFS [ 787.060384][T11810] hub 6-1:0.0: activate --> -90 [ 787.104297][T15881] Mass Storage Function, version: 2009/09/11 [ 787.111856][T15881] LUN: removable file: (no medium) [ 787.343102][ T5825] usbhid 3-1:0.0: can't add hid device: -71 [ 787.355575][ T5825] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 787.366714][ T5825] usb 3-1: USB disconnect, device number 87 [ 787.382732][T15874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2623'. [ 787.920322][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2628'. [ 788.630987][ T5825] usb 6-1: USB disconnect, device number 67 [ 788.780245][T11810] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 789.049034][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 789.049050][ T30] audit: type=1400 audit(1785492425.450:1261): avc: denied { read write } for pid=15910 comm="syz.2.2633" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.106223][ T30] audit: type=1400 audit(1785492425.480:1262): avc: denied { open } for pid=15910 comm="syz.2.2633" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.147143][ T30] audit: type=1400 audit(1785492425.480:1263): avc: denied { map } for pid=15910 comm="syz.2.2633" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 789.211964][ T30] audit: type=1400 audit(1785492425.600:1264): avc: denied { connect } for pid=15910 comm="syz.2.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 789.263763][ T30] audit: type=1400 audit(1785492425.660:1265): avc: denied { ioctl } for pid=15910 comm="syz.2.2633" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 790.444342][T15925] FAULT_INJECTION: forcing a failure. [ 790.444342][T15925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.457749][T15925] CPU: 1 UID: 0 PID: 15925 Comm: syz.6.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.457780][T15925] Tainted: [L]=SOFTLOCKUP [ 790.457786][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 790.457796][T15925] Call Trace: [ 790.457803][T15925] [ 790.457810][T15925] dump_stack_lvl+0x100/0x190 [ 790.457839][T15925] should_fail_ex.cold+0x5/0xa [ 790.457863][T15925] _copy_from_user+0x2e/0xd0 [ 790.457888][T15925] memdup_user+0x6b/0xe0 [ 790.457916][T15925] strndup_user+0x78/0xe0 [ 790.457937][T15925] vt_do_kdgkb_ioctl+0xda/0x510 [ 790.457966][T15925] vt_ioctl+0xcbb/0x3110 [ 790.457996][T15925] ? __pfx_vt_ioctl+0x10/0x10 [ 790.458023][T15925] ? __lock_acquire+0x49f/0x1a40 [ 790.458057][T15925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.458082][T15925] ? __pfx_vt_ioctl+0x10/0x10 [ 790.458109][T15925] tty_ioctl+0x26a/0x1640 [ 790.458132][T15925] ? __pfx_tty_ioctl+0x10/0x10 [ 790.458153][T15925] ? cred_has_capability.isra.0+0x186/0x300 [ 790.458183][T15925] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 790.458214][T15925] ? find_held_lock+0x2b/0x80 [ 790.458239][T15925] ? selinux_file_ioctl+0xb6/0x290 [ 790.458268][T15925] ? __pfx_tty_ioctl+0x10/0x10 [ 790.458289][T15925] __x64_sys_ioctl+0x18e/0x210 [ 790.458318][T15925] do_syscall_64+0x115/0x870 [ 790.458338][T15925] ? clear_bhb_loop+0x40/0x90 [ 790.458360][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.458378][T15925] RIP: 0033:0x7f357f79e019 [ 790.458394][T15925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.458408][T15925] RSP: 002b:00007f35806e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.458426][T15925] RAX: ffffffffffffffda RBX: 00007f357fa25fa0 RCX: 00007f357f79e019 [ 790.458438][T15925] RDX: 0000200000000c40 RSI: 0000000000004b49 RDI: 0000000000000003 [ 790.458448][T15925] RBP: 00007f35806e3090 R08: 0000000000000000 R09: 0000000000000000 [ 790.458459][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.458469][T15925] R13: 00007f357fa26038 R14: 00007f357fa25fa0 R15: 00007fff92859888 [ 790.458493][T15925] [ 790.779866][ T5825] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 791.355993][T11810] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 791.489595][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.491311][ T5825] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 791.491341][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.491362][ T5825] usb 3-1: Product: syz [ 791.491378][ T5825] usb 3-1: Manufacturer: syz [ 791.491393][ T5825] usb 3-1: SerialNumber: syz [ 791.493758][ T5825] usb 3-1: config 0 descriptor?? [ 791.496562][ T5825] net1080 3-1:0.0: probe with driver net1080 failed with error -22 [ 791.566170][T11810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.566207][T11810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.566240][T11810] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 791.566262][T11810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.594346][T11810] usb 6-1: config 0 descriptor?? [ 791.757026][ T30] audit: type=1400 audit(1785492428.160:1266): avc: denied { name_bind } for pid=15922 comm="syz.2.2636" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 791.757093][ T30] audit: type=1400 audit(1785492428.160:1267): avc: denied { node_bind } for pid=15922 comm="syz.2.2636" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 791.759085][ T30] audit: type=1400 audit(1785492428.160:1268): avc: denied { write } for pid=15922 comm="syz.2.2636" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 791.759293][ T30] audit: type=1400 audit(1785492428.160:1269): avc: denied { open } for pid=15922 comm="syz.2.2636" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 791.827694][ T30] audit: type=1400 audit(1785492428.230:1270): avc: denied { ioctl } for pid=15922 comm="syz.2.2636" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 791.877965][T15936] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2640'. [ 791.979024][ T5731] usb 3-1: USB disconnect, device number 88 [ 792.211066][T11810] usbhid 6-1:0.0: can't add hid device: -71 [ 792.218496][T11810] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 792.236357][T11810] usb 6-1: USB disconnect, device number 68 [ 792.821227][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2644'. [ 794.401712][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 794.401727][ T30] audit: type=1400 audit(1785492430.800:1275): avc: denied { mount } for pid=15962 comm="syz.7.2649" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 795.116250][ T30] audit: type=1400 audit(1785492431.520:1276): avc: denied { unmount } for pid=11575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 795.169014][ T30] audit: type=1400 audit(1785492431.570:1277): avc: denied { mount } for pid=15979 comm="syz.7.2654" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 795.244797][T11810] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 795.333384][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2655'. [ 795.351692][T15987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.411140][T11810] usb 3-1: Using ep0 maxpacket: 8 [ 795.422561][T11810] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 795.433751][T11810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.442080][T11810] usb 3-1: Product: syz [ 795.446899][T11810] usb 3-1: Manufacturer: syz [ 795.451586][T11810] usb 3-1: SerialNumber: syz [ 795.458254][T11810] usb 3-1: config 0 descriptor?? [ 795.465767][T11810] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 795.473898][T11810] pctv452e: pctv452e_power_ctrl: 1 [ 795.473898][T11810] [ 795.481612][T11810] usb 3-1: selecting invalid altsetting 3 [ 795.487693][T11810] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 795.487693][T11810] [ 795.498383][T11810] dvb-usb: bulk message failed: -22 (5/0) [ 795.506773][T11810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 795.517798][T11810] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 795.526905][T11810] usb 3-1: media controller created [ 795.532208][T11810] dvb-usb: bulk message failed: -22 (8/0) [ 795.539544][T11810] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 795.547824][T11810] dvb-usb: MAC address reading failed. [ 795.561521][T11810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 795.594120][T11810] DVB: Unable to find symbol stb0899_attach() [ 795.601564][T11810] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 795.654866][T11810] rc_core: IR keymap rc-tt-1500 not found [ 795.660685][T11810] Registered IR keymap rc-empty [ 795.669403][T11810] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 795.683484][T15973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.684502][T11810] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input30 [ 795.705553][T15973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.714360][T11810] dvb-usb: schedule remote query interval to 100 msecs. [ 795.722658][T11810] pctv452e: pctv452e_power_ctrl: 0 [ 795.722658][T11810] [ 795.723455][ T30] audit: type=1400 audit(1785492432.120:1278): avc: denied { read } for pid=4960 comm="acpid" name="event4" dev="devtmpfs" ino=3928 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.730265][T11810] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 795.769878][ T30] audit: type=1400 audit(1785492432.120:1279): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3928 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.814813][ T30] audit: type=1400 audit(1785492432.120:1280): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3928 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.848306][ T5731] dvb-usb: bulk message failed: -22 (4/0) [ 795.876118][ T5731] dvb-usb: error -22 while querying for an remote control event. [ 795.950912][ T30] audit: type=1400 audit(1785492432.350:1281): avc: denied { create } for pid=15994 comm="syz.6.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 796.212618][ T5731] dvb-usb: bulk message failed: -22 (4/0) [ 796.244920][ T5731] dvb-usb: error -22 while querying for an remote control event. [ 796.286585][ T5731] usb 3-1: USB disconnect, device number 89 [ 796.355242][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2662'. [ 796.574881][ T5716] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 796.769326][ T5731] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 796.947810][ T5716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 797.068436][ T5716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.175740][ T5716] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 797.282090][ T5716] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.430663][ T5716] usb 7-1: config 0 descriptor?? [ 797.834007][ T30] audit: type=1400 audit(1785492434.230:1282): avc: denied { read } for pid=16017 comm="syz.5.2665" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 798.310237][ T30] audit: type=1400 audit(1785492434.230:1283): avc: denied { open } for pid=16017 comm="syz.5.2665" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 798.428244][ T30] audit: type=1400 audit(1785492434.230:1284): avc: denied { read write } for pid=16017 comm="syz.5.2665" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 798.521639][ T5716] usbhid 7-1:0.0: can't add hid device: -71 [ 798.573066][ T5716] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 798.589563][ T5716] usb 7-1: USB disconnect, device number 43 [ 799.870971][T16044] netlink: 'syz.2.2674': attribute type 11 has an invalid length. [ 799.933804][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 799.933822][ T30] audit: type=1400 audit(1785492436.330:1295): avc: denied { connect } for pid=16045 comm="syz.6.2673" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 799.977858][ T30] audit: type=1400 audit(1785492436.330:1296): avc: denied { name_connect } for pid=16045 comm="syz.6.2673" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 800.003815][ T30] audit: type=1400 audit(1785492436.360:1297): avc: denied { create } for pid=16045 comm="syz.6.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 800.024756][ T30] audit: type=1400 audit(1785492436.360:1298): avc: denied { setopt } for pid=16045 comm="syz.6.2673" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 800.138588][ T30] audit: type=1400 audit(1785492436.380:1299): avc: denied { write } for pid=16043 comm="syz.2.2674" name="cluster" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 800.254843][ T30] audit: type=1400 audit(1785492436.520:1300): avc: denied { unlink } for pid=16048 comm="syz.7.2675" name="#11" dev="tmpfs" ino=1515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 800.291661][ T30] audit: type=1400 audit(1785492436.530:1301): avc: denied { mount } for pid=16048 comm="syz.7.2675" name="/" dev="overlay" ino=1510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 800.314271][ T30] audit: type=1400 audit(1785492436.650:1302): avc: denied { read } for pid=16052 comm="syz.6.2677" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 800.339626][ T30] audit: type=1400 audit(1785492436.650:1303): avc: denied { open } for pid=16052 comm="syz.6.2677" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 800.377642][ T30] audit: type=1400 audit(1785492436.690:1304): avc: denied { create } for pid=16048 comm="syz.7.2675" name="#14" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 800.410282][T16053] lo speed is unknown, defaulting to 1000 [ 800.712836][T16061] /dev/nullb0: Can't lookup blockdev [ 800.720499][T16061] /dev/nullb0: Can't lookup blockdev [ 801.610810][T16069] FAULT_INJECTION: forcing a failure. [ 801.610810][T16069] name failslab, interval 1, probability 0, space 0, times 0 [ 801.623698][T16069] CPU: 0 UID: 0 PID: 16069 Comm: syz.2.2679 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.623728][T16069] Tainted: [L]=SOFTLOCKUP [ 801.623734][T16069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.623745][T16069] Call Trace: [ 801.623752][T16069] [ 801.623759][T16069] dump_stack_lvl+0x100/0x190 [ 801.623787][T16069] should_fail_ex.cold+0x5/0xa [ 801.623812][T16069] should_failslab+0xc2/0x120 [ 801.623837][T16069] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.623859][T16069] ? vm_area_dup+0x27/0x8e0 [ 801.623891][T16069] vm_area_dup+0x27/0x8e0 [ 801.623920][T16069] __split_vma+0x18c/0xda0 [ 801.623942][T16069] ? __pfx___split_vma+0x10/0x10 [ 801.623978][T16069] ? kvm_sched_clock_read+0x11/0x20 [ 801.623997][T16069] ? sched_clock+0x38/0x60 [ 801.624021][T16069] ? sched_clock_cpu+0x6c/0x570 [ 801.624044][T16069] vms_gather_munmap_vmas+0x1d2/0x1720 [ 801.624063][T16069] ? update_irq_load_avg+0xae/0xe30 [ 801.624086][T16069] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 801.624106][T16069] ? rcu_is_watching+0x12/0xc0 [ 801.624134][T16069] ? trace_sched_exit_tp+0x120/0x160 [ 801.624162][T16069] ? __schedule+0x126e/0x6730 [ 801.624191][T16069] do_vmi_align_munmap+0x287/0x5f0 [ 801.624212][T16069] ? __pfx___schedule+0x10/0x10 [ 801.624230][T16069] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 801.624282][T16069] do_vmi_munmap+0x1f8/0x3e0 [ 801.624305][T16069] move_vma+0x849/0x1920 [ 801.624329][T16069] ? __pfx_move_vma+0x10/0x10 [ 801.624350][T16069] ? shmem_get_unmapped_area+0x141/0x960 [ 801.624387][T16069] ? vrm_set_new_addr+0x204/0x290 [ 801.624408][T16069] mremap_to+0x234/0x4c0 [ 801.624427][T16069] ? __pfx_mremap_to+0x10/0x10 [ 801.624444][T16069] ? check_prep_vma+0x912/0xe60 [ 801.624467][T16069] __do_sys_mremap+0xb3e/0x1850 [ 801.624492][T16069] ? rcu_read_lock_any_held+0x6a/0xa0 [ 801.624510][T16069] ? find_held_lock+0x2b/0x80 [ 801.624527][T16069] ? __pfx___do_sys_mremap+0x10/0x10 [ 801.624545][T16069] ? ksys_write+0x190/0x250 [ 801.624581][T16069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 801.624604][T16069] ? __fget_files+0x21f/0x3d0 [ 801.624643][T16069] do_syscall_64+0x115/0x870 [ 801.624667][T16069] ? clear_bhb_loop+0x40/0x90 [ 801.624688][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.624705][T16069] RIP: 0033:0x7fd4c079e019 [ 801.624720][T16069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.624735][T16069] RSP: 002b:00007fd4c16a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 801.624753][T16069] RAX: ffffffffffffffda RBX: 00007fd4c0a26090 RCX: 00007fd4c079e019 [ 801.624765][T16069] RDX: 0000000000002000 RSI: 0000000000001000 RDI: 00002000008ba000 [ 801.624777][T16069] RBP: 00007fd4c16a8090 R08: 00002000005b7000 R09: 0000000000000000 [ 801.624788][T16069] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 801.624799][T16069] R13: 00007fd4c0a26128 R14: 00007fd4c0a26090 R15: 00007ffe9c07e548 [ 801.624823][T16069] [ 803.821444][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2686'. [ 805.514804][T13176] Bluetooth: hci5: unexpected event for opcode 0x0c1c [ 805.537205][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 805.537228][ T30] audit: type=1400 audit(1785492441.910:1310): avc: denied { write } for pid=16108 comm="syz.5.2691" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 805.871179][ T30] audit: type=1400 audit(1785492442.060:1311): avc: denied { execute } for pid=16107 comm="syz.7.2692" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 806.080815][ T30] audit: type=1400 audit(1785492442.360:1312): avc: denied { mounton } for pid=16121 comm="syz.6.2693" path="/204/file0" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 806.723239][ T30] audit: type=1400 audit(1785492443.120:1313): avc: denied { mount } for pid=16127 comm="syz.5.2697" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 806.994766][ T5731] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 807.110265][T16142] hpfs: Bad magic ... probably not HPFS [ 807.126159][T16142] hpfs: Bad magic ... probably not HPFS [ 807.208157][ T5731] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 807.254887][ T30] audit: type=1400 audit(1785492443.640:1314): avc: denied { create } for pid=16144 comm="syz.7.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 807.299214][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.414384][ T30] audit: type=1400 audit(1785492443.650:1315): avc: denied { write } for pid=16144 comm="syz.7.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 807.682808][ T5731] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 807.934879][T11810] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 808.020522][ T30] audit: type=1400 audit(1785492444.420:1316): avc: denied { write } for pid=16157 comm="syz.1.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 808.098556][T11810] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 808.120339][T11810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.245937][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.256011][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.414256][T16175] CIFS mount error: No usable UNC path provided in device string! [ 808.414256][T16175] [ 808.424386][T16175] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 808.808406][T11810] cdc_acm 7-1:1.0: ttyACM1: USB ACM device [ 808.824389][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2707'. [ 808.878196][T16169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.005410][T16170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.184356][T16182] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 809.250769][ T30] audit: type=1804 audit(1785492445.650:1317): pid=16184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2713" name="/newroot/569/file0" dev="tmpfs" ino=3022 res=1 errno=0 [ 809.525117][ T5825] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 809.593934][ T30] audit: type=1400 audit(1785492445.990:1318): avc: denied { create } for pid=16193 comm="syz.7.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 809.772359][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.821323][ T30] audit: type=1400 audit(1785492446.110:1319): avc: denied { bind } for pid=16193 comm="syz.7.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 809.893586][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.947249][ T5825] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 809.961552][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.973542][ T5825] usb 3-1: config 0 descriptor?? [ 810.090893][T11810] usb 6-1: USB disconnect, device number 69 [ 810.419618][ T5825] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 810.439561][ T5825] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 810.481010][ T5825] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 810.496372][ T5825] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 810.515732][ T5825] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 811.021096][ T5825] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 811.027996][ T5825] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 811.040478][ T5825] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 811.060966][T11810] usb 7-1: USB disconnect, device number 44 [ 811.277386][T16182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.289838][T16182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.302664][T16182] netlink: 'syz.2.2712': attribute type 4 has an invalid length. [ 811.326313][T16182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.345199][T16182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.362632][ T5825] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 811.380259][ T5825] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 811.419213][ T5825] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 811.436397][T16215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2722'. [ 811.461903][ T5825] usb 3-1: USB disconnect, device number 90 [ 811.484531][T16207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.502880][T16216] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2723'. [ 811.543521][T16216] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 811.819174][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 811.819240][ T30] audit: type=1400 audit(1785492448.220:1324): avc: denied { ioctl } for pid=16220 comm="syz.5.2725" path="socket:[53012]" dev="sockfs" ino=53012 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 811.821299][T16221] syzkaller0: entered promiscuous mode [ 811.870372][T16221] syzkaller0: entered allmulticast mode [ 812.203129][ T30] audit: type=1400 audit(1785492448.600:1325): avc: denied { setopt } for pid=16226 comm="syz.2.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 812.262692][T16229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2727'. [ 812.296670][T16229] new mount options do not match the existing superblock, will be ignored [ 812.338233][ T30] audit: type=1400 audit(1785492448.740:1326): avc: denied { mount } for pid=16226 comm="syz.2.2727" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 812.425031][ T30] audit: type=1400 audit(1785492448.820:1327): avc: denied { setopt } for pid=16233 comm="syz.6.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 812.636355][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2728'. [ 812.663397][T16232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.725248][ T6489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.736430][T11810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.746926][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.757396][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.014233][ T30] audit: type=1400 audit(1785492449.410:1328): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 813.083367][ T30] audit: type=1400 audit(1785492449.440:1329): avc: denied { read } for pid=16243 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 813.113668][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 813.133328][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.147220][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.177505][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.192863][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.223990][ T30] audit: type=1400 audit(1785492449.440:1330): avc: denied { open } for pid=16243 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 813.325030][ T30] audit: type=1400 audit(1785492449.650:1331): avc: denied { mounton } for pid=16243 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 813.365796][ T8821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.377309][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.389662][ T805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.406120][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.453569][ T7601] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.609461][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2735'. [ 813.679730][T16248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.700338][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2737'. [ 813.855207][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.457106][ T7601] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.880486][ T7601] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.900637][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.976899][T16274] hpfs: Bad magic ... probably not HPFS [ 814.992238][T16274] hpfs: Bad magic ... probably not HPFS [ 815.374745][ T4925] Bluetooth: hci0: command tx timeout [ 815.473193][T16243] lo speed is unknown, defaulting to 1000 [ 815.558433][ T7601] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.698843][T16277] syzkaller0: entered promiscuous mode [ 815.704357][T16277] syzkaller0: entered allmulticast mode [ 815.837116][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2740'. [ 815.884231][T16280] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2742'. [ 815.903913][T16278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.000772][ T30] audit: type=1400 audit(1785492452.400:1332): avc: denied { read } for pid=5270 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 816.072955][ T30] audit: type=1400 audit(1785492452.470:1333): avc: denied { search } for pid=5270 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.268270][ T7601] bridge_slave_1: left allmulticast mode [ 816.277357][ T7601] bridge_slave_1: left promiscuous mode [ 816.286568][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.302367][ T7601] bridge_slave_0: left allmulticast mode [ 816.309567][ T7601] bridge_slave_0: left promiscuous mode [ 816.315929][T16292] deleting an unspecified loop device is not supported. [ 816.323307][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.381958][ T7601] bridge0: left allmulticast mode [ 816.780293][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.799461][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.816522][ T7601] bond0 (unregistering): Released all slaves [ 816.829080][ T7601] bond1 (unregistering): Released all slaves [ 817.086716][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 817.086734][ T30] audit: type=1400 audit(1785492453.490:1345): avc: denied { read } for pid=16311 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.093667][T16303] syzkaller0: entered promiscuous mode [ 817.161121][ T30] audit: type=1400 audit(1785492453.490:1346): avc: denied { read open } for pid=16311 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.188045][T16303] syzkaller0: entered allmulticast mode [ 817.232153][ T30] audit: type=1400 audit(1785492453.490:1347): avc: denied { getattr } for pid=16311 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.241035][ T7601] tipc: Left network mode [ 817.447887][ T4925] Bluetooth: hci0: command tx timeout [ 818.058443][ T30] audit: type=1400 audit(1785492454.450:1348): avc: denied { write } for pid=16309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.109759][ T30] audit: type=1400 audit(1785492454.450:1349): avc: denied { add_name } for pid=16309 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.169416][ T30] audit: type=1400 audit(1785492454.450:1350): avc: denied { create } for pid=16309 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 818.228698][ T30] audit: type=1400 audit(1785492454.450:1351): avc: denied { write } for pid=16309 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth13.link" dev="tmpfs" ino=11252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 818.256705][ T30] audit: type=1400 audit(1785492454.450:1352): avc: denied { append } for pid=16309 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" dev="tmpfs" ino=11252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 818.286152][ T30] audit: type=1400 audit(1785492454.620:1353): avc: denied { write } for pid=16338 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.335652][ T30] audit: type=1400 audit(1785492454.620:1354): avc: denied { remove_name } for pid=16338 comm="rm" name="resolv.conf.eth13.link" dev="tmpfs" ino=11252 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.524780][ T4925] Bluetooth: hci0: command tx timeout [ 819.598369][T16353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2754'. [ 821.609574][ T4925] Bluetooth: hci0: command tx timeout [ 822.593438][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2752'. [ 822.655664][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 822.849042][T16243] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.874448][T16243] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.904362][T16243] bridge_slave_0: entered allmulticast mode [ 822.912220][T16243] bridge_slave_0: entered promiscuous mode [ 822.920757][T16243] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.928816][T16243] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.936185][T16243] bridge_slave_1: entered allmulticast mode [ 822.943873][T16243] bridge_slave_1: entered promiscuous mode [ 822.990253][T16243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.011717][T16243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.155979][T16378] hpfs: Bad magic ... probably not HPFS [ 823.172145][T16378] hpfs: Bad magic ... probably not HPFS [ 823.203532][ T805] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 823.278541][T16376] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2756'. [ 823.384905][ T805] usb 6-1: Using ep0 maxpacket: 8 [ 823.432138][ T805] usb 6-1: config 6 has an invalid interface number: 213 but max is 1 [ 823.452943][ T805] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 823.474194][T16243] team0: Port device team_slave_0 added [ 823.475011][ T805] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 823.483460][T16243] team0: Port device team_slave_1 added [ 823.507091][ T805] usb 6-1: config 6 has no interface number 0 [ 823.520370][T16243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.524799][ T805] usb 6-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.532970][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.553451][ T805] usb 6-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 823.566459][T16243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.594794][ T805] usb 6-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 823.618876][T16243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.624774][ T805] usb 6-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.627231][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.661240][ T805] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 823.668790][T16243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.702323][ T805] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 823.718071][ T805] usb 6-1: Manufacturer: syz [ 823.834696][ T805] usb 6-1: SerialNumber: syz [ 823.921636][T16243] hsr_slave_0: entered promiscuous mode [ 823.928515][T16243] hsr_slave_1: entered promiscuous mode [ 823.935607][T16243] debugfs: 'hsr0' already exists in 'hsr' [ 823.942258][T16243] Cannot create hsr debugfs directory [ 824.647079][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 824.647096][ T30] audit: type=1400 audit(1785492461.050:1356): avc: denied { write } for pid=16375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.949116][T16405] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2758'. [ 824.958872][T16405] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2758'. [ 824.968260][T16405] netlink: 'syz.5.2758': attribute type 5 has an invalid length. [ 824.976182][T16405] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2758'. [ 825.329502][ T30] audit: type=1400 audit(1785492461.730:1357): avc: denied { listen } for pid=16386 comm="syz.7.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 825.533843][ T7601] hsr_slave_0: left promiscuous mode [ 825.565445][ T7601] hsr_slave_1: left promiscuous mode [ 825.583757][ T30] audit: type=1400 audit(1785492461.970:1358): avc: denied { write } for pid=16412 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.609640][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.644744][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.674577][ T7601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.698265][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.799021][ T7601] veth1_macvtap: left promiscuous mode [ 825.819700][ T7601] veth0_macvtap: left promiscuous mode [ 825.839947][ T7601] veth1_vlan: left promiscuous mode [ 825.863096][ T7601] veth0_vlan: left promiscuous mode [ 825.887980][T16415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2762'. [ 825.980552][T16416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.384763][ T805] em28xx 6-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 826.422109][ T805] em28xx 6-1:6.213: Audio interface 213 found (Vendor Class) [ 826.538492][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 826.548540][ T805] em28xx 6-1:6.213: unknown em28xx chip ID (0) [ 826.558931][ T805] em28xx 6-1:6.213: Config register raw data: 0xfffffffb [ 826.583784][ T805] em28xx 6-1:6.213: AC97 chip type couldn't be determined [ 826.593420][ T7601] team0 (unregistering): Port device team_slave_0 removed [ 826.618132][ T805] em28xx 6-1:6.213: No AC97 audio processor [ 826.716749][ T805] usb 6-1: USB disconnect, device number 70 [ 827.208362][ T805] em28xx 6-1:6.213: Disconnecting em28xx [ 827.231977][ T805] em28xx 6-1:6.213: Freeing device [ 827.401566][ T7601] smc: removing net device veth0 with user defined pnetid SYZ0 [ 827.469564][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 827.641690][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2763'. [ 828.449802][T16447] /dev/nullb0: Can't lookup blockdev [ 828.459087][T16447] /dev/nullb0: Can't lookup blockdev [ 828.837266][T16444] syzkaller0: entered promiscuous mode [ 828.842790][T16444] syzkaller0: entered allmulticast mode [ 829.234378][ T30] audit: type=1400 audit(1785492465.630:1359): avc: denied { write } for pid=16441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.431217][ T30] audit: type=1400 audit(1785492465.830:1360): avc: denied { write } for pid=16465 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.991546][T16467] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2770'. [ 830.044701][T16471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.152825][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 833.325811][T16481] bridge0: port 3(syz_tun) entered blocking state [ 833.350281][T16481] bridge0: port 3(syz_tun) entered disabled state [ 833.371216][T16481] syz_tun: entered promiscuous mode [ 833.388833][T16481] bridge0: port 3(syz_tun) entered blocking state [ 833.395390][T16481] bridge0: port 3(syz_tun) entered forwarding state [ 833.593666][T16481] net_ratelimit: 5 callbacks suppressed [ 833.593678][T16481] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 833.628470][ T7601] IPVS: stop unused estimator thread 0... [ 833.701452][T16496] hpfs: Bad magic ... probably not HPFS [ 833.714462][T16496] hpfs: Bad magic ... probably not HPFS [ 834.201121][T16243] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 834.396359][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.421121][T16243] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 834.503694][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.525769][T16243] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 834.542207][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.553865][T16243] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 834.567831][T16243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.864710][ T30] audit: type=1400 audit(1785492471.260:1361): avc: denied { write } for pid=16501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.897090][T16243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.913674][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2780'. [ 834.928274][T16243] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.946898][T16511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.021912][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.029054][ T7601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.092654][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.099789][ T7601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.295408][ T30] audit: type=1400 audit(1785492471.700:1362): avc: denied { write } for pid=16532 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.735140][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 836.795278][T16557] hpfs: Bad magic ... probably not HPFS [ 836.810980][T16557] hpfs: Bad magic ... probably not HPFS [ 837.339851][T16243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.510353][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 837.623530][T16566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2785'. [ 837.648971][T16566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.053800][T16243] veth0_vlan: entered promiscuous mode [ 838.090960][T16243] veth1_vlan: entered promiscuous mode [ 838.133028][T16243] veth0_macvtap: entered promiscuous mode [ 838.249556][ T30] audit: type=1400 audit(1785492474.650:1363): avc: denied { create } for pid=16583 comm="syz.2.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 838.297866][T16243] veth1_macvtap: entered promiscuous mode [ 838.323990][ T30] audit: type=1400 audit(1785492474.670:1364): avc: denied { setopt } for pid=16583 comm="syz.2.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 838.386751][ T30] audit: type=1400 audit(1785492474.680:1365): avc: denied { write } for pid=16583 comm="syz.2.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 838.392881][T16243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.438363][T16243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.467581][ T196] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.502010][ T196] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.575130][ T196] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.586623][ T5731] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 838.643499][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.652000][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.656028][ T5907] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.704276][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.714840][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.730042][ T30] audit: type=1400 audit(1785492475.130:1366): avc: denied { mounton } for pid=16243 comm="syz-executor" path="/root/syzkaller.zcSUy7/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 838.756136][ T5731] usb 3-1: device descriptor read/64, error -71 [ 838.771572][ T30] audit: type=1400 audit(1785492475.130:1367): avc: denied { mounton } for pid=16243 comm="syz-executor" path="/root/syzkaller.zcSUy7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 838.806622][ T30] audit: type=1400 audit(1785492475.130:1368): avc: denied { mounton } for pid=16243 comm="syz-executor" path="/root/syzkaller.zcSUy7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 838.835573][ T30] audit: type=1400 audit(1785492475.160:1369): avc: denied { mounton } for pid=16243 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 839.577700][ T30] audit: type=1400 audit(1785492475.160:1370): avc: denied { mount } for pid=16243 comm="syz-executor" name="/" dev="gadgetfs" ino=8340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 839.634792][ T5731] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 839.659027][T16590] xt_CT: No such helper "syz0" [ 839.732347][T16595] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2734'. [ 839.775423][ T5731] usb 3-1: device descriptor read/64, error -71 [ 839.879092][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'. [ 839.888616][ T5731] usb usb3-port1: attempt power cycle [ 840.113813][T16599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2790'. [ 840.128349][T16599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.245491][ T5731] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 840.269705][ T5731] usb 3-1: device descriptor read/8, error -71 [ 840.500492][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 840.500510][ T30] audit: type=1400 audit(1785492476.900:1375): avc: denied { write } for pid=16610 comm="syz.8.2794" name="functions" dev="configfs" ino=13028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 840.530737][ T5731] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 840.539474][ T30] audit: type=1400 audit(1785492476.930:1376): avc: denied { map } for pid=16610 comm="syz.8.2794" path="/1/myconfig/usb_gadget/g1/functions/SourceSink.0/pattern" dev="configfs" ino=55926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 840.567674][ T30] audit: type=1400 audit(1785492476.930:1377): avc: denied { execute } for pid=16610 comm="syz.8.2794" path="/1/myconfig/usb_gadget/g1/functions/SourceSink.0/pattern" dev="configfs" ino=55926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 840.596222][ T5731] usb 3-1: device descriptor read/8, error -71 [ 840.602719][ T30] audit: type=1800 audit(1785492476.930:1378): pid=16611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2794" name="pattern" dev="configfs" ino=55926 res=0 errno=0 [ 840.625408][ T30] audit: type=1400 audit(1785492476.930:1379): avc: denied { mmap_zero } for pid=16610 comm="syz.8.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 840.673319][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2795'. [ 840.766591][ T5731] usb usb3-port1: unable to enumerate USB device [ 841.675648][ T30] audit: type=1400 audit(1785492478.070:1380): avc: denied { append } for pid=16625 comm="syz.8.2799" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 841.680949][T16628] loop9: detected capacity change from 0 to 1 [ 841.746189][T16628] Dev loop9: unable to read RDB block 1 [ 841.761962][ T30] audit: type=1400 audit(1785492478.110:1381): avc: denied { getattr } for pid=16624 comm="syz.5.2800" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 841.786539][T16628] loop9: unable to read partition table [ 841.806663][T16628] loop9: partition table beyond EOD, truncated [ 841.816503][T16628] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 841.846076][ T30] audit: type=1400 audit(1785492478.120:1382): avc: denied { mount } for pid=16624 comm="syz.5.2800" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 841.897031][ T30] audit: type=1400 audit(1785492478.130:1383): avc: denied { ioctl } for pid=16624 comm="syz.5.2800" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 841.938666][ T30] audit: type=1804 audit(1785492478.240:1384): pid=16627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2800" name="/newroot/464/file0" dev="tmpfs" ino=2475 res=1 errno=0 [ 843.188470][T16654] ================================================================== [ 843.196563][T16654] BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.204624][T16654] Free of addr ffff8880551d6d14 by task syz.2.2805/16654 [ 843.211652][T16654] [ 843.213987][T16654] CPU: 1 UID: 60928 PID: 16654 Comm: syz.2.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.214014][T16654] Tainted: [L]=SOFTLOCKUP [ 843.214023][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 843.214036][T16654] Call Trace: [ 843.214046][T16654] [ 843.214055][T16654] dump_stack_lvl+0x100/0x190 [ 843.214083][T16654] print_report+0x13d/0x4b0 [ 843.214112][T16654] ? __virt_addr_valid+0x239/0x430 [ 843.214139][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.214168][T16654] kasan_report_invalid_free+0xb8/0x190 [ 843.214195][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.214222][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.214248][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.214273][T16654] check_slab_allocation+0xe1/0xf0 [ 843.214295][T16654] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 843.214320][T16654] kfree+0x1b6/0x6c0 [ 843.214347][T16654] ? __asan_memcpy+0x3c/0x60 [ 843.214367][T16654] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.214395][T16654] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 843.214423][T16654] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 843.214451][T16654] configfs_write_iter+0x302/0x4e0 [ 843.214475][T16654] vfs_write+0x6ac/0x1050 [ 843.214504][T16654] ? __pfx_configfs_write_iter+0x10/0x10 [ 843.214526][T16654] ? __pfx_vfs_write+0x10/0x10 [ 843.214561][T16654] ksys_write+0x12a/0x250 [ 843.214589][T16654] ? __pfx_ksys_write+0x10/0x10 [ 843.214617][T16654] do_syscall_64+0x115/0x870 [ 843.214634][T16654] ? clear_bhb_loop+0x40/0x90 [ 843.214652][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.214671][T16654] RIP: 0033:0x7fd4c079e019 [ 843.214688][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.214706][T16654] RSP: 002b:00007fd4c1687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 843.214726][T16654] RAX: ffffffffffffffda RBX: 00007fd4c0a26180 RCX: 00007fd4c079e019 [ 843.214739][T16654] RDX: 0000000000000019 RSI: 0000200000000040 RDI: 0000000000000009 [ 843.214750][T16654] RBP: 00007fd4c083500c R08: 0000000000000000 R09: 0000000000000000 [ 843.214761][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.214773][T16654] R13: 00007fd4c0a26218 R14: 00007fd4c0a26180 R15: 00007ffe9c07e548 [ 843.214800][T16654] [ 843.214807][T16654] [ 843.447889][T16654] Allocated by task 16654: [ 843.452284][T16654] kasan_save_stack+0x30/0x50 [ 843.456938][T16654] kasan_save_track+0x14/0x30 [ 843.461596][T16654] __kasan_kmalloc+0xaa/0xb0 [ 843.466158][T16654] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 843.472545][T16654] kstrdup+0x51/0xe0 [ 843.476414][T16654] f_uac2_opts_c_srate_store+0x113/0x260 [ 843.482039][T16654] configfs_write_iter+0x302/0x4e0 [ 843.487145][T16654] vfs_write+0x6ac/0x1050 [ 843.491453][T16654] ksys_write+0x12a/0x250 [ 843.495769][T16654] do_syscall_64+0x115/0x870 [ 843.500340][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.506251][T16654] [ 843.508549][T16654] The buggy address belongs to the object at ffff8880551d6d00 [ 843.508549][T16654] which belongs to the cache kmalloc-32 of size 32 [ 843.522397][T16654] The buggy address is located 20 bytes inside of [ 843.522397][T16654] 26-byte region [ffff8880551d6d00, ffff8880551d6d1a) [ 843.535471][T16654] [ 843.537767][T16654] The buggy address belongs to the physical page: [ 843.544145][T16654] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x551d6 [ 843.552883][T16654] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 843.559968][T16654] page_type: f5(slab) [ 843.563931][T16654] raw: 00fff00000000000 ffff88813fe23780 dead000000000100 dead000000000122 [ 843.572488][T16654] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 843.581037][T16654] page dumped because: kasan: bad access detected [ 843.587418][T16654] page_owner tracks the page as allocated [ 843.593107][T16654] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6149, tgid 6149 (udevd), ts 179704001734, free_ts 179701889221 [ 843.613404][T16654] post_alloc_hook+0xfd/0x120 [ 843.618082][T16654] get_page_from_freelist+0xf48/0x3530 [ 843.623525][T16654] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 843.629390][T16654] new_slab+0xa2/0x640 [ 843.633524][T16654] refill_objects+0xe3/0x410 [ 843.638091][T16654] __pcs_replace_empty_main+0x376/0x680 [ 843.643620][T16654] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 843.650017][T16654] kstrdup+0x51/0xe0 [ 843.653888][T16654] security_context_to_sid_core+0x7b8/0x870 [ 843.659765][T16654] selinux_inode_post_setxattr+0x125/0x410 [ 843.665557][T16654] security_inode_post_setxattr+0x22f/0x250 [ 843.671428][T16654] __vfs_setxattr_noperm+0x4ad/0x660 [ 843.676684][T16654] __vfs_setxattr_locked+0x127/0x2b0 [ 843.681940][T16654] vfs_setxattr+0x14a/0x390 [ 843.686414][T16654] do_setxattr+0x145/0x180 [ 843.690804][T16654] filename_setxattr+0x167/0x1d0 [ 843.695716][T16654] page last free pid 5605 tgid 5605 stack trace: [ 843.702019][T16654] free_pages_prepare+0x586/0xd80 [ 843.707033][T16654] __free_contig_range_common+0x14f/0x250 [ 843.712729][T16654] free_pages_bulk+0x12a/0x200 [ 843.717473][T16654] vm_area_free_pages+0xad/0x2b0 [ 843.722385][T16654] vfree+0x107/0x750 [ 843.726263][T16654] do_ip6t_get_ctl+0xa0b/0xc30 [ 843.731011][T16654] nf_getsockopt+0x7c/0xe0 [ 843.735405][T16654] ipv6_getsockopt+0x207/0x2a0 [ 843.740151][T16654] tcp_getsockopt+0xa1/0x110 [ 843.744730][T16654] do_sock_getsockopt+0x50a/0x6e0 [ 843.749752][T16654] __sys_getsockopt+0x148/0x260 [ 843.754575][T16654] __x64_sys_getsockopt+0xbd/0x160 [ 843.759656][T16654] do_syscall_64+0x115/0x870 [ 843.764256][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.770119][T16654] [ 843.772427][T16654] Memory state around the buggy address: [ 843.778026][T16654] ffff8880551d6c00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 843.786145][T16654] ffff8880551d6c80: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 843.794183][T16654] >ffff8880551d6d00: 00 00 00 02 fc fc fc fc fa fb fb fb fc fc fc fc [ 843.802219][T16654] ^ [ 843.806783][T16654] ffff8880551d6d80: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 843.814861][T16654] ffff8880551d6e00: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 843.822901][T16654] ================================================================== [ 843.839207][T16654] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 843.846450][T16654] CPU: 1 UID: 60928 PID: 16654 Comm: syz.2.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.857744][T16654] Tainted: [L]=SOFTLOCKUP [ 843.862067][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 843.872148][T16654] Call Trace: [ 843.875431][T16654] [ 843.878356][T16654] dump_stack_lvl+0x100/0x190 [ 843.883047][T16654] vpanic+0x552/0x970 [ 843.887031][T16654] ? __pfx_vpanic+0x10/0x10 [ 843.891531][T16654] panic+0xd1/0xe0 [ 843.895270][T16654] ? __pfx_panic+0x10/0x10 [ 843.899681][T16654] ? preempt_schedule_common+0x42/0xc0 [ 843.905133][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.910937][T16654] check_panic_on_warn.cold+0x19/0x34 [ 843.916316][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.922129][T16654] end_report.part.0+0x3a/0x90 [ 843.926893][T16654] kasan_report_invalid_free.cold+0xd/0x12 [ 843.932696][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.938507][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.944301][T16654] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.950111][T16654] check_slab_allocation+0xe1/0xf0 [ 843.955222][T16654] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 843.961013][T16654] kfree+0x1b6/0x6c0 [ 843.965087][T16654] ? __asan_memcpy+0x3c/0x60 [ 843.969668][T16654] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 843.975294][T16654] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 843.981429][T16654] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 843.987583][T16654] configfs_write_iter+0x302/0x4e0 [ 843.992689][T16654] vfs_write+0x6ac/0x1050 [ 843.997026][T16654] ? __pfx_configfs_write_iter+0x10/0x10 [ 844.002646][T16654] ? __pfx_vfs_write+0x10/0x10 [ 844.007403][T16654] ksys_write+0x12a/0x250 [ 844.011718][T16654] ? __pfx_ksys_write+0x10/0x10 [ 844.016552][T16654] do_syscall_64+0x115/0x870 [ 844.021119][T16654] ? clear_bhb_loop+0x40/0x90 [ 844.025771][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.031656][T16654] RIP: 0033:0x7fd4c079e019 [ 844.036057][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.055640][T16654] RSP: 002b:00007fd4c1687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.064030][T16654] RAX: ffffffffffffffda RBX: 00007fd4c0a26180 RCX: 00007fd4c079e019 [ 844.071976][T16654] RDX: 0000000000000019 RSI: 0000200000000040 RDI: 0000000000000009 [ 844.079920][T16654] RBP: 00007fd4c083500c R08: 0000000000000000 R09: 0000000000000000 [ 844.087874][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.095827][T16654] R13: 00007fd4c0a26218 R14: 00007fd4c0a26180 R15: 00007ffe9c07e548 [ 844.103795][T16654] [ 844.107008][T16654] Kernel Offset: disabled [ 844.111317][T16654] Rebooting in 86400 seconds..