last executing test programs: 2m5.193861894s ago: executing program 2 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f00000003c0)=0x27) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000800)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {}, {}, {0xe5, 0xfffffffc}, {}, {}, {0x0, 0x8c7}], 0xfc, 0xf2, 0x7}}) io_setup(0x8, &(0x7f0000000b40)=0x0) io_pgetevents(r3, 0x6, 0x6, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 2m5.022638113s ago: executing program 2 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x91}, 0x40802) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x30c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18bcc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6bb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1eb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8f2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfff, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x6}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) r3 = signalfd(r1, &(0x7f00000006c0)={[0x2]}, 0x8) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000700)={0xe, {{0xa, 0x4e20, 0x1000, @loopback, 0x5}}, 0x0, 0x6, [{{0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, {{0xa, 0x4e24, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {{0xa, 0x4e23, 0x1, @mcast1, 0x3f5}}, {{0xa, 0x4e22, 0x4, @empty, 0x3ff}}, {{0xa, 0x4e21, 0x7, @remote, 0x2}}, {{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}}]}, 0x390) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ac0), 0x182, 0x0) r5 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000b00), 0x50000, 0x0) flock(r5, 0x5) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000b40)=""/176, &(0x7f0000000c00)=0xb0) r6 = socket$inet(0x2, 0x80000, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000e40)={"a0baef3cfda00d49000f2ddc0b5953f3", 0x0, 0x0, {0x5, 0x5}, {0x2, 0x35bb4000}, 0x1, [0x1ff, 0x7fffffff, 0x2, 0x2, 0x8, 0x7, 0x524, 0x2, 0x400, 0x4, 0x3ff, 0x6, 0xffffffffffff0001, 0x1, 0x9, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000f40)={"0ebe1b0152396f72a44ef571d163acb3", r7, r8, {0x5, 0x7}, {0x9, 0x4}, 0x5, [0xbd, 0x7, 0x6, 0x3, 0x8, 0x9, 0x8, 0x100000000000000, 0x6, 0x1, 0x4, 0x0, 0xe, 0x4a239de1, 0x7, 0x6]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000001040)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000001380)={&(0x7f0000001080)=[0x0, 0x0, 0x0], &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], 0x8, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000001540)={0x6, r9, r10}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001580)=0x2, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000001600)=0x4a) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640), 0x6a0001, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r11, 0x8004510a, &(0x7f0000001680)) openat(r3, &(0x7f00000016c0)='./file0\x00', 0x4000, 0xca) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001700), &(0x7f0000001780)=0x68) gettid() sendmsg$netlink(r3, &(0x7f0000001bc0)={&(0x7f00000017c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000001b40)=[{&(0x7f0000001800)={0x314, 0x13, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@generic="da290ae7e4af37adf71f702a3672e54e2f80d46b1082962d4494e43695f2b5ee4b350e3c8108d80b7e40d11d08287fe8be866ea7b4a7e7d75bec52537a1faff77104cf376399997f962c3b11fb52334436fa31a2eaf70381d4c9e1509230d3a53548b1e994c2760c8dbc273901f2db3c6891ba547fb28d17d552991804f21347289a9b6b4e2356dc775509777cf812c08f09cdb44b45eac66c01f4c5208c3c269ba8573895872df91d874ec3eff68342b70ecba92930", @generic="493508ec55b9b0123c8d486bc0d335a2f7f0a72a8826cdfd3af79413f9305c7e658bd22a441e2e60", @generic="77d3972cb55419a9d58f7f552f36bc2011d53288e0c1ea4b3fdc83095a5f4983b133f658529badc11cdd9e65b82bef3e082b350325fc2e8dd574888b16ae3cea1f1c08f4617ac910e607196966a852e609bed971c13ae575e6e6fe9d5042928bc3ffc7", @generic="727fcc8d427d347ee258e71701e0212e5ecbe9efbb", @nested={0x174, 0x126, 0x0, 0x1, [@generic="6b9d38a41fd405f2bc1c35b6aeb8095039984b2868cdb02faee4fde677ac6ac1380cf981dd11ed9e8bdf6436435072b8c40f00b5b25d33222e8fea4d2418d4d65bf3aa28a3a782245285ad488f09324860cd5b9ae4eb6f4051141c8a39f604f9a333bc1011d0ab1ea9cdca608df73b8cae76ab7d912cba3f38b5fa1826934841857d7aa71d6911c628c6e3562dc6aeec218759c83559de3ca9bb9c56515256c95a23c1be73c4e1201ceaa31f0541558fe70bb5e01042e205cfcb98b1", @typed={0xaf, 0x16b, 0x0, 0x0, @binary="1543f29a8dc37dda2d2727101e646c2475d58ccdc1726ca4ba46ba6ab410b959d3e8a9f078c4e01b22ecbc81441ca73e66c7071fc4f8009159953ecf3eeb682dc827ac37a9520a23f30190ee936b09142f3e250ec12df8db6d41c0cb1027541ed6628be4bdd398bc14b32ba8784f15bdd5ef78fdb6d97cadcabf6233fae85764c41987eecef8e1b626ee247dced8f0340ee74823541cc6598162c036d74d7c2994d0c6aaa10e499d12a826"}, @nested={0x4, 0x28}]}, @generic="3687f384fbe5de93943c07a50ab7cdb81169ffbd4d10504a4efdb0107ddd0aec67", @typed={0x10, 0x60, 0x0, 0x0, @str='%o$\xa8)-#*\r\x90k\x00'}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0x5}]}, 0x314}], 0x1, &(0x7f0000001b80)=[@rights={{0x18, 0x1, 0x1, [r4, r11]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x30, 0x20000011}, 0x40040c1) 2m4.716343882s ago: executing program 2 (id=197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000805"], 0xa) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$nbd(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x40) 2m3.966405623s ago: executing program 2 (id=212): sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd70005bdacffb1ce620891400048005000300060000000500030002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c045}, 0x4008000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={'\x00', 0xff, 0x6, 0x3, 0x8, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", "0400", "1000", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff0200", "030a0038fdff000000ed00", "0000f0ffffff00"]}) socket(0x1e, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4000000}}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="00214717a70700000000030600710a5e31163ceb9d0671200000d9b9a2122200ae1a000510000000000080ffff03425d4d50", 0x32}], 0x1, 0x8, 0xa) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMWRITEOOB(r4, 0xc0104d03, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) r5 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f00000000c0)=0xe9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/111, 0x6f}], 0x3, 0x1, 0xfffffffb) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000a80)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x12) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2m3.693711265s ago: executing program 2 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33000000000000020000000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000001800000026bd7000ffdbdf251c1014020000fd0a0014040084001300000000000300000000000000000000000000000000000f000000000000000f000000000000000f0000000000000000000000000000000000000007000000000000000000000000000000000000000000000000192a186b00000000000000000005000f000000000000000000000007000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000001800000026bd7000ffdbdf251c1014020000fd0a0014040084001300000000000300000000000000000000000000000000000f000000000000000f000000000000000f0000000000000000000000000000000000000007000000000000000000000000000000000000000000000000192a186b00000000000000000005000f000000000000000000000007000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r0, 0xe7744000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000280)=0x5) (async) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000280)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m3.343772434s ago: executing program 2 (id=220): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m3.282388534s ago: executing program 32 (id=220): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 59.038756264s ago: executing program 4 (id=796): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x18, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0x8, 0x5, {0xffffffffffffffff}, {0xee01}, 0xfffffffffffffffc}) getresuid(&(0x7f0000000200), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r7 = getegid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x420e, r8, 0x0, 0xfffffffffffffffe) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x40, 0x40084}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000080)={0xfff, 0x1, {0x0, 0x2, 0x5, 0x0, 0x6354}, 0x8}) 59.037107361s ago: executing program 4 (id=798): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) r6 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) shutdown(r5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r8, @ANYRES16=r3], 0x54}}, 0x0) 58.886672319s ago: executing program 4 (id=802): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="f00fba760004f3ab0f3036deb9800066b9800000c00f326635000400000f300fbf81c5b0e600f20f017e0064f364f30f20160f01cf", 0x35}], 0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c4e17d7f7b000f01cb66b8d9008ed8b9280a00000f32b8b83500000f23c80f21f8350c00d0000f23f8640fb246680f01ba16000000640f011e8fe978cbbf422c000064640f01c4", 0x47}], 0x1, 0x11, 0x0, 0x0) unshare(0x36040800) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, 0x0) 58.689138673s ago: executing program 4 (id=805): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r2, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) (async) recvmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/204, 0xcc}], 0x1, &(0x7f0000000400)=""/137, 0x89}, 0x7fa}, {{&(0x7f00000004c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003100)=[{&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/136, 0x88}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x8, &(0x7f0000003180)=""/67, 0x43}, 0xb55f}, {{&(0x7f0000003200)=@ieee802154, 0x80, &(0x7f0000003440)=[{&(0x7f0000003280)=""/139, 0x8b}, {&(0x7f0000003340)=""/241, 0xf1}], 0x2, &(0x7f0000003480)=""/4096, 0x1000}, 0xfffffff0}], 0x3, 0x40000041, &(0x7f0000004540)={0x77359400}) (async, rerun: 64) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (rerun: 64) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 57.68831292s ago: executing program 4 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000000380)={0xd24, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x360, 0x111, 0x0, 0x1, {0x35c, 0x5, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x160, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x542d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0xfffffffffffffe2d, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffff}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2c4, 0x111, 0x0, 0x1, {0x2c0, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x331}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1cd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x27d7277a}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x4}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x458, 0x111, 0x0, 0x1, {0x454, 0x5, 0x0, 0x1, [{0x2ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x26c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf89}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5c40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x284, 0x111, 0x0, 0x1, {0x280, 0x5, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}]}}]}, 0xd24}, 0x1, 0x0, 0x0, 0x2001}, 0x10000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000300)={0x20, r4, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0xd1) r5 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x800000, 0x4, 0x20300, 0xfc}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1a000}}, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 56.886795733s ago: executing program 4 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) sysfs$1(0x1, &(0x7f0000000140)='udf\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r3, 0x11, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000580080002"], 0x2c}, 0x1, 0x0, 0x0, 0x404c881}, 0x4008094) 56.807176723s ago: executing program 33 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) sysfs$1(0x1, &(0x7f0000000140)='udf\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r3, 0x11, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000580080002"], 0x2c}, 0x1, 0x0, 0x0, 0x404c881}, 0x4008094) 43.119771347s ago: executing program 3 (id=1034): r0 = socket$netlink(0x10, 0x3, 0x7) recvmmsg(r0, &(0x7f0000004680)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000100)=""/148, 0x94}, {&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/250, 0xfa}], 0x7, &(0x7f0000000600)=""/217, 0xd9}, 0x10000}, {{&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/45, 0x2d}], 0x2}, 0x4}, {{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/57, 0x39}, {&(0x7f00000009c0)=""/51, 0x33}, {&(0x7f0000000a00)=""/40, 0x28}, {&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/148, 0x94}, {&(0x7f0000000b80)=""/42, 0x2a}], 0x6, &(0x7f0000000c40)=""/119, 0x77}, 0x7}, {{&(0x7f0000000cc0)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d40)=""/170, 0xaa}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/156, 0x9c}, {&(0x7f0000000f00)=""/191, 0xbf}, {&(0x7f0000000fc0)=""/41, 0x29}], 0x5}, 0x8}, {{&(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001100)=""/128, 0x80}, {&(0x7f0000001180)=""/29, 0x1d}], 0x2, &(0x7f0000001200)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002200)=@qipcrtr, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/76, 0x4c}, {&(0x7f0000003300)=""/157, 0x9d}], 0x3, &(0x7f0000003400)=""/120, 0x78}, 0x47}, {{&(0x7f0000003480)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003500)=""/218, 0xda}, {&(0x7f0000003600)=""/145, 0x91}, {&(0x7f00000036c0)=""/70, 0x46}, {&(0x7f0000003740)=""/141, 0x8d}, {&(0x7f0000003800)=""/244, 0xf4}, {&(0x7f0000003900)=""/25, 0x19}, {&(0x7f0000003940)=""/245, 0xf5}, {&(0x7f0000003a40)=""/224, 0xe0}], 0x8, &(0x7f0000003bc0)=""/144, 0x90}, 0xfffffffc}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003c80)=""/209, 0xd1}, {&(0x7f0000003d80)=""/97, 0x61}, {&(0x7f0000003e00)=""/74, 0x4a}, {&(0x7f0000003e80)=""/250, 0xfa}, {&(0x7f0000003f80)=""/74, 0x4a}, {&(0x7f0000004000)=""/95, 0x5f}, {&(0x7f0000004080)=""/42, 0x2a}], 0x7, &(0x7f0000004140)=""/76, 0x4c}, 0x200}, {{&(0x7f00000041c0)=@nfc_llcp, 0x80, &(0x7f0000004600)=[{&(0x7f0000004240)=""/1, 0x1}, {&(0x7f0000004280)=""/149, 0x95}, {&(0x7f0000004340)=""/166, 0xa6}, {&(0x7f0000004400)=""/135, 0x87}, {&(0x7f00000044c0)=""/122, 0x7a}, {&(0x7f0000004540)=""/139, 0x8b}], 0x6}, 0x55248a12}], 0x9, 0x10000, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000049c0)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000004980)={&(0x7f0000004900)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt(r0, 0x60c, 0x5, &(0x7f0000004a00)="7f257310e4c9e8fc1c8da1430a749d9cc837a0e78c59551af1dc4bb43cc298931deba2fac1947ea427380e2da73346b320c9b1f6b4dd6fa6d9d5ee19b3a2ce88d1d9035d876509615afd15f2d59eb35eb3bc4e5c3adf29da784ba61de569e37cf07a99fa86ebbaaf2107e5fcae5f966b0469eb4eb9c714aedfb9697e991e36c31b48ca5bd9a67996971aee315c002b7225cf9b58c72a3c79aff2542ca10bf4719e421c66b22c38e51b4880304c2a760f8b46e150bf57bc02c414ccb41ac7bd809761604bcdfdb6ceded81df787e3054d93242d378b2535916ba66bd6e58051", 0xdf) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000004bc0)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_IPPROTO={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x4000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004c00), 0x192041, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(r2, &(0x7f0000004c40)='./file0\x00', 0x400002, 0x0) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000004c80)=0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000004cc0)={0x0, 0x6e, "488b91067212004a1e00036f7700f46833ea8260fa7c1543bc78dd76efecc44a2b87dd6b60b25729a7a51295343322c450864af336a7a6895366e3fb5b16216603077727c801fcd182a0512d911141147e65e6a9ed5e8b092ef0a3dfcc79f0e3d0f12741ee1fd0d06b709088e614"}, &(0x7f0000004d40)=0x76) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000004d80)={r5, @in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe97}}}, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000004f00)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x10240006}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x14, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000004f40)={r3}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004fc0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000005080)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005040)={&(0x7f0000005000)={0x30, r7, 0x1, 0x70bd27, 0xf, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000050c0)={0x1, 0x402}) fcntl$setsig(r8, 0xa, 0x16) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000051c0)={&(0x7f0000005100), 0xc, &(0x7f0000005180)={&(0x7f0000005140)={0x1c, r7, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x4) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000005200)={0x2}) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000005240)=0x1) r9 = fcntl$dupfd(r3, 0x0, r8) ioctl$KDSETMODE(r9, 0x4b3a, 0x0) ioctl$MEMISLOCKED(r9, 0x80084d17, &(0x7f0000005280)={0x8, 0xc5b1}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = fcntl$getown(r8, 0x9) fcntl$setown(r10, 0x8, r11) sendmsg(r4, &(0x7f00000053c0)={&(0x7f00000052c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @private1}}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005340)="c66b8fff220af62a62e3dbec0df9ef25a7e343169e316846ec693178671815771d36de30062ff453103f847043376c9e68d4c8a2674fe666c12b", 0x3a}], 0x1}, 0x44080) openat(0xffffffffffffffff, &(0x7f0000005480)='./file0\x00', 0x10080, 0x100) 42.23997616s ago: executing program 3 (id=1045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x8e5, 0xec000000, 0x5}]}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x9, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pwrite64(r4, &(0x7f0000000040)="e7969c5be6722e6aa296294c21c64e09c53b12677b6f293b7212cd74aabaad1cdcafbe2207d73d35f86238d24156f8bad494c464686b471bcff9d227a16fc39c71688dedb7ca5f415ac26029076850440f01a3a935e10d7fdc42118141a93d8f9e235de2b2746ea50430c0085e1b4545b33291259b42f197eb53ad46d44bb2ada51600fe64a94c2deae07907495e", 0x8e, 0x51a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.227499858s ago: executing program 3 (id=1057): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x88800}, 0x4) 41.227280283s ago: executing program 3 (id=1058): r0 = socket$inet6(0xa, 0x3, 0x1) (async) r1 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x3, 0x2, 0x1, 0x1}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="0000000000000000000000008100", 0xe}, {&(0x7f0000000180)="ff521d6e", 0x4}], 0x2}, 0x4040000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 41.05007713s ago: executing program 3 (id=1063): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x86402, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e87ec82d4ee9df60f6ae1600a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0xd0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xf) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0x7f, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x7, 0x0, 0x8, 0x4, 0x5, 0xc, 0x4}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x7, 0xe0, &(0x7f00000004c0)=""/224, 0x41100, 0x20, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xd, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600), &(0x7f0000000640)=[{0x2, 0x1, 0x7, 0x5}, {0x1, 0x5, 0x1, 0x3}, {0x4, 0x1, 0x7, 0x8}, {0x4, 0x3, 0x9, 0xb}, {0x4, 0x5, 0x3, 0x8}, {0x4, 0x5, 0x6, 0x3}], 0x10, 0xfffffffe}, 0x94) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r7) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000001480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r9, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d4b80000", @ANYRES16=r8, @ANYBLOB="010129bd7000fddbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d65000000"], 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000140)=0x8000, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r11, 0xff03, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 40.77758967s ago: executing program 3 (id=1071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, r1, 0x411, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 25.710371037s ago: executing program 34 (id=1071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, r1, 0x411, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 5.39674459s ago: executing program 6 (id=1490): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x29, 0x3, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (rerun: 32) 5.316307785s ago: executing program 6 (id=1492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000100001005630d0bbcf02ed8c00000000", @ANYRES32=0x0, @ANYBLOB="a1a5000001240400140003006e657464657673696d30000000000000200016801c00018018000c8014000100feffff7f790200000200000088a80000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000844) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0x2, 0x80000001, 0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000018000100fd0f00000000000002000000fd000009000400000600150002000000100016800c000280"], 0x34}}, 0x44890) 3.214172104s ago: executing program 6 (id=1496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000194c0), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000019500)={0xe, {0x3, 0xa3, 0x5f}}, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.164617128s ago: executing program 6 (id=1498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a80000000060a0b0400000000000000000200000054000480500001800b0001006f626a7265660000400002800900020073797a30000000000900020073797a30000000000800034000000002080003400000000a08000140000000050900020073797a30000000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) (async) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000000)={0x36, &(0x7f00000001c0)=[{0x14, '\x00', @data=0x2, 0x8}]}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydev/swradio24\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000002c00)={0x2020}, 0x2020) (async) io_uring_setup(0x2f4f, &(0x7f0000002480)={0x0, 0x10, 0x40000, 0x0, 0x29, 0x0, r5}) (async) r6 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_disconnect(r6) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0xf, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0x2, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x1, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x7, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0xa, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x5, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xfff, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) (async) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x32) (async) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r9, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, r10, 0x0, 0x154) 1.274710034s ago: executing program 1 (id=1526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r4, r2, 0x80000) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.274314522s ago: executing program 1 (id=1527): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000b31e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b857fb90f60000012cbd7000fbdbdf25de000000d60c00000000000000000001e000000200000000000000010000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) 1.174733735s ago: executing program 1 (id=1528): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2b, 0x1, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0xb, @raw_data="4355303869080408cd249ec7efb301198680b5be6e23aeee037757247f8e7cf0314d80d8580d64e14364154a0a387d927cd57e123ba1efbe01652a5f640684fa5e893e897ccc3074465e163176e53cd24bf2af34498cc63505008850dd4c66c27b1a79895f7fd2f1e0808bce73abcfc38c2403597d41733d28f53f05bb06b0d4f2abb107a766aeb4184284d3088a97541741bb90239de08950c97b7a438137b639689d695fd868a1a509524b4a3a3d3e5afbd859c1ec4e282a50c8b1a2d85bdb653a9ce0918200"}) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e26, 0xc5de, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="342000006a78228c3cbd2fa74e5057cb3afe0d4543aba70579f012063814368a0f6939ff1b7a8cd9cef86ccb53ef68ae9c06c1d96b1f523f426fba635a56efde499ddc9b5cfd8ec9cc3e75358f4c8988ad71fbc52d13dda25ab67948e8f88917f81f320adf0dd5142d028b0e76667201dac85d904e0f6be352925c09259a3332f9db9d5daa138cb008b23b96cba83782c49784372fefe3b0216eaedb05d7980624975e311fc92def017c6f65f694c000a0cd08f142", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 1.124408979s ago: executing program 1 (id=1531): socket$netlink(0x10, 0x3, 0xa) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x99, 0x1, 0x1, 0x18020}, 0x30, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r4, &(0x7f0000000000), 0x400000000000047, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x3) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r7) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, r0, 0x2) 1.112997644s ago: executing program 5 (id=1532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="080006"], 0x24}}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x6c, &(0x7f0000000140)={@local, @loopback, 0x0}, &(0x7f0000000180)=0xc) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3864}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0xc028ae92, &(0x7f0000000000)={0x80000000}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.023493606s ago: executing program 0 (id=1533): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f0000000380)) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000bf000000720a00ff000000007900580e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000c5cf000000000000009500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.022690645s ago: executing program 0 (id=1534): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7c, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000001cc0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 919.451111ms ago: executing program 5 (id=1535): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) syz_ublk_setup_io_uring(0x402e, &(0x7f0000000740)={0x0, 0xfffffffc, 0x4000, 0x2, 0x20d, 0x0, r0}, &(0x7f00000005c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000006c0)={0x2e, 0x5, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x5411, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mlockall(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 874.405557ms ago: executing program 0 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) (async) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r4, 0x201, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c094}, 0x20004000) 724.517147ms ago: executing program 0 (id=1537): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x80000) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60ecff8000481100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x4, 0x0, 0xc, 0x1ff}, {0xa, 0xc4caa398de48f0ed, 0x8, 0x0, 0x1000, 0x10001}, 0x40004, 0x2, 0xcb8}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_RATE64={0xc, 0x4, 0x539f006f006f6a1d}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x5e1eb67ec07fd58e, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280060001400003000006000440000100000900010073797a30000000000900020073797a320000000014000000110001000000000a"], 0x78}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="450000090c38a3ad1360dc000000000000000000", @ANYRES32=r10, @ANYBLOB="46060900030705002400128009000100626f6e64000000001400028008000300050000000800040009000000"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040884}, 0x0) 554.331499ms ago: executing program 0 (id=1538): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x4) 550.949525ms ago: executing program 0 (id=1539): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x3, 0x850, &(0x7f00000012c0)={{0x12, 0x1, 0x310, 0x94, 0x13, 0x3a, 0x10, 0x403, 0xdc01, 0xf043, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83e, 0x3, 0x5, 0xb, 0x50, 0x7f, "", [{{0x9, 0x4, 0x3f, 0x5, 0x8, 0xfe, 0xe3, 0x93, 0xf, [], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x6, 0x6}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x5, 0xe, 0x5, [@generic={0x9a, 0x22, "ffa13ee8d8f9e074c5025fcaa848069d18d6d28e0672ed13a961a8290288f602774cf2b1beaba4c5f391f6fbde7b033db26e0ec61647dcfacf34823778131800dd11d96708d07458182130e47c1fd94a72774368468cbd11d216de253e0c59950f6ddd00a2099c26a2cc3846c599b71fee4a11a257122082c6b59d967a2e7fe0ba65748752f056beedb7008d3333cf41b1dcb5c34054ed6b"}, @generic={0xb7, 0x9, "6e5a2c467f86d883e72eba3d947bb3015268108ad69553e5f64c6c90234862e2e79506c60f6e7041b1053429778ec40e87f21935cb042c3be4b20dc8bdb752960b438c45006935f286d6329f0d1c74a4356ba7b499ce52c8132bb1a615ae458f0bfc7d34d9f5b3b12c711578e89f630fd47b0e622f221495730ed49e6a54b49cee2f1f9fafd9db3347e8902fdfc96da63432ac3fabf7e087ebd9d20f96bde30596f0afd9f07fd975191f1949551b3670900605f7a2"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x3, 0x9, 0x64}}, {{0x9, 0x5, 0x3, 0x1f, 0x400, 0x7f, 0x7, 0x7f, [@generic={0xfc, 0xc, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x7, 0x3, 0x9, [@generic={0x90, 0xa, "3350173d03121fff090c87b2e714168b0c0c7c5ac1e720d2f2e39380224c496acca4826690dd0f5b90268273f9807c89c1365b53829e992d2a14378863123bc21cbff33014b10f2a6d62b3da375db47fd6f19f0636ba34015588354c5df6d0babc0f1d10a70ca3d07a63e0951823f542fb6b6f762ca1a141ae2d97a23351134d67f92b969e8a3bf6d8ba0ca87cd0"}]}}, {{0x9, 0x5, 0xd, 0xd, 0x400, 0x40, 0x7, 0x5}}, {{0x9, 0x5, 0x2, 0x1c, 0x400, 0x6, 0x1, 0xd, [@generic={0xad, 0x10, "af9c76b42c9de3e2981777dc605e262891271189e6471929e752364c350ae431569747db4714ee0da6e7358db9d9b7d7f4b3e019b0136760540a3b624a1f7d539e8dfb86266d87c43748f32d04a7bfe0c6f171e2d6c45142fbb4d074afe7e551686f94c34f2405fc3254678a8cc8396cee79b8d7fb4fb27c40ed323f8e627d3b17d0a573c4cf267c79e3c594f9a6e00482204fb74302272be8ee2e1eee06e65b64a5c5cb06e0551c363ac4"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x30, 0x6}]}}]}}, {{0x9, 0x4, 0x38, 0x5, 0x7, 0xf1, 0xac, 0xf1, 0x6, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x80, 0x5, 0x7}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe8, 0x2}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x0, 0x9, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x6, 0x7, 0x45}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x3, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x1, 0x40}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x1, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3}]}}]}}, {{0x9, 0x4, 0x6f, 0x7, 0xd, 0xfd, 0x35, 0xb6, 0xa, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "990137db6e0d"}, {0x5, 0x24, 0x0, 0xcba}, {0xd, 0x24, 0xf, 0x1, 0x7a8c, 0x5, 0x8, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x2, 0x5, 0x8, 0x4f34, 0x3}]}], [{{0x9, 0x5, 0xe, 0x19, 0x20, 0x2, 0xd, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x82, 0x1000}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0x6, 0x1, [@generic={0x3e, 0x22, "00d4fcb91bdf329b966e15dbeb56edc4987738f0d279e92b452585b143b1eadcc4f70d4281e58bf63195a783379680465d287d49da59e1d22190b812"}, @generic={0x13, 0x30, "1d73157f4429965240100f8d8360032036"}]}}, {{0x9, 0x5, 0xe905dd239e6ef50c, 0x4, 0x200, 0x80, 0x7, 0x4, [@generic={0x9e, 0x7, "e2d3ca1b806297f332be260e2253f1c0650725fd27d868ddbc4f53fc770df06d516e286ed12f48ed205b2d55349a8fa0467bc1073a5eeeca61a7c2b4d5d9ba5fd88a854831cda92e5e9c074c9631d8d6909ade15336982e6740e62a901764fa8d87d7cd0dbe3cd3d15f3a957cdc139638572f738a1183360bfd7bc9ceb335a289155c7e44767aca392ef47f6a2045e0d39f6f31f304c643316043f40"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x4, 0x9, [@generic={0x96, 0x5, "a0f5936623cd305072bcd3bc436db77baf57d8d7077e0779fa0da488f178e245325323601ccb55c2a1750ac3e84612c043591c121ef6a4c987931ca32503b1d9f89f74dc02d1f08b30e4a605830763df3c4e354f3e23c325ffe13df0551c614f25be5c1247f8c479a180236e97a71cb945c550885902ddf59fbd00672bbf89f68eff4b848f3059a7def8ef023d15d0749e6193ba"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x101}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xfa, 0x6, 0x81}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x1, 0x79, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x3, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4a9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xf90a}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x3, 0x6, 0x0, [@generic={0x72, 0x3, "e311904466853a5929c8ebc9844e58efead06ae970e5ee03004e514ac52f1fa5f1cc63524673c7f582fc4f6789364999194367fc540902ea97e49a84b45692e26855c4ff143ce4677bcccb6cd3239f235ed0f6d13503494e3d93639b355b291ec59c3838fa32c65abfbcdcc2770ad29f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x80, 0x31, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x6b, 0x6, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x4, 0x3, 0xff, [@generic={0xef, 0x2, "f80e45737cb9dd82f05363d9dedb54cffdcf9c9dffa0acacaae6e1c1de4a90baab243147e0838a485f580b05db1ea0b0a814a82c7c3168a968a58071c0e26c4bd9ebb71debac4850bd953ffcb79248c04028188eeb8b8463a9c990d39cc1ca270681cae87f1eed03145f1291f3b69fba7ecce33ab6c3112a2fc3cb093fbe633f0514c67583911e8479bb06e9e5b7dc8887662905b23070911ba6908e30517c4bda70f9a87a4ae1bf49beef59e9c7025dcbc75fb43d72b48f97f78c5fa6662cec31764772442117118d0641a90c42618fc71eb7c1686a565e90148be6f417e860335c4df4e836443eba14a779a5"}]}}, {{0x9, 0x5, 0x1, 0xe, 0x0, 0x6, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001b40)={0xa, 0x6, 0x250, 0x1, 0x10, 0x7, 0x8, 0xd}, 0x1d, &(0x7f0000001b80)=ANY=[], 0x1, [{0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x3801}}]}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x11d}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b", 0x8e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1da}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f075660484", 0xe1}, {0x0}], 0x3}}], 0x2, 0x14042082) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 194.244717ms ago: executing program 1 (id=1540): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r0, 0xb6}, &(0x7f00000000c0)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r0, 0x7, 0x20}, &(0x7f0000000140)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r0, 0x7, 0x20}, &(0x7f0000000140)=0xc) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0xff, @multicast1, 0x4e20, 0x1, 'lblcr\x00', 0x8, 0x80000001, 0x6c}, {@loopback, 0x4e24, 0x12000, 0xff, 0x4, 0x7}}, 0x44) syz_open_dev$sndctrl(&(0x7f0000000280), 0xd222, 0x40000) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0xd222, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000002c0)={0x9, 0x1, 0x2, 0x86, 'syz0\x00', 0x8}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000300)={0x3, 0xfff8, 0x1000, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000300)={0x3, 0xfff8, 0x1000, 0x2}, 0x8) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xc1, 0x0, 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername(r1, &(0x7f00000003c0)=@nl, &(0x7f0000000440)=0x80) (async) getpeername(r1, &(0x7f00000003c0)=@nl, &(0x7f0000000440)=0x80) io_setup(0x7, &(0x7f0000000480)=0x0) r6 = eventfd(0x7f) fcntl$dupfd(r3, 0x406, r2) (async) r7 = fcntl$dupfd(r3, 0x406, r2) io_submit(r5, 0x2, &(0x7f0000000700)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f00000004c0)="931c97cebfa7fb1b72277af8f5c0cf77dd95b80327c80e4b696c529a84bda0241bc32a41752b5d0edfde88bb3fe2e937b7616ade9f2c448e6d8668c43c934a57ad9dbb52b6b99da9e6c08332c2c121b089e9da7b137a114f47d66a49c40c179b89f08f37ceb4910c72a78cc89b73eb86a74af78c21235e5fa98426618d331a979fa7d3817be1c2f589fda1e9b90777c793bac93043108d1d7d6765bb36a82b68547572dd5b74ad5f647538494f2536aebe0f02f835b17e2272b82eb0635e0d62f70465e588d34c239b5828855f19dcbb416396a2e29229bb46b6ef49", 0xdc, 0x6, 0x0, 0x1, r6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x9, r7, &(0x7f0000000600)="7a4dca11669bf5c3cbc49af177a3af9fec891fd1dede97092ae497588b335b55e4c8a9ce6d5f9860f39a78aa2e95bb0b57725d16060a5f6ee4dae60cd60e8e11241fd78293581a136fa797ba9c81e13b5f05f445c4430bc3f92b74ae79a6bcd93a3ce4c83dc97356764ac0512a724d97689ff7d22d692c6dfbac00901261c03288b6ece563f8", 0x86, 0xffffffffffffffff, 0x0, 0x2, r3}]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3c}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x1) (async) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3c}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x1) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000cc0)={&(0x7f0000000880)=0x7, 0x2, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], &(0x7f0000000c80)}) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000cc0)={&(0x7f0000000880)=0x7, 0x2, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], &(0x7f0000000c80)}) socket$l2tp(0x2, 0x2, 0x73) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r9, &(0x7f0000000d00)={0x2, 0x0, @broadcast}, &(0x7f0000000d40)=0x10) r10 = accept4$bt_l2cap(r7, &(0x7f0000002c80), &(0x7f0000002cc0)=0xe, 0x800) sendmmsg$sock(r4, &(0x7f0000004140)=[{{&(0x7f0000000d80)=@l2tp6={0xa, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5fb2, 0x1e5b}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000e00)="cd876f53878a31c31c2f1f62d38d387db22f6775d01de150fc57da7a7dab9256154b8a2b03ff56937324d366ca90188614775997a15bc14f5b8fb97125c1ab475d5e4e0dd64d08bd0ed5df490f8866e66846c91a25359d01403ad9b4ab9a430ea6732c8dc10bc059874a3ebfb5e91e0e033b2c5f9603709ae2399339005d2cd150493f50be4042ce20c7b7704367c2a2fa4c167d", 0x94}, {&(0x7f0000000ec0)="d6c2cda778aea391e7c3c011b86fb7671176917187a4633068f837a22e60eaf0bed16ffcdbf51451652a4f6e881c2960db9d3757e9c9db7661f42697931b4f20228c7b49481af6269b12cc0a942ed8cefa7efa377755f349bf9df49b0d3a786084da17fff2f64df1b73fc7b2bb8528826781945e66faf129cd1761e08967f732c87eb8b1019e32922cc376727338ca4856fe75fe9653b8e7771e5214fe817a4a17e59d9720fe332f105942e185049c08c2df6df17aa3ad78972dc056a170e6d72b6ac91da4e6194f0ea793205ada52d39433369022bace95f7f92aa4aa", 0xdd}, {&(0x7f0000000fc0)="f0a2f073e51f3486ced3e01357ddd5d1e3d7ecf999ae9f8e22cbe8aeaffd07a1b94af49ef58704995aad056e53e6a808f43dbf4a91585d3ca21d4d1c37f0f5f28eb3dd1ed546998ab154f33704bc68a36e0b53811027b4710d0398c280f6b3d1e940faebccb8510238db8a15eaf9c945253dd92a535758055b88f73808aaaf088b384df609337753af44ff7e92755a13f618f76d0fa5f765338c3363741e1bd56c99f8d7bf8e91d3e9cab5b864e5ef92376d1733bb9e19748159c19b20", 0xbd}, {&(0x7f0000001080)="b8591a750e1768876db3932d99c38daa32811c888da0575cf0b9b559252d8612c612b756be849941451f9c14de2ca1aaf45b8a2cf0311f97013d0e09f178bca2d0ec0db00ecd4c24aa428355a8a9bf07301476563d7538bb9b462c78b4b29f252c73905d1e5a5ae6eb801af585fc05c5b08f293ead7eedeb01a0771f938884aa482e1673f62c9b6be21549dadd43b04e7ad9f29cd4be65a78eed8152ce072d0286a89e8c816e5485c15742e980c13881f2b1f76b2e337af3fc84f2076d31d69f07f2e552d8f7e840c91c99afa8c012c07f1ca9d49a6d64e04be6e72ede7d6519e46615d36223f75c8f83fabb7f9e7ef6", 0xf0}, {&(0x7f0000001180)="e1a09b05f2c8106148d3b305121fb3b6604db1c5b4864e6356caf82a966eb29092cb02602724624fa168122412854a810f7edb920f9cb86c71de4eb0ee945b711e51afad6758a7ff257bd55f6928ac0c8bca23c44c5b77b08242bbc112a146eaa404c6b4c442fd5782d622f3d6ecceac965470a54814dd28b27c51ba61059a650a00cbd3f213acd7bc656cd4313079accd25c6cdfb9295c1d1fae55c19de7fbf392ec5c193640cbaf4435000a1f16a4cd8bb0844347b6e00d930a4d910d972a1383a20fd7651a905f2e68862f2cbe74fedf232ccd5a002f345ee163acbddc73d77aa36338b5e1638d1a09db3a1745c3b7e", 0xf1}, {&(0x7f0000001280)="15353f1eebea4620d42438e725fa1694045f28457bb1337068366d8ebe9af29d3dce52254c429cf92a50f8dd0ab8a6b6213d7e866c007a00b5cebba999c543550f6c24e1e216c2251a2a7db890b57540c59cd01be08ff9241c878c3231ade28397310d60640b6b6796d740e0c72ae49745a51c13d1dedeab796bbcbbf8bb6d4d2278d52bf14663cd265809563937accd9501ca364ddf03638173bcf1238f990d1811b0c0b5e90716c88cbaa69dff445ece39a19fb24ab7882c05ec2fcd077ae96cd6e862629e025831b667c0894df3c4df7aa7e6b58bcfc905846acfc0929507e9f76b9f8befec4e1281f525fc6bdf1dce75182186ce72", 0xf7}, {&(0x7f0000001380)="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", 0xfa}, {&(0x7f0000001480)="1d7f8c2ec34ac339dbb06436ea1c6c2b8b9f02b92d69f965d907235b9c336615f2dd98c73fb51881b456f4038fc290cc2823191ffbff8991c5edff6195f84f9fdd8049681ccbefbeea869cb40648a9b8e41ac85aacf5ed352c459676a7cdcde0b4aedc0ef7ab77fe3f58e0133f3d078050014267654a3148b232f98f133eceef7627054d3708c56aefa39ecddf98d0113acd7f279959d42f11d69c1a757358cabf43d5d59614ca4f2b029666a98d562884a0d02969cf4b558e583b694ecc0ec1ac7883", 0xc3}, {&(0x7f0000001580)="2556d432742075e1a7f2de4880555f7055580835d65abb01c0188435e72ee74ca1e1dfb701951fb09c51b8314e569c35c1c8883ea3f4f0396669c7a48b910c0469997e98cb5684110b0d8ca93932cbc28e2108155103e934d3f557908b328734e4e3d2afef85bd3a36be47a84458518ca9dc612ffedab81b9259d2ad8ee9df8e94907bbd599eec84", 0x88}, {&(0x7f0000001640)="5f766e6587ab0d8d609ebe3bd5ba6b3bde0d038f503b8f4ccded878cbc1eb90d2f15d61e342b5284420f720033555027cec507d0f999ce9e0ed50a56502883519055de0a291daa04b164f8615db20d125703cadd9bfabcaf4facca4aa286924b92bc65199d3eeef02056e9270909323204df20441d7c1d26d8f0c704cedaff596bf2f1e1e33afaa17cc5ca548df2247928d62183d860ee769c3e4838850b3532b03135b5e1683654647f7828221b12a42a0b", 0xb2}], 0xa, &(0x7f00000017c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x84}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}}, {{&(0x7f0000001840)=@sco, 0x80, &(0x7f0000002b40)=[{&(0x7f00000018c0)='B', 0x1}, {&(0x7f0000001900)="851fdb4eff74e5563f9d20ca7f1c661bf0230e3cdd5abe42cc0f03470a436e4c7fe5b51ed1583dbe61c328739603ba6bf41cac108b81a3e348021d3e8d39b928c186bdf29788dba800450a3d983b6c88b614966f288abbf2d21196a5f7558b37b6dfa978469f3590007e7441edc007598b5ebc9e6f6b02a5ef06039bf872aaf9e80731a1656b400b169627db", 0x8c}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="1829a229345adbcaf5eb8741894c7eec49c58a28211f08e8de74a5ded5f4a1465622e0422585b1e07381cc0c6c636c02b2fd7d53461a713d0f069d530d1e41d6df3b7a09e7173554b1481165dc3a2b585f87931d9604e678bff90d2a655f064a9ff2c677d6a4b502c9859175fd5e8e4cbbaafb9319afbba6da3bc0ebd209f98cde257d7a0a5f7dc1ec386529e0d8ee05408e2e4694b0e3eec7dc41789acf64181855a3dadbe2461fa301eb73d5b9f7d7df15305a496233d612a2", 0xba}, {&(0x7f0000002a80)="7a6da88364eab2acccbb99e36e9887d0d5c16020516d1aa459ac", 0x1a}, {&(0x7f0000002ac0)="93e32c93ec7644c2eb79746be642b2b0f2a29d07fb813ae8959f0426d6cf3af8964c615f22056099faf83c8a21a3b5d2c6083c4cba1e779215f1f225687cff", 0x3f}, {&(0x7f0000002b00)="c1463f", 0x3}], 0x7, &(0x7f0000002bc0)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff27b}}, @mark={{0x14, 0x1, 0x24, 0x140000}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @mark={{0x14}}], 0xc0}}, {{&(0x7f0000002d00)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x0, 0x0, 0x4, 0x2, {0xa, 0x4e21, 0x8000, @private2, 0xfffffffe}}}, 0x80, 0xfffffffffffffffe}}, {{&(0x7f0000002d80)=@caif=@dbg={0x25, 0xfc, 0xf}, 0x80, &(0x7f0000004080)=[{&(0x7f0000002e00)="0c07d52926de5237caf9ad74b28dd803c3eea9f63c13e9e9a8480e35dcb2e0d758a5a999a07f422716be8825584ff9560e9730d06cdddf8fc6eee07f8b8d40f741ee0aad18c7af33f56b10e09389bfc229089d06d6a9be9cfce293687003d1da37dddbf4623dfd4298c66ea6daf24d381019814539dee1b2e3d90842018c0ca22e7c1d2ef9d469535ca1c7121fdd82f484c5eef283e06a0a371ee400815857f5825de15c670d69c0a51dde783bd841d27ddcf6ab514fbefbc46a5258a07f1c3526fe36a7f3cc35f249bf19cd8c4ec5", 0xcf}, {&(0x7f0000002f00)="4836986a8a438cbf64d58f6106bb3949bcce7514be68fa84845a19b46d2f220f97aef32461906254788050ffb5dfc8975c561108be8342946b98ccd7fad60bcdf2a732206b305c4773b7d42f4fc53b291789ce2b192977d68ea2e5bfa0a7b39a1d446905985a7cb99863089f6e9c58f90b058a63b4bea4f74929e2bf63529af5f2242786703298df1ebdad4e23a331c2906edb980adfed6afd37c21d220919cac107884fb44105833fe311c03500e902bb1e4c355f1c9a78790c68d75b479bc4c87e8e1cdac9ed5699039d418137c64ace2b3e3efee29d4c10d725ead4564fa160a2a2a66ab786b9", 0xe8}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="6764245ad599ff37352b8b052699f3446863e02272205fd8b23c2afb261459e6bab8cd1da0c983e4b75d8fec7160f94d98fcde8b77838edd0c379d7dc631222fdec7c6d8e0a1199c9cd6bde4e3d146f44872873150733ccc284bf4931e0c9358021d2bb8a25b5d2e90a206cd787535e3e3f6bac9d2fc", 0x76}], 0x4, &(0x7f00000040c0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x2e4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x60}}], 0x4, 0xb8536b7649d316c5) ioctl$SNDRV_PCM_IOCTL_LINK(r7, 0x40044160, &(0x7f0000004240)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000042c0)={'gre0\x00', &(0x7f0000004280)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0xb, 0x318, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x66, 0x0, 0x6, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}]}}}}}) sendmsg$sock(r9, &(0x7f0000004480)={&(0x7f0000004300)=@xdp={0x2c, 0x1, r11, 0x26}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004380)="e2ecb1ac83d5", 0x6}, {&(0x7f00000043c0)="4ce49a22c55ff110c7e5351bfaa66e5dca6631916d7c3064bba5815ad033ef979db684", 0x23}], 0x2, &(0x7f0000004440)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}, 0x20000810) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000044c0)={{0x8, 0x4, 0x1010, 0x80000000, 'syz0\x00', 0x1}, 0x0, [0x7, 0x7fffffffffffffff, 0x5, 0x4, 0x39, 0x5, 0x3ff, 0x5677, 0x1, 0x1, 0x2, 0x6, 0xe, 0x81, 0x0, 0x10001, 0x8000000000000001, 0x8, 0x33, 0x9, 0x7fffffff, 0xa03, 0x1, 0x3, 0x4, 0x4, 0x4, 0xfffffffffffffff5, 0x8, 0x8, 0xbf4, 0x7fff, 0xa, 0x8, 0x7f, 0x80000000, 0x0, 0x8000, 0xd, 0x0, 0xc18d, 0x0, 0x100000001, 0x7, 0x2, 0x100000001, 0x9, 0x400, 0x3, 0xfffffffffffffff9, 0xffffffff, 0x191f, 0x6, 0x8000, 0x5, 0xfffffffffffffffa, 0x4, 0x3ff, 0x1000, 0x100, 0x3a6e, 0x2, 0x5, 0x2, 0x9, 0x7f, 0x6, 0x4, 0x5, 0x9, 0x0, 0xff, 0x2, 0x1, 0x7, 0x2d95, 0xfff, 0xfffffffffffffc00, 0xc82e, 0x3, 0x3, 0x0, 0x1, 0x2, 0x262, 0x0, 0x8, 0x2, 0x5, 0x7000000000000, 0x1, 0x904a, 0x9b81, 0x2, 0x6cd1, 0x4, 0x3, 0x9, 0x2b4a, 0x10, 0xcd9, 0xe, 0x63, 0x0, 0x4da7, 0x5, 0x401, 0x87, 0x0, 0x6, 0x2, 0x3, 0x0, 0x1, 0x3, 0x7f, 0x40, 0x6736, 0x3, 0x0, 0x2, 0x7, 0xfbc3, 0x4, 0x401, 0x80000000, 0xc, 0xbaf]}) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) 193.632035ms ago: executing program 5 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="07279f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00,L\t\x00\x00\f\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffed7, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x44910}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x13c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x104, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8, 0x0, 0x7}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x539}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xc2, 0xa, "498f68986b25d417a9905a71190a1b7894399274677cfe4d1e1bf8c2b1106961d7132bea026e580a6432c747748e7a3295cfcf1f60a8d6234312ce07f6634cc37a839fbecece0354dbfe4c34aae3f3262f9c6159e674892e5b9f3c9a295c5a92e89aa24398ac4dd44328cde9c812b573c50e09397f5189cf48aca3fbef169468a515e3c17dce29277804a6fe5df64c6c7cdde0b15291a13174f8006fa62eb1dbf91c439107be5436e16f7b58eaa52805b19f82a924fece2f6ce27d929c5e"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xfffa}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 124.127715ms ago: executing program 6 (id=1542): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4079, 0xffffffffffffffff, 0x2}) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r0, 0x79000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/2) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async, rerun: 32) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) (async, rerun: 32) r2 = geteuid() quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r2, &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r2, &(0x7f0000000140)={0x6, 0x7fffffff}) (async) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000180)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x80b0ad3dc2e3fd69}) (async) r4 = pidfd_getfd(r3, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x6, 0x7, 0x3fb, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)={r5, 0x1ff, 0x52, "c55938cb31c619c6ed15c68731089e0b6905fd17857865d256c1d3b447da7841ff79cb8c7624a6fe7356e0866dbc83da7096fb17450a0c1197ad324324a5d60a085ebb14fc691cc35740f5c3fb86cc67410b"}, 0x5a) (async) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x3) (async) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) r6 = syz_open_dev$evdev(&(0x7f00000003c0), 0xaa, 0x200000) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000400)=0x5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x1fd, 0x2, 0x9000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) write$P9_RREMOVE(r0, &(0x7f0000000480)={0x7, 0x7b, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000005c0)=0x0) (async) r9 = epoll_create(0x2) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r3, &(0x7f0000000600)={r9, 0xffffffffffffffff, 0xae35}) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000640)=0x323c) 122.099973ms ago: executing program 5 (id=1543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000080)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002c0001"], 0x28}], 0x1}, 0x0) 63.493852ms ago: executing program 5 (id=1544): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="d84bf72a7efff867c1467656a91e7c6b15db702255fa736305f6f1e41e7605152be14f0a75d4ea44ae5a480c2d74fe82e390308abc91b2324227197832e06938a00959f018973f3c21ced26648246b40a9d2baae09594872603bff76b6d598560566ed421f42c116c607aaee93b59dc9f203e3fbb8f25b534348fcbacb967bb653249fdeb85f8c122f19f37f02630ada56d592598ef4dfcb0e69b0123cafc15b180155eca442a3f3d9304e402051602e239314b7f9f99b2d109b", 0xba}], 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x3e1b00, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000180)) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x200200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000200)={0x2, r0, 0x1}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x1, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000340)={0x2}) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000380)={0xc, @capture={0x1000, 0x1, {0x8000, 0x7}, 0x7, 0x9}}) r6 = openat(r3, &(0x7f0000000480)='./file0\x00', 0x20200, 0x1c) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000004c0)) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000540)={0x0, 0x4}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000c45}, 0x800) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000700), 0x4) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ppoll(&(0x7f0000000740)=[{r0, 0xd28a}, {r2, 0x87b1}], 0x2, &(0x7f00000007c0)={r10, r11+60000000}, &(0x7f0000000800)={[0x5]}, 0x8) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r12, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0xfffffff3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(r13, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r12, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1b}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3753, 0x57}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000ac0)={0x7fffffff, 0x800}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz1\x00', 0x200002, 0x0) connect$inet(r3, &(0x7f0000000b40)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000b80)) 62.966009ms ago: executing program 1 (id=1545): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x6a83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) write$binfmt_misc(r1, &(0x7f00000001c0)="839d3a6991d46dbd2ba8", 0xa) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x3, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f96400", [0x800]}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x10000, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x4, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x45, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) epoll_create1(0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r5, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000040)) openat$cgroup_procs(r6, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_audit(0x10, 0x3, 0x9) 62.658937ms ago: executing program 6 (id=1546): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x4, 0x80003) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x93f5af68c803ddf9}, 0x18040015) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x1) r5 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="00022cbd7000fcdbdf250100000014000180080006007772720008000b0073697000080005000100008008000500000000003400038005000600000000000000060000000000000000000000ffffe000000214000600fe800000000000000000000000000008080004000002000008000500050000000800040002000000080006000d0000000800040005000000"], 0x94}, 0x1, 0x0, 0x0, 0x4004011}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r5, &(0x7f00000000c0)={0x1d, r8, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x80800, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000068e4000000200400fdffffff02000000040000000400519f120400"], 0x1c}}, 0x20000014) splice(r9, &(0x7f00000001c0)=0x4, r2, &(0x7f0000000300), 0x4, 0x2) r11 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r13, 0x4018aebd, &(0x7f0000000040)={0x1}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x20000080) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010041fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fanotify_init(0x8, 0x1) 0s ago: executing program 5 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xdff2}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) (async) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) (async) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) (async) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) (async) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='rd_pages=8', 0xa) (async) close(r2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x1c, 0x23, 0x409, 0x70bd25, 0x25dfdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) (async) write(r3, &(0x7f0000000c00)='1', 0x1) (async) close(r3) (async) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) (async) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): lly beyond EOD, truncated [ 149.828619][ T42] audit: type=1400 audit(1785628167.423:1017): avc: denied { relabelto } for pid=8691 comm="syz.0.786" name="189" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 149.831166][ T8694] loop5: p1 size 100663296 extends beyond EOD, [ 149.839198][ T42] audit: type=1400 audit(1785628167.423:1018): avc: denied { associate } for pid=8691 comm="syz.0.786" name="189" dev="tmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 149.846849][ T8694] truncated [ 149.868392][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 149.869267][ T8694] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 149.904556][ T8706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8706 comm=syz.0.791 [ 149.931100][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 149.949166][ T8701] Dev loop5: unable to read RDB block 7 [ 149.952992][ T8701] loop5: AHDI p1 p3 p4 [ 149.954808][ T8701] loop5: partition table partially beyond EOD, truncated [ 149.959136][ T8701] loop5: p1 size 100663296 extends beyond EOD, truncated [ 149.978117][ T8701] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 150.091427][ T7948] udevd[7948]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.091878][ T7823] udevd[7823]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.095341][ T8726] netlink: 52 bytes leftover after parsing attributes in process `syz.4.798'. [ 150.131077][ T8728] loop4: detected capacity change from 0 to 7 [ 150.141557][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 150.148052][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.151718][ C0] buffer_io_error: 321 callbacks suppressed [ 150.151729][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.161125][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.164859][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.169428][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.172841][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.175943][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.179227][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.183424][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.186618][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.191231][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.195313][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 150.284945][ T5848] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 150.325727][ T8742] CIFS: Attempting to mount //127.0.0.1/share [ 150.335486][ T8742] CIFS: VFS: Error connecting to socket. Aborting operation. [ 150.338823][ T8742] CIFS: VFS: cifs_mount failed w/return code = -111 [ 150.440911][ T5848] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 150.444987][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.446486][ T41] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 150.449925][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.456143][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.460415][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.464333][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.469047][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.473185][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.477249][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.481696][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.485617][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.496331][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.500892][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.504756][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.508939][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.514005][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.518757][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.523099][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.528200][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.532051][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.535931][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.540530][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.544304][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.548189][ T5848] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.552648][ T5848] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.558425][ T5848] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 150.562096][ T5848] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 150.565470][ T5848] usb 6-1: Product: syz [ 150.567394][ T5848] usb 6-1: Manufacturer: syz [ 150.569384][ T5848] usb 6-1: SerialNumber: syz [ 150.577284][ T5848] usb 6-1: config 0 descriptor?? [ 150.595502][ T5848] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 150.607585][ T8759] fuse: Bad value for 'fd' [ 150.630060][ T41] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 150.636896][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.652830][ T41] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 150.675482][ T41] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 150.683236][ T41] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw [ 150.800994][ T10] usb 6-1: USB disconnect, device number 17 [ 150.813304][ T10] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 150.849142][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.852571][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.882858][ T41] usb 8-1: emi26_load_firmware - request_firmware() failed [ 150.885782][ T41] usb 8-1: emi26_load_firmware - error loading firmware: error = -12 [ 150.888987][ T41] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 150.898170][ T41] usb 8-1: USB disconnect, device number 12 [ 151.553448][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.815'. [ 151.669121][ T8780] netlink: 596 bytes leftover after parsing attributes in process `syz.0.817'. [ 151.721244][ T8787] input: syz0 as /devices/virtual/input/input21 [ 152.209441][ T8799] ip6gre1: entered promiscuous mode [ 152.211079][ T8799] ip6gre1: entered allmulticast mode [ 152.339236][ T8802] program syz.3.826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.347105][ T8803] overlayfs: failed to resolve './file1': -2 [ 152.402690][ T5758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.420267][ T5758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.425908][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.432126][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.435125][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.554993][ T8825] loop5: detected capacity change from 0 to 7 [ 152.558347][ T8825] loop5: p3 p4 [ 152.559507][ T8825] loop5: partition table partially beyond EOD, truncated [ 152.597718][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 152.597736][ T42] audit: type=1400 audit(1785628170.196:1037): avc: denied { create } for pid=8830 comm="syz.0.834" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.619491][ T8832] netlink: 'syz.0.834': attribute type 21 has an invalid length. [ 152.623642][ T8832] netlink: 128 bytes leftover after parsing attributes in process `syz.0.834'. [ 152.630591][ T42] audit: type=1400 audit(1785628170.216:1038): avc: denied { read write } for pid=8830 comm="syz.0.834" name="file0" dev="tmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.640065][ T42] audit: type=1400 audit(1785628170.216:1039): avc: denied { open } for pid=8830 comm="syz.0.834" path="/206/file0" dev="tmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.649151][ T42] audit: type=1400 audit(1785628170.216:1040): avc: denied { ioctl } for pid=8830 comm="syz.0.834" path="/206/file0" dev="tmpfs" ino=1120 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.667411][ T8832] netlink: 'syz.0.834': attribute type 4 has an invalid length. [ 152.669962][ T8832] netlink: 'syz.0.834': attribute type 5 has an invalid length. [ 152.672378][ T8832] netlink: 3 bytes leftover after parsing attributes in process `syz.0.834'. [ 152.754114][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.837'. [ 152.775773][ T8806] vcan0 speed is unknown, defaulting to 1000 [ 152.853254][ T42] audit: type=1400 audit(1785628170.447:1041): avc: denied { read } for pid=8851 comm="syz.0.839" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 152.865679][ T42] audit: type=1400 audit(1785628170.447:1042): avc: denied { open } for pid=8851 comm="syz.0.839" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 152.975650][ T34] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 153.125358][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 153.128854][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.129309][ T8871] No control pipe specified [ 153.135039][ T34] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 153.138539][ T34] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 153.142060][ T34] usb 6-1: config 14 has no interface number 0 [ 153.147563][ T34] usb 6-1: config 14 has no interface number 1 [ 153.149983][ T34] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 153.156455][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 153.157159][ C1] sl0: transmit timed out, driver error? [ 153.160092][ T34] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 153.167022][ T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 153.169990][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.171072][ T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 153.175653][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.177485][ T34] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 153.179286][ T8806] bridge_slave_0: entered allmulticast mode [ 153.182698][ T34] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.186038][ T8806] bridge_slave_0: entered promiscuous mode [ 153.188854][ T34] usb 6-1: config 14 interface 57 has no altsetting 0 [ 153.188867][ T34] usb 6-1: config 14 interface 228 has no altsetting 0 [ 153.190460][ T34] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 153.199417][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.204469][ T34] usb 6-1: Product: syz [ 153.205690][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.205833][ T34] usb 6-1: Manufacturer: syz [ 153.212605][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.213767][ T34] usb 6-1: SerialNumber: syz [ 153.215280][ T8806] bridge_slave_1: entered allmulticast mode [ 153.224503][ T8806] bridge_slave_1: entered promiscuous mode [ 153.269261][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.290603][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.292575][ T8892] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 153.292575][ T8892] program syz.3.847 not setting count and/or reply_len properly [ 153.325333][ T8806] team0: Port device team_slave_0 added [ 153.335173][ T8806] team0: Port device team_slave_1 added [ 153.363200][ T42] audit: type=1400 audit(1785628170.957:1043): avc: denied { bind } for pid=8894 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.370760][ T42] audit: type=1400 audit(1785628170.957:1044): avc: denied { name_bind } for pid=8894 comm="syz.3.848" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 153.373353][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.377450][ T42] audit: type=1400 audit(1785628170.957:1045): avc: denied { node_bind } for pid=8894 comm="syz.3.848" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 153.385628][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.388191][ T7948] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 153.405131][ T8806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.413295][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.420377][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.428809][ T8806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.437649][ T42] audit: type=1400 audit(1785628171.037:1046): avc: denied { bind } for pid=8841 comm="syz.1.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.454541][ T8806] hsr_slave_0: entered promiscuous mode [ 153.457387][ T8806] hsr_slave_1: entered promiscuous mode [ 153.459905][ T8806] debugfs: 'hsr0' already exists in 'hsr' [ 153.462055][ T8806] Cannot create hsr debugfs directory [ 153.497820][ T8900] MTRR 2 not used [ 153.596882][ T8806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.611670][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.615408][ T8806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.621120][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.624696][ T8806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.632232][ T8907] netlink: 'syz.0.851': attribute type 5 has an invalid length. [ 153.632387][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.639267][ T7948] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 153.639991][ T8806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.649104][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.653805][ T34] legousbtower 6-1:14.57: interrupt endpoints not found [ 153.716974][ T8917] block2mtd: illegal erase size [ 153.747323][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.761015][ T8806] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.769827][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.772975][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.781980][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.785100][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.827858][ T8806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.864422][ T34] legousbtower 6-1:14.228: get version request failed: -71 [ 153.870304][ T34] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 153.894816][ T34] usb 6-1: USB disconnect, device number 18 [ 153.976114][ T8925] kvm: pic: level sensitive irq not supported [ 154.049783][ T8939] overlay: Unknown parameter 'smackfsroot' [ 154.140419][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.360062][ T8806] veth0_vlan: entered promiscuous mode [ 154.390472][ T8806] veth1_vlan: entered promiscuous mode [ 154.425662][ T8806] veth0_macvtap: entered promiscuous mode [ 154.433439][ T8806] veth1_macvtap: entered promiscuous mode [ 154.436442][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.439560][ C0] bridge0: topology change detected, propagating [ 154.443549][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.446695][ C0] bridge0: topology change detected, propagating [ 154.449807][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.475251][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.523030][ T5758] Bluetooth: hci1: command tx timeout [ 154.577632][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.579013][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.588161][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.588252][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.608854][ T8982] af_packet: tpacket_rcv: packet too big, clamped from 22 to 4294967272. macoff=96 [ 154.612546][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.612554][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.612569][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.612582][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.663415][ T8983] vlan1: entered allmulticast mode [ 154.725826][ T8988] __nla_validate_parse: 6 callbacks suppressed [ 154.725838][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'. [ 154.877775][ T9005] netlink: 750 bytes leftover after parsing attributes in process `syz.5.873'. [ 154.936963][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.875'. [ 154.940825][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.875'. [ 154.947506][ T9011] geneve0: entered promiscuous mode [ 155.087460][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 155.111419][ T6700] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.261385][ T6700] usb 5-1: Using ep0 maxpacket: 8 [ 155.265370][ T6700] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 155.268837][ T6700] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 155.273564][ T6700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.277841][ T6700] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 155.282941][ T6700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 155.287001][ T6700] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.292338][ T6700] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.296219][ T6700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.505737][ T6700] usb 5-1: GET_CAPABILITIES returned 0 [ 155.508208][ T6700] usbtmc 5-1:16.0: can't read capabilities [ 155.653486][ T9035] xt_socket: unknown flags 0x48 [ 155.800384][ T9039] macsec0: entered promiscuous mode [ 155.803082][ T9039] macsec0: entered allmulticast mode [ 155.805360][ T9039] veth1_macvtap: entered allmulticast mode [ 156.152560][ T9066] can: request_module (can-proto-0) failed. [ 156.155495][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 156.160164][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 156.187651][ T9068] can: request_module (can-proto-0) failed. [ 156.324449][ T9079] xt_connbytes: Forcing CT accounting to be enabled [ 156.398722][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 156.403216][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 156.407684][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 156.579441][ T9107] input: syz1 as /devices/virtual/input/input23 [ 156.591713][ T5758] Bluetooth: hci1: command tx timeout [ 156.680437][ T6700] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 156.786974][ T5758] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 156.790619][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.793762][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.833084][ T6700] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.836313][ T6700] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 156.839122][ T6700] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 156.842814][ T6700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.847238][ T6700] usb 6-1: config 0 descriptor?? [ 156.851519][ T6700] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 156.854181][ T6700] dvb-usb: bulk message failed: -22 (3/0) [ 156.859428][ T6700] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 156.862781][ T6700] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 156.865077][ T6700] usb 6-1: media controller created [ 156.867623][ T6700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.878250][ T6700] dvb-usb: bulk message failed: -22 (6/0) [ 156.880330][ T6700] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 156.884235][ T6700] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input24 [ 156.891458][ T6700] dvb-usb: schedule remote query interval to 150 msecs. [ 156.894468][ T6700] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 156.979956][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 157.040811][ T41] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 157.050136][ T5826] dvb-usb: bulk message failed: -22 (1/0) [ 157.052007][ T5826] dvb-usb: error while querying for an remote control event. [ 157.056037][ T5844] usb 6-1: USB disconnect, device number 19 [ 157.075726][ T5844] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 157.133580][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.138593][ T34] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 157.141881][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.145149][ T34] usb 10-1: Product: syz [ 157.146525][ T34] usb 10-1: Manufacturer: syz [ 157.148050][ T34] usb 10-1: SerialNumber: syz [ 157.155512][ T34] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 157.158850][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 87 [ 157.162837][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 157.167204][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 157.170682][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 82 [ 157.173948][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 157.177154][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 157.180065][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 85 [ 157.183313][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 5 [ 157.187337][ T34] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 157.191463][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 157.194817][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 157.198047][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 157.201318][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 4 [ 157.204497][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 86 [ 157.207610][ T34] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 157.212084][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.212286][ T34] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 157.215555][ T41] usb 8-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 157.224888][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.312029][ T41] msi2500 8-1:1.0: Registered as swradio24 [ 157.314589][ T41] msi2500 8-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 157.447938][ T5826] usb 8-1: USB disconnect, device number 13 [ 157.505361][ T34] usb 10-1: USB disconnect, device number 2 [ 157.512826][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 157.522872][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 157.526488][ T34] keyspan 10-1:1.0: device disconnected [ 157.759920][ T34] usb 5-1: USB disconnect, device number 14 [ 158.063962][ T9156] 9pnet_virtio: no channels available for device 127.0.0.1 [ 158.089832][ T9160] loop2: detected capacity change from 0 to 3 [ 158.107659][ T9160] ldm_validate_privheads(): Disk read failed. [ 158.110225][ T9160] Dev loop2: unable to read RDB block 3 [ 158.112879][ T9160] loop2: unable to read partition table [ 158.115329][ T9160] loop2: partition table beyond EOD, truncated [ 158.120906][ T9160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.156799][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 158.156817][ T42] audit: type=1400 audit(1785628175.751:1059): avc: denied { mounton } for pid=9164 comm="syz.3.919" path="/file0" dev="ramfs" ino=31126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 158.304527][ T42] audit: type=1400 audit(1785628175.901:1060): avc: denied { shutdown } for pid=9173 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.452864][ T42] audit: type=1400 audit(1785628176.051:1061): avc: denied { bind } for pid=9182 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.471194][ T42] audit: type=1400 audit(1785628176.051:1062): avc: denied { accept } for pid=9182 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.487823][ T42] audit: type=1400 audit(1785628176.061:1063): avc: denied { write } for pid=9185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.522542][ T42] audit: type=1400 audit(1785628176.121:1064): avc: denied { write } for pid=9193 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.645301][ T42] audit: type=1400 audit(1785628176.241:1065): avc: denied { write } for pid=9198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.661645][ T9204] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 158.668868][ T5758] Bluetooth: hci1: command tx timeout [ 158.700371][ T42] audit: type=1400 audit(1785628176.291:1066): avc: denied { write } for pid=9205 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.728516][ T9204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.994980][ T42] audit: type=1400 audit(1785628176.591:1067): avc: denied { write } for pid=9229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.048755][ T5869] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 159.066481][ T42] audit: type=1400 audit(1785628176.661:1068): avc: denied { write } for pid=9234 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.145441][ T9241] trusted_key: encrypted_key: insufficient parameters specified [ 159.200375][ T5869] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.209676][ T5869] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.229710][ T5869] usb 10-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 159.233688][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.237097][ T5869] usb 10-1: Product: syz [ 159.241174][ T5869] usb 10-1: Manufacturer: syz [ 159.243101][ T5869] usb 10-1: SerialNumber: syz [ 159.262446][ T5869] kl5kusb105 10-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 159.273200][ T5869] usb 10-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 159.488226][ T9275] CacheFiles: No cache directory specified [ 159.710286][ T9281] tmpfs: Group quota block hardlimit too large. [ 159.791723][ T9284] comedi comedi2: board detection failed [ 159.819804][ T41] usb 10-1: USB disconnect, device number 3 [ 159.832672][ T41] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 159.848663][ T41] kl5kusb105 10-1:1.0: device disconnected [ 160.243681][ T9298] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 160.275162][ T9298] xt_TCPMSS: Only works on TCP SYN packets [ 160.278298][ T9298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9232 sclass=netlink_route_socket pid=9298 comm=syz.0.951 [ 160.284800][ T9298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9232 sclass=netlink_route_socket pid=9298 comm=syz.0.951 [ 160.323349][ T9303] __nla_validate_parse: 2 callbacks suppressed [ 160.323366][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 160.330887][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 160.372925][ T9309] netlink: 'syz.5.954': attribute type 32 has an invalid length. [ 160.377061][ T9311] netlink: 'syz.5.954': attribute type 32 has an invalid length. [ 160.404821][ T9309] bond1: Setting coupled_control to off (0) [ 160.407230][ T9309] bond1: entered promiscuous mode [ 160.427277][ T9311] bond2: Setting coupled_control to off (0) [ 160.431260][ T9311] bond2: entered promiscuous mode [ 160.738073][ T55] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 160.747946][ T5758] Bluetooth: hci1: command tx timeout [ 160.876343][ T9325] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 160.887961][ T9325] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 160.889626][ T55] usb 10-1: config 0 has no interfaces? [ 160.896705][ T55] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 160.900864][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.904309][ T55] usb 10-1: Product: syz [ 160.906157][ T55] usb 10-1: Manufacturer: syz [ 160.908934][ T55] usb 10-1: SerialNumber: syz [ 160.913233][ T55] usb 10-1: config 0 descriptor?? [ 161.063171][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 161.069705][ T9329] hsr_slave_0: left promiscuous mode [ 161.073688][ T9329] hsr_slave_1: left promiscuous mode [ 161.140616][ T6700] usb 10-1: USB disconnect, device number 4 [ 161.230922][ T9331] vlan1: entered promiscuous mode [ 161.232773][ T9331] bridge0: entered promiscuous mode [ 161.234621][ T9331] vlan1: entered allmulticast mode [ 161.236512][ T9331] bridge0: entered allmulticast mode [ 161.261146][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'. [ 161.374436][ T9350] zram0: detected capacity change from 0 to 8 [ 161.377263][ T9351] zram: Cannot change disksize for initialized device [ 161.378197][ T9345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.436467][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 161.527171][ T9345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.560570][ T9359] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 161.603008][ T9363] qnx4: no qnx4 filesystem (no root dir). [ 161.705011][ T9345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.736741][ T9370] vcan0 speed is unknown, defaulting to 1000 [ 161.775730][ T9345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.829589][ T161] Bluetooth: hci4: Frame reassembly failed (-84) [ 161.905771][ T9378] netlink: 44 bytes leftover after parsing attributes in process `syz.5.975'. [ 161.957990][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.968299][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.976487][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.985029][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.989411][ T9385] gfs2: error -5 reading superblock [ 162.094695][ T9397] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 162.171832][ T9406] netlink: 'syz.3.984': attribute type 39 has an invalid length. [ 162.353519][ T9423] i2c i2c-0: delete_device: Can't find device in list [ 163.214093][ T9433] NILFS (nullb0): couldn't find nilfs on the device [ 163.331864][ T9442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.398302][ T9444] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 163.449568][ T9446] bond3: Removing last arp target with arp_interval on [ 163.450222][ T9447] fuse: Bad value for 'rootmode' [ 163.463922][ T9446] bond4: Removing last arp target with arp_interval on [ 163.592671][ T9458] netlink: 96 bytes leftover after parsing attributes in process `syz.5.999'. [ 163.609568][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802cff6400: rx timeout, send abort [ 163.616368][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cff6400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 163.620458][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 163.620472][ T42] audit: type=1400 audit(1785628181.223:1085): avc: denied { write } for pid=9459 comm="syz.5.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.634060][ T42] audit: type=1400 audit(1785628181.233:1086): avc: denied { read } for pid=5129 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 163.650537][ T42] audit: type=1400 audit(1785628181.233:1087): avc: denied { search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.659517][ T42] audit: type=1400 audit(1785628181.233:1088): avc: denied { write search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.667629][ T42] audit: type=1400 audit(1785628181.233:1089): avc: denied { add_name } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.672803][ T9465] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 163.674513][ T42] audit: type=1400 audit(1785628181.233:1090): avc: denied { create } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.684756][ T42] audit: type=1400 audit(1785628181.233:1091): avc: denied { append open } for pid=5129 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.693347][ T42] audit: type=1400 audit(1785628181.233:1092): avc: denied { getattr } for pid=5129 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.879778][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.882776][ T5095] Bluetooth: hci4: command 0x1003 tx timeout [ 163.927370][ T5826] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 164.007427][ T9468] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 164.080923][ T5826] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.094258][ T5826] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 164.097137][ T5826] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 164.100461][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.104990][ T5826] usb 10-1: config 0 descriptor?? [ 164.109803][ T5826] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 164.117505][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 164.127968][ T5826] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 164.132738][ T5826] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 164.134794][ T5826] usb 10-1: media controller created [ 164.137212][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.150586][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 164.154449][ T5826] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 164.159486][ T5826] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input25 [ 164.169787][ T5826] dvb-usb: schedule remote query interval to 150 msecs. [ 164.172688][ T5826] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 164.249170][ T9475] gadgetfs: bound to dummy_udc driver [ 164.318123][ T5848] usb 10-1: USB disconnect, device number 5 [ 164.337644][ T5848] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 164.852474][ T42] audit: type=1400 audit(1785628182.454:1093): avc: denied { ioctl } for pid=9501 comm="syz.1.1011" path="/228/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 ioctlcmd=0x5418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 164.897299][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1014'. [ 164.908785][ T5758] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 164.909330][ T9507] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1013'. [ 164.914710][ T9507] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1013'. [ 165.367750][ T9533] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 165.456701][ T2116] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 165.533747][ T9540] bond8: (slave batadv0): Device is not bonding slave [ 165.536874][ T9540] bond8: option active_slave: invalid value (batadv0) [ 165.541621][ T9540] bond8 (unregistering): Released all slaves [ 165.567286][ T9541] bond8: (slave batadv0): Device is not bonding slave [ 165.569526][ T9541] bond8: option active_slave: invalid value (batadv0) [ 165.573704][ T9541] bond8 (unregistering): Released all slaves [ 165.608923][ T2116] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.613280][ T2116] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.617318][ T2116] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 165.621090][ T2116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.627054][ T2116] usb 6-1: config 0 descriptor?? [ 165.635379][ T2116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 165.638677][ T2116] dvb-usb: bulk message failed: -22 (3/0) [ 165.645401][ T2116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 165.649352][ T2116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 165.652230][ T2116] usb 6-1: media controller created [ 165.655679][ T2116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.667289][ T2116] dvb-usb: bulk message failed: -22 (6/0) [ 165.674608][ T2116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 165.691849][ T2116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input26 [ 165.707142][ T2116] dvb-usb: schedule remote query interval to 150 msecs. [ 165.710055][ T2116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 165.710768][ T42] audit: type=1400 audit(1785628183.314:1094): avc: denied { read } for pid=9550 comm="syz.0.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.796801][ T9553] can: request_module (can-proto-0) failed. [ 165.845151][ T41] usb 6-1: USB disconnect, device number 20 [ 165.885561][ T41] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 166.082234][ T9571] bond0: invalid NS target ff00:: specified for addition [ 166.085332][ T9571] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 166.215908][ T9573] __nla_validate_parse: 1 callbacks suppressed [ 166.215927][ T9573] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1036'. [ 166.224355][ T9573] tmpfs: Bad value for 'mpol' [ 166.280879][ T9575] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 166.779301][ T9597] binder: BINDER_SET_CONTEXT_MGR already set [ 166.782999][ T9597] binder: 9595:9597 ioctl 4018620d 2000000000c0 returned -16 [ 166.791267][ T9597] binder: BINDER_SET_CONTEXT_MGR already set [ 166.805101][ T9597] binder: 9595:9597 ioctl 4018620d 200000000040 returned -16 [ 166.965141][ T9612] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1048'. [ 166.969780][ T9612] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1048'. [ 166.972972][ T9613] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1048'. [ 167.170288][ T9621] overlayfs: upper fs does not support file handles, falling back to index=off. [ 167.173610][ T9621] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 167.196260][ T5848] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 167.269983][ T9578] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 167.371859][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.380084][ T5848] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.385881][ T5848] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.390047][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.395151][ T5848] usb 5-1: config 0 descriptor?? [ 167.399198][ T5848] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.401402][ T5848] dvb-usb: bulk message failed: -22 (3/0) [ 167.411965][ T5848] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.416338][ T5848] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.419304][ T5848] usb 5-1: media controller created [ 167.422827][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.433264][ T5848] dvb-usb: bulk message failed: -22 (6/0) [ 167.435202][ T5848] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.441464][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input28 [ 167.446229][ T5848] dvb-usb: schedule remote query interval to 150 msecs. [ 167.448821][ T5848] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.606253][ T5848] dvb-usb: bulk message failed: -22 (1/0) [ 167.608204][ T5848] dvb-usb: error while querying for an remote control event. [ 167.610607][ T6794] usb 5-1: USB disconnect, device number 16 [ 167.629960][ T6794] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 167.632888][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 167.682857][ T9646] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 167.697889][ T9646] i2c i2c-0: new_device: Extra parameters [ 167.744738][ T9654] netlink: 'syz.1.1055': attribute type 23 has an invalid length. [ 167.860674][ T9663] xt_hashlimit: size too large, truncated to 1048576 [ 167.920019][ T9667] tipc: MTU too low for tipc bearer [ 168.048851][ T9678] vhci_hcd vhci_hcd.0: remove, state 4 [ 168.050514][ T9678] usb usb2: USB disconnect, device number 1 [ 168.060141][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.064209][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.069763][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.074197][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.076024][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.078455][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.080985][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.083126][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.085300][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.086156][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 168.090581][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 168.094185][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 168.094703][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.097599][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 168.100165][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.103517][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 168.105767][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.113298][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.116150][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.118203][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.126469][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.128211][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.131217][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.133207][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.135330][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.137761][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.144775][ T9682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.145009][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.149922][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.151943][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.153802][ T9682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.154101][ T9678] vhci_hcd vhci_hcd.0: USB bus 2 deregistered [ 168.158487][ T9682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.166792][ T9689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9689 comm=syz.1.1066 [ 168.167619][ T9678] vhci_hcd vhci_hcd.0: remove, state 4 [ 168.172899][ T9678] usb usb1: USB disconnect, device number 1 [ 168.177523][ T9682] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.217897][ T13] vhci_hcd vhci_hcd.0: stop threads [ 168.219808][ T13] vhci_hcd vhci_hcd.0: release socket [ 168.221627][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 168.224036][ T13] vhci_hcd vhci_hcd.0: stop threads [ 168.228223][ T13] vhci_hcd vhci_hcd.0: release socket [ 168.230367][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 168.232267][ T13] vhci_hcd vhci_hcd.0: stop threads [ 168.234021][ T13] vhci_hcd vhci_hcd.0: release socket [ 168.235797][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 168.238565][ T13] vhci_hcd vhci_hcd.0: stop threads [ 168.240397][ T13] vhci_hcd vhci_hcd.0: release socket [ 168.242292][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 168.244148][ T13] vhci_hcd vhci_hcd.0: stop threads [ 168.245874][ T13] vhci_hcd vhci_hcd.0: release socket [ 168.247796][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 168.249702][ T13] vhci_hcd vhci_hcd.0: stop threads [ 168.251550][ T13] vhci_hcd vhci_hcd.0: release socket [ 168.253707][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 168.257531][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.260004][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.262661][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.265224][ T12] vhci_hcd vhci_hcd.0: stop threads [ 168.267967][ T12] vhci_hcd vhci_hcd.0: release socket [ 168.270133][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 168.271261][ T9697] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 168.271865][ T9678] vhci_hcd vhci_hcd.0: USB bus 1 deregistered [ 168.283719][ T9697] batman_adv: batadv0: Adding interface: gretap1 [ 168.287276][ T9697] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.296474][ T9697] batman_adv: batadv0: Interface activated: gretap1 [ 168.353443][ T9703] serio: Serial port ptm0 [ 168.682227][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 168.682245][ T42] audit: type=1400 audit(1785628186.284:1106): avc: denied { create } for pid=9729 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.683916][ T9730] dummy_hcd dummy_hcd.0: remove, state 4 [ 168.688513][ T42] audit: type=1400 audit(1785628186.294:1107): avc: denied { write } for pid=9725 comm="syz.0.1078" name="/" dev="9p" ino=78395243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.693388][ T9730] usb usb5: USB disconnect, device number 1 [ 168.710196][ T9727] xt_bpf: check failed: parse error [ 168.740877][ T9730] dummy_hcd dummy_hcd.0: stopped [ 168.746555][ T9730] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 168.772859][ T9731] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 168.776757][ T9731] dummy_hcd dummy_hcd.0: Dummy host controller [ 168.798506][ T9731] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 168.806786][ T9731] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 168.810667][ T9731] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 168.814054][ T9731] usb usb1: Product: Dummy host controller [ 168.816852][ T9731] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 168.820284][ T9731] usb usb1: SerialNumber: dummy_hcd.0 [ 168.841921][ T9731] hub 1-0:1.0: USB hub found [ 168.846199][ T9731] hub 1-0:1.0: 1 port detected [ 169.096860][ T9749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.454159][ T42] audit: type=1400 audit(1785628187.054:1108): avc: denied { write } for pid=9759 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.548394][ T9770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.766023][ T847] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 169.917460][ T847] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 169.920187][ T847] usb 10-1: config 1 has no interface number 0 [ 169.922148][ T847] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 169.926021][ T847] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 169.931908][ T847] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 169.934893][ T847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.937897][ T847] usb 10-1: Product: syz [ 169.939323][ T847] usb 10-1: Manufacturer: syz [ 169.940964][ T847] usb 10-1: SerialNumber: syz [ 169.947798][ T9773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 169.991984][ T9795] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 170.359815][ T9773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 170.420735][ T42] audit: type=1400 audit(1785628188.024:1109): avc: denied { read } for pid=9802 comm="syz.1.1101" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 170.429640][ T42] audit: type=1400 audit(1785628188.024:1110): avc: denied { open } for pid=9802 comm="syz.1.1101" path="/255/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 170.497042][ T42] audit: type=1400 audit(1785628188.104:1111): avc: denied { ioctl } for pid=9802 comm="syz.1.1101" path="/255/file0" dev="tracefs" ino=1 ioctlcmd=0x4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 170.572764][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.577131][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.582942][ T847] usb 10-1: Incompatible driver and firmware versions [ 170.592974][ T847] usb 10-1: USB disconnect, device number 6 [ 170.640807][ T42] audit: type=1400 audit(1785628188.244:1112): avc: denied { listen } for pid=9815 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.827510][ T9827] netlink: 'syz.0.1108': attribute type 30 has an invalid length. [ 170.984089][ T9836] bond9: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 170.990444][ T9836] bond9: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 171.067596][ T42] audit: type=1400 audit(1785628188.674:1113): avc: denied { listen } for pid=9840 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.280570][ T9864] __nla_validate_parse: 83 callbacks suppressed [ 171.280588][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 171.369413][ T9866] tipc: Enabling of bearer rejected, failed to enable media [ 171.585477][ T9875] sctp: [Deprecated]: syz.5.1123 (pid 9875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.585477][ T9875] Use struct sctp_sack_info instead [ 171.593693][ T9875] sctp: [Deprecated]: syz.5.1123 (pid 9875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.593693][ T9875] Use struct sctp_sack_info instead [ 171.609132][ T9875] x_tables: duplicate underflow at hook 3 [ 171.729560][ T42] audit: type=1400 audit(1785628189.334:1114): avc: denied { write } for pid=9883 comm="syz.5.1126" name="/" dev="9p" ino=78395243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.739059][ T42] audit: type=1804 audit(1785628189.344:1115): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1126" name="/newroot/86/file0/file0" dev="9p" ino=78395323 res=1 errno=0 [ 172.082502][ T9899] 9pnet_virtio: no channels available for device syz [ 172.247840][ T9901] syzkaller0: entered promiscuous mode [ 172.250289][ T9901] syzkaller0: entered allmulticast mode [ 172.267925][ T9901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.277078][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.839569][ T9928] openvswitch: netlink: Key type 172 is out of range max 32 [ 172.978800][ T9930] mmap: syz.0.1141 (9930) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.081250][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.089712][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.316083][ T6794] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 173.316153][ T5848] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 173.428761][ T5758] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 173.447172][ T6794] usb 1-1: device descriptor read/64, error -71 [ 173.480460][ T5848] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.488124][ T5848] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 173.492053][ T5848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 173.495516][ T5848] usb 10-1: Product: syz [ 173.500191][ T5848] usb 10-1: Manufacturer: syz [ 173.502282][ T5848] usb 10-1: SerialNumber: syz [ 173.696219][ T6794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.714345][ T5848] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 173.836127][ T6794] usb 1-1: device descriptor read/64, error -71 [ 173.946540][ T6794] usb usb1-port1: attempt power cycle [ 173.986447][ T41] usb 10-1: USB disconnect, device number 7 [ 174.005502][ T41] usblp0: removed [ 174.045467][ T9946] futex_wake_op: syz.5.1146 tries to shift op by -1; fix this program [ 174.132327][ T9950] vcan0 speed is unknown, defaulting to 1000 [ 174.296326][ T6794] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.318362][ T6794] usb 1-1: device descriptor read/8, error -71 [ 174.576543][ T6794] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.608771][ T6794] usb 1-1: device descriptor read/8, error -71 [ 174.717056][ T6794] usb usb1-port1: unable to enumerate USB device [ 174.826353][ T41] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 174.883382][ T9960] ALSA: seq fatal error: cannot create timer (-16) [ 174.893918][ T42] audit: type=1400 audit(1785628192.494:1116): avc: denied { lock } for pid=9959 comm="syz.5.1150" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.935210][ T42] audit: type=1400 audit(1785628192.534:1117): avc: denied { getopt } for pid=9961 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.978499][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.982631][ T41] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.986081][ T41] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 174.990095][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.001101][ T41] usb 6-1: config 0 descriptor?? [ 175.006085][ T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 175.011039][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 175.027082][ T41] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 175.033494][ T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 175.037633][ T41] usb 6-1: media controller created [ 175.040951][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.052705][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 175.060519][ T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 175.068653][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input29 [ 175.076974][ T9966] 9pnet_virtio: no channels available for device syz [ 175.080163][ T42] audit: type=1400 audit(1785628192.684:1118): avc: denied { mounton } for pid=9965 comm="syz.5.1153" path="/99/file0" dev="9p" ino=78395243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.083066][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 175.087768][ T9966] 9pnet_virtio: no channels available for device syz [ 175.088031][ T9966] 9pnet_virtio: no channels available for device syz [ 175.088280][ T9966] 9pnet_virtio: no channels available for device syz [ 175.088541][ T9966] 9pnet_virtio: no channels available for device syz [ 175.088813][ T9966] 9pnet_virtio: no channels available for device syz [ 175.089154][ T9966] 9pnet_virtio: no channels available for device syz [ 175.089478][ T9966] 9pnet_virtio: no channels available for device syz [ 175.093451][ T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 175.102091][ T9966] 9pnet_virtio: no channels available for device syz [ 175.119384][ T9966] 9pnet_virtio: no channels available for device syz [ 175.122750][ T9966] 9pnet_virtio: no channels available for device syz [ 175.125865][ T9966] 9pnet_virtio: no channels available for device syz [ 175.129404][ T9966] 9pnet_virtio: no channels available for device syz [ 175.132853][ T9966] 9pnet_virtio: no channels available for device syz [ 175.135976][ T9966] 9pnet_virtio: no channels available for device syz [ 175.139569][ T9966] 9pnet_virtio: no channels available for device syz [ 175.142562][ T9966] 9pnet_virtio: no channels available for device syz [ 175.145643][ T9966] 9pnet_virtio: no channels available for device syz [ 175.149115][ T9966] 9pnet_virtio: no channels available for device syz [ 175.151570][ T9966] 9pnet_virtio: no channels available for device syz [ 175.153915][ T9966] 9pnet_virtio: no channels available for device syz [ 175.156335][ T9966] 9pnet_virtio: no channels available for device syz [ 175.158688][ T9966] 9pnet_virtio: no channels available for device syz [ 175.160964][ T9966] 9pnet_virtio: no channels available for device syz [ 175.163319][ T9966] 9pnet_virtio: no channels available for device syz [ 175.165577][ T9966] 9pnet_virtio: no channels available for device syz [ 175.168152][ T9966] 9pnet_virtio: no channels available for device syz [ 175.170431][ T9966] 9pnet_virtio: no channels available for device syz [ 175.172693][ T9966] 9pnet_virtio: no channels available for device syz [ 175.175069][ T9966] 9pnet_virtio: no channels available for device syz [ 175.177585][ T9966] 9pnet_virtio: no channels available for device syz [ 175.179811][ T9966] 9pnet_virtio: no channels available for device syz [ 175.215552][ T2116] usb 6-1: USB disconnect, device number 21 [ 175.245055][ T2116] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 175.358353][ T9969] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1154'. [ 175.363961][ T9969] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1154'. [ 175.368207][ T9969] netlink: 508 bytes leftover after parsing attributes in process `syz.5.1154'. [ 175.486957][ T42] audit: type=1400 audit(1785628193.084:1119): avc: denied { link } for pid=9975 comm="syz.5.1156" name="#23" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.494754][ T42] audit: type=1400 audit(1785628193.094:1120): avc: denied { rename } for pid=9975 comm="syz.5.1156" name="#24" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.609594][ T9978] netlink: 'syz.5.1157': attribute type 1 has an invalid length. [ 175.612951][ T9978] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1157'. [ 175.617472][ T9978] netlink: 'syz.5.1157': attribute type 1 has an invalid length. [ 175.620696][ T9978] netlink: 2016 bytes leftover after parsing attributes in process `syz.5.1157'. [ 175.757152][ T9981] loop5: detected capacity change from 0 to 2640 [ 175.768480][ T9981] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 175.773442][ T9981] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 175.777299][ T9981] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 175.782813][ T9981] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 175.786684][ T9981] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 175.790173][ T9981] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 175.798370][ T9981] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 175.801831][ T9981] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 175.805207][ T9981] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 175.808630][ T9981] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 175.873952][ T9986] gadgetfs: bound to dummy_udc driver [ 175.938969][ T42] audit: type=1400 audit(1785628193.544:1121): avc: denied { ioctl } for pid=9987 comm="syz.5.1161" path="socket:[34649]" dev="sockfs" ino=34649 ioctlcmd=0x7506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 175.943903][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 175.967805][ T9990] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 175.967805][ T9990] program syz.5.1161 not setting count and/or reply_len properly [ 175.973631][ T9991] sg_write: process 323 (syz.5.1161) changed security contexts after opening file descriptor, this is not allowed. [ 175.982051][ T42] audit: type=1400 audit(1785628193.584:1122): avc: denied { load_policy } for pid=9987 comm="syz.5.1161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 175.982558][ T9990] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 175.994672][ T9990] SELinux: failed to load policy [ 176.116515][ T41] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 176.120272][ T9996] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 176.123628][ C2] gadgetfs: connected [ 176.128741][ T41] gadgetfs: disconnected [ 176.290663][T10008] vcan0 speed is unknown, defaulting to 1000 [ 176.475928][T10013] syzkaller0: entered promiscuous mode [ 176.478628][T10013] syzkaller0: entered allmulticast mode [ 178.593103][ T42] audit: type=1400 audit(1785628196.193:1123): avc: denied { mounton } for pid=10019 comm="syz.5.1169" path="/107/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 178.634577][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1170'. [ 178.735995][ T42] audit: type=1400 audit(1785628196.333:1124): avc: denied { firmware_load } for pid=10027 comm="syz.5.1170" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 178.842743][T10030] netlink: 'syz.1.1172': attribute type 2 has an invalid length. [ 178.857314][T10028] syz.5.1170 (10028) used greatest stack depth: 19120 bytes left [ 179.362675][T10044] xt_hashlimit: size too large, truncated to 1048576 [ 179.422095][T10046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1177'. [ 179.425625][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1177'. [ 179.552748][T10051] xt_l2tp: missing protocol rule (udp|l2tpip) [ 179.613185][ T42] audit: type=1400 audit(1785628453.209:1125): avc: denied { listen } for pid=10050 comm="syz.0.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.749161][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 179.932044][T10074] Sensor A: ================= START STATUS ================= [ 179.934526][T10074] Sensor A: Test Pattern: 75% Colorbar [ 179.941316][T10074] Sensor A: Show Information: All [ 179.943269][T10074] Sensor A: Vertical Flip: false [ 179.945401][T10074] Sensor A: Horizontal Flip: false [ 179.946455][T10072] Bluetooth: MGMT ver 1.23 [ 179.947815][T10074] Sensor A: Brightness: 128 [ 179.947876][T10074] Sensor A: Contrast: 3 [ 179.947898][T10074] Sensor A: Hue: 0 [ 179.947919][T10074] Sensor A: Saturation: 128 [ 179.947942][T10074] Sensor A: Pixel Rate: 160000000 [ 179.947964][T10074] Sensor A: Horizontal Blanking: 800 [ 179.947987][T10074] Sensor A: Vertical Blanking: 3223 [ 179.948008][T10074] Sensor A: ================== END STATUS ================== [ 180.160716][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 180.160770][ T42] audit: type=1400 audit(1785628453.759:1129): avc: denied { write } for pid=10086 comm="syz.0.1189" name="node" dev="configfs" ino=8868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.434165][ T42] audit: type=1400 audit(1785628454.029:1130): avc: denied { mounton } for pid=10098 comm="syz.1.1194" path="/274/file0" dev="tmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 180.593679][ T42] audit: type=1326 audit(1785628454.189:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10102 comm="syz.0.1196" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd25e99e019 code=0x7eff0000 [ 181.526239][T10121] zonefs (loop1) ERROR: Not a zoned block device [ 181.575294][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 181.578588][T10121] netlink: 'syz.1.1200': attribute type 20 has an invalid length. [ 181.616235][T10124] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 181.625208][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1199'. [ 182.186399][ T34] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 182.351243][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.357384][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 182.364923][ T34] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 182.371108][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.378199][ T34] usb 6-1: config 0 descriptor?? [ 182.389230][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1206'. [ 182.393935][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 182.396472][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 182.413135][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 182.419087][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 182.424055][ T34] usb 6-1: media controller created [ 182.437636][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.439550][T10148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10148 comm=syz.5.1206 [ 182.480189][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 182.484299][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 182.495709][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input30 [ 182.510106][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 182.516312][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 182.597545][ T34] usb 6-1: USB disconnect, device number 23 [ 182.625526][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 183.280126][ T42] audit: type=1400 audit(1785628456.887:1132): avc: denied { create } for pid=10177 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 183.561087][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.572557][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.576085][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.585192][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.591027][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.694207][ T42] audit: type=1400 audit(1785628457.297:1133): avc: denied { checkpoint_restore } for pid=10208 comm="syz.1.1226" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.739720][ T42] audit: type=1400 audit(1785628457.347:1134): avc: denied { getopt } for pid=10213 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 183.739828][T10214] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.807496][T10221] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.875285][T10196] vcan0 speed is unknown, defaulting to 1000 [ 184.010463][T10234] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 184.010463][T10234] Please contact the netfilter-devel mailing list or update your nftables rules. [ 184.027755][ T42] audit: type=1400 audit(1785628457.627:1135): avc: denied { audit_read } for pid=10233 comm="syz.0.1232" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.077962][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 184.097166][T10241] program syz.1.1234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.104315][T10241] ata1.00: non-matching transfer count (-1459617792/0) [ 184.115698][ T42] audit: type=1400 audit(1785628457.717:1136): avc: denied { write } for pid=10244 comm="syz.0.1235" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 184.151408][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 184.163129][T10248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=10248 comm=syz.1.1236 [ 184.176110][T10252] overlayfs: failed to resolve './file2': -2 [ 184.225229][ T42] audit: type=1400 audit(1785628457.827:1137): avc: denied { bind } for pid=10255 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.238666][ T42] audit: type=1800 audit(1785628457.827:1138): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1237" name="file0" dev="tmpfs" ino=1615 res=0 errno=0 [ 184.253905][T10196] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.256116][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.258542][T10196] bridge_slave_0: entered allmulticast mode [ 184.264235][T10196] bridge_slave_0: entered promiscuous mode [ 184.269224][T10196] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.272629][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.275825][T10196] bridge_slave_1: entered allmulticast mode [ 184.279751][T10196] bridge_slave_1: entered promiscuous mode [ 184.296802][T10196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.302736][T10196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.326776][T10196] team0: Port device team_slave_0 added [ 184.330264][T10196] team0: Port device team_slave_1 added [ 184.353401][T10196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.356313][T10196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.367193][T10196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.373213][T10196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.375556][T10196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.386603][T10196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.433554][T10196] hsr_slave_0: entered promiscuous mode [ 184.436255][T10196] hsr_slave_1: entered promiscuous mode [ 184.473860][T10267] 9p: Unknown uid 00000000004294967295 [ 184.484631][T10267] netlink: 'syz.1.1240': attribute type 14 has an invalid length. [ 184.638327][T10196] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.645246][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.648169][T10196] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.653310][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.657180][T10196] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.662640][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.669897][T10196] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.674356][T10196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.764932][T10196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.797020][T10196] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.804506][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.806847][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.816047][T10283] x_tables: duplicate underflow at hook 2 [ 184.817889][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.821226][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.939458][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 184.965158][T10293] IPVS: length: 18 != 8 [ 184.979022][T10293] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 185.015053][T10296] netlink: 'syz.1.1247': attribute type 27 has an invalid length. [ 185.049934][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'. [ 185.063119][T10296] bond0: (slave bond_slave_1): Releasing backup interface [ 185.067096][T10296] bond_slave_1 (unregistering): left promiscuous mode [ 185.085761][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'. [ 185.122472][T10308] openvswitch: netlink: Key 32 has unexpected len 10842 expected 2 [ 185.125735][T10309] openvswitch: netlink: Key 32 has unexpected len 10842 expected 2 [ 185.129284][T10308] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1250'. [ 185.133966][T10309] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1250'. [ 185.192654][T10196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.439235][T10196] veth0_vlan: entered promiscuous mode [ 185.458147][T10196] veth1_vlan: entered promiscuous mode [ 185.506764][T10196] veth0_macvtap: entered promiscuous mode [ 185.521536][T10196] veth1_macvtap: entered promiscuous mode [ 185.546485][T10196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.555991][T10196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.582570][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.591136][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.621497][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.631167][ T5095] Bluetooth: hci3: command tx timeout [ 185.640899][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.690570][T10349] CacheFiles: No cache directory specified [ 185.709203][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.717161][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.759258][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.767466][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.773623][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 185.780055][T10352] pim6reg9: entered allmulticast mode [ 185.991399][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 185.991419][ T42] audit: type=1400 audit(1785628459.586:1144): avc: denied { execute } for pid=10368 comm="syz.6.1266" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 186.041433][ T5848] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.054857][T10374] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 186.058704][T10376] syzkaller0: entered promiscuous mode [ 186.068665][T10376] syzkaller0: entered allmulticast mode [ 186.073560][T10379] 8021q: VLANs not supported on wg1 [ 186.192511][ T5848] usb 1-1: device descriptor read/64, error -71 [ 186.304508][T10394] netlink: 'syz.6.1274': attribute type 4 has an invalid length. [ 186.312007][T10394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1274'. [ 186.417821][ T42] audit: type=1400 audit(1785628460.016:1145): avc: denied { write } for pid=10396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.437310][ T42] audit: type=1400 audit(1785628460.036:1146): avc: denied { map } for pid=10397 comm="syz.6.1275" path="/dev/ptyr0" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 186.447638][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.527908][T10407] netlink: 'syz.6.1277': attribute type 4 has an invalid length. [ 186.530401][T10407] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1277'. [ 186.542128][ T42] audit: type=1400 audit(1785628460.136:1147): avc: denied { write } for pid=10405 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.549840][T10407] .`: renamed from bond0 (while UP) [ 186.556423][T10409] netlink: 'syz.6.1277': attribute type 4 has an invalid length. [ 186.559556][T10409] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1277'. [ 186.596396][ T5848] usb 1-1: device descriptor read/64, error -71 [ 186.619765][ T42] audit: type=1400 audit(1785628460.216:1148): avc: denied { write } for pid=10412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.667768][ T42] audit: type=1400 audit(1785628460.265:1149): avc: denied { write } for pid=10419 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.701352][ T5848] usb usb1-port1: attempt power cycle [ 186.896206][ T42] audit: type=1400 audit(1785628460.495:1150): avc: denied { ioctl } for pid=10433 comm="syz.6.1283" path="socket:[37618]" dev="sockfs" ino=37618 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.997077][ T42] audit: type=1400 audit(1785628460.595:1151): avc: denied { listen } for pid=10443 comm="syz.6.1286" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.053040][ T5848] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.095207][ T5848] usb 1-1: device descriptor read/8, error -71 [ 187.151371][T10454] Line length is too long: Should be less than 4094 [ 187.341154][ T5848] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.373873][ T5848] usb 1-1: device descriptor read/8, error -71 [ 187.481673][ T5848] usb usb1-port1: unable to enumerate USB device [ 187.514910][ T42] audit: type=1400 audit(1785628461.115:1152): avc: denied { connect } for pid=10463 comm="syz.6.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.711804][ T5743] Bluetooth: hci3: command tx timeout [ 187.791529][ T5095] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 187.793199][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 187.942065][T10473] CIFS mount error: No usable UNC path provided in device string! [ 187.942065][T10473] [ 187.945517][T10473] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 187.950464][T10473] cgroup: Invalid name [ 188.002376][T10476] block2mtd: parameter too long [ 188.138458][T10486] netlink: 'syz.5.1300': attribute type 5 has an invalid length. [ 188.140992][T10487] netlink: 'syz.5.1300': attribute type 5 has an invalid length. [ 188.196776][T10489] bond0: (slave syz_tun): Releasing backup interface [ 188.394951][T10513] batadv0: entered promiscuous mode [ 188.404471][T10513] macsec1: entered promiscuous mode [ 188.407077][T10513] macsec1: entered allmulticast mode [ 188.408813][T10513] batadv0: entered allmulticast mode [ 188.411317][T10513] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 188.416205][T10513] batadv0: left allmulticast mode [ 188.417993][T10513] batadv0: left promiscuous mode [ 188.432933][T10516] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 188.803021][T10535] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 188.814762][ T42] audit: type=1400 audit(1785628462.414:1153): avc: denied { setattr } for pid=10534 comm="syz.1.1315" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.836759][T10535] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 188.836759][T10535] program syz.1.1315 not setting count and/or reply_len properly [ 188.839122][T10537] x_tables: duplicate underflow at hook 2 [ 189.056000][T10558] netlink: 'syz.1.1323': attribute type 2 has an invalid length. [ 189.077247][T10556] kvm: emulating exchange as write [ 189.198094][T10566] __nla_validate_parse: 9 callbacks suppressed [ 189.198122][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 189.210067][T10571] nft_compat: unsupported protocol 0 [ 189.418107][T10588] bridge_slave_1: left allmulticast mode [ 189.421599][T10588] bridge_slave_1: left promiscuous mode [ 189.424630][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.430959][T10588] bridge_slave_0: left allmulticast mode [ 189.442204][T10588] bridge_slave_0: left promiscuous mode [ 189.444604][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.538510][T10601] futex_wake_op: syz.1.1335 tries to shift op by -1; fix this program [ 189.679994][T10612] binder: 10611:10612 ioctl c0306201 200000000080 returned -14 [ 189.685956][T10612] binder: 10611:10612 ioctl c0306201 2000000003c0 returned -14 [ 189.749789][T10621] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 189.927697][T10631] netlink: 'syz.6.1343': attribute type 1 has an invalid length. [ 189.972179][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.997198][T10631] bond0: (slave dummy0): making interface the new active one [ 190.000291][T10631] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.008404][T10631] netlink: 'syz.6.1343': attribute type 10 has an invalid length. [ 190.011166][T10631] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1343'. [ 190.017289][T10631] dummy0: entered promiscuous mode [ 190.025998][T10631] bond0: (slave dummy0): Releasing active interface [ 190.157565][T10652] overlayfs: failed to resolve './file2': -2 [ 190.365871][T10662] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 190.539338][T10672] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 192.521788][T10596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.026843][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1367'. [ 193.029919][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1367'. [ 193.096746][T10725] ALSA: seq fatal error: cannot create timer (-19) [ 193.104304][T10728] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1369'. [ 193.185265][T10731] Invalid option length (480) for dns_resolver key [ 193.360023][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 193.360038][ T42] audit: type=1400 audit(1785628466.952:1163): avc: denied { unmount } for pid=8806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 193.411533][ T42] audit: type=1400 audit(1785628467.002:1164): avc: denied { write } for pid=10736 comm="syz.5.1372" path="socket:[41395]" dev="sockfs" ino=41395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.424565][ T42] audit: type=1400 audit(1785628467.002:1165): avc: denied { accept } for pid=10736 comm="syz.5.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.486958][ T42] audit: type=1400 audit(1785628467.082:1166): avc: denied { map } for pid=10738 comm="syz.1.1373" path="/dev/sda1" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.666837][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 193.670060][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 193.852120][T10756] netlink: 'syz.5.1377': attribute type 1 has an invalid length. [ 194.126968][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.129208][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.901009][T10765] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 196.043944][T10777] lo speed is unknown, defaulting to 1000 [ 196.047776][T10777] lo speed is unknown, defaulting to 1000 [ 196.052583][T10777] lo speed is unknown, defaulting to 1000 [ 196.055718][T10777] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 196.060508][T10777] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 196.066602][T10777] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 196.073589][T10777] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.082948][T10777] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 196.104350][T10777] lo speed is unknown, defaulting to 1000 [ 196.108742][T10777] lo speed is unknown, defaulting to 1000 [ 196.112183][T10777] lo speed is unknown, defaulting to 1000 [ 196.115034][T10777] lo speed is unknown, defaulting to 1000 [ 196.118447][T10777] lo speed is unknown, defaulting to 1000 [ 196.121167][T10777] lo speed is unknown, defaulting to 1000 [ 196.216862][T10781] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 196.659921][T10744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.738049][T10790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1386'. [ 196.966203][ T1354] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 197.108226][T10815] overlayfs: failed to resolve './file1/file0': -2 [ 197.120437][ T1354] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.124701][ T1354] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 197.129960][ T1354] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.133479][ T1354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.148296][ T1354] usb 10-1: config 0 descriptor?? [ 197.158968][ T1354] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 197.161698][ T1354] dvb-usb: bulk message failed: -22 (3/0) [ 197.167370][T10819] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 197.170794][ T1354] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 197.178040][ T1354] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 197.182172][ T1354] usb 10-1: media controller created [ 197.185664][ T1354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.186889][T10818] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.192212][T10818] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.198186][ T1354] dvb-usb: bulk message failed: -22 (6/0) [ 197.200756][ T1354] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 197.207426][ T1354] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input32 [ 197.216618][ T1354] dvb-usb: schedule remote query interval to 150 msecs. [ 197.220511][ T1354] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 197.280148][T10825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10825 comm=syz.0.1397 [ 197.338712][ T42] audit: type=1400 audit(1785628470.930:1167): avc: denied { name_bind } for pid=10830 comm="syz.1.1398" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 197.364325][ T1354] usb 10-1: USB disconnect, device number 8 [ 197.384692][ T1354] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.566201][ T5869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.718835][ T5869] usb 1-1: config index 0 descriptor too short (expected 30047, got 36) [ 197.721577][ T5869] usb 1-1: config 101 has too many interfaces: 115, using maximum allowed: 32 [ 197.724371][ T5869] usb 1-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config [ 197.728126][ T5869] usb 1-1: config 101 has 0 interfaces, different from the descriptor's value: 115 [ 197.731174][ T5869] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 197.734107][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.941641][T10835] tipc: Started in network mode [ 197.943394][T10835] tipc: Node identity ac14142f, cluster identity 4711 [ 197.950020][T10835] tipc: New replicast peer: 127.0.0.1 [ 197.952710][T10835] tipc: Enabled bearer , priority 10 [ 197.963528][ T5869] usb 1-1: string descriptor 0 read error: -71 [ 197.970194][ T5869] usb 1-1: USB disconnect, device number 10 [ 198.136613][ T2116] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 198.196905][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 198.201904][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 198.204829][T10842] netlink: zone id is out of range [ 198.207547][T10842] netlink: del zone limit has 8 unknown bytes [ 198.288467][ T2116] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.292105][ T2116] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 198.296271][ T2116] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.300268][ T2116] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.307526][ T2116] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.311302][ T2116] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.314566][ T2116] usb 10-1: Product: syz [ 198.316301][ T2116] usb 10-1: Manufacturer: syz [ 198.329832][ T2116] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 198.504993][T10848] netlink: 'syz.6.1406': attribute type 4 has an invalid length. [ 198.508280][T10848] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1406'. [ 198.512193][T10848] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 198.532004][ T5826] usb 10-1: USB disconnect, device number 9 [ 198.738832][T10834] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1400'. [ 198.756985][ T2116] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 198.909486][ T2116] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.915849][ T2116] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 198.920071][ T2116] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 198.923716][ T2116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.931083][ T2116] usb 1-1: config 0 descriptor?? [ 198.937790][ T2116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 198.940562][ T2116] dvb-usb: bulk message failed: -22 (3/0) [ 198.949970][ T2116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 198.959809][ T2116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 198.965107][ T2116] usb 1-1: media controller created [ 198.971147][ T2116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.988520][ T2116] dvb-usb: bulk message failed: -22 (6/0) [ 198.991098][ T2116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 199.003421][ T2116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 199.007599][ T5826] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 199.010979][ T2116] dvb-usb: schedule remote query interval to 150 msecs. [ 199.013222][ T2116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 199.090506][ T5856] tipc: Node number set to 2886997039 [ 199.144535][ T5856] usb 1-1: USB disconnect, device number 11 [ 199.157311][ T5826] usb 10-1: device descriptor read/64, error -71 [ 199.159938][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 199.397538][ T5826] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 199.527581][ T5826] usb 10-1: device descriptor read/64, error -71 [ 199.639457][ T5826] usb usb10-port1: attempt power cycle [ 199.765924][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 199.870808][T10904] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1426'. [ 199.997668][ T5826] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 200.021596][ T5826] usb 10-1: device descriptor read/8, error -71 [ 200.107121][T10924] NILFS (loop1): device size too small [ 200.139223][ T42] audit: type=1400 audit(1785628473.729:1168): avc: denied { write } for pid=10925 comm="syz.1.1433" name="strings" dev="configfs" ino=10514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.236684][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 200.257536][ T5826] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 200.278003][ T2116] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 200.280662][ T5826] usb 10-1: device descriptor read/8, error -71 [ 200.388104][ T5826] usb usb10-port1: unable to enumerate USB device [ 200.439326][ T2116] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.442839][ T2116] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 200.445724][ T2116] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 200.448952][ T2116] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.455587][ T2116] usb 11-1: config 0 descriptor?? [ 200.459718][ T2116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 200.468728][ T2116] dvb-usb: bulk message failed: -22 (3/0) [ 200.475712][ T2116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 200.481649][ T2116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 200.486142][ T2116] usb 11-1: media controller created [ 200.489209][ T2116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.497049][ T2116] dvb-usb: bulk message failed: -22 (6/0) [ 200.499880][ T2116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 200.503678][ T2116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input34 [ 200.508717][ T2116] dvb-usb: schedule remote query interval to 150 msecs. [ 200.511186][ T2116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 200.668900][ T2116] dvb-usb: bulk message failed: -22 (1/0) [ 200.678336][ T5826] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 200.678973][ T2116] dvb-usb: error while querying for an remote control event. [ 200.683456][ T5856] usb 11-1: USB disconnect, device number 2 [ 200.689447][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 200.694175][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 200.725699][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 200.783204][T10964] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 200.824855][T10966] syzkaller1: entered promiscuous mode [ 200.826935][T10966] syzkaller1: entered allmulticast mode [ 200.849870][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 200.857339][ T5826] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 200.860105][ T5826] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.863097][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.866011][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.869414][ T5826] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.875605][ T5826] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.879219][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.030994][T10980] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 201.036623][T10980] program syz.5.1450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.089469][ T5826] usb 6-1: usb_control_msg returned -32 [ 201.091384][ T5826] usbtmc 6-1:16.0: can't read capabilities [ 201.103997][T10982] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10982 comm=syz.5.1451 [ 201.255623][T10995] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 201.258334][T10995] syzkaller1: owner set to 805 [ 201.367757][ T42] audit: type=1400 audit(1785628474.948:1169): avc: denied { append } for pid=10994 comm="syz.5.1455" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.794757][T11008] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 201.996418][ T1354] usb 6-1: USB disconnect, device number 24 [ 202.110987][T10995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.113751][T10995] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.124958][T10995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.130314][T10995] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.140375][T10995] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.146462][T10995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.149240][T10995] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.156082][T10995] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.163742][T11011] ptrace attach of "/syz-executor exec"[10196] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸ [ 202.192509][T11016] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 202.319638][T11026] xfrm1: entered allmulticast mode [ 202.326922][T11029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.330789][T11029] IPv6: NLM_F_CREATE should be set when creating new route [ 202.333285][T11030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.391686][T11032] __nla_validate_parse: 2 callbacks suppressed [ 202.391704][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1464'. [ 202.414146][T11037] can: request_module (can-proto-0) failed. [ 202.441249][T11042] 9pnet_virtio: no channels available for device syz [ 202.496620][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 202.500512][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 202.580106][T11054] Device name cannot be null; rc = [-22] [ 202.618440][T11059] gfs2: error -5 reading superblock [ 202.709011][T11069] input: syz0 as /devices/virtual/input/input35 [ 202.833298][T11057] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.836604][T11057] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.942696][T11057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.045444][T11057] macsec0: left promiscuous mode [ 203.048975][T11057] macsec0: left allmulticast mode [ 203.051357][T11057] geneve0: left promiscuous mode [ 203.189105][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.192666][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.196259][ T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 203.200360][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.209313][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.215519][ T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 203.221582][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.229362][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.237276][ T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 203.241937][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.245342][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.248381][ T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 203.252939][T11083] ksmbd: Unknown IPC event: 3, ignore. [ 203.306382][T11085] syzkaller1: entered allmulticast mode [ 203.313735][T11085] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 203.395213][T11087] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.411121][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.472746][ T42] audit: type=1400 audit(1785628477.067:1170): avc: denied { create } for pid=11090 comm="syz.6.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 203.514476][T11095] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 203.517555][T11095] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 203.545614][T11097] netlink: 'syz.1.1484': attribute type 63 has an invalid length. [ 203.548428][T11097] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1484'. [ 203.553995][T11097] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 203.556421][T11097] [U] J"—e:ÀÆ" [ 203.586010][T11095] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 203.589404][T11095] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 203.593129][T11095] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 203.609560][T11102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=11102 comm=syz.1.1486 [ 203.663356][ T42] audit: type=1400 audit(1785628477.257:1171): avc: denied { execheap } for pid=11110 comm="syz.6.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 203.717320][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1490'. [ 203.743723][T11107] syzkaller0: entered promiscuous mode [ 203.746138][T11107] syzkaller0: entered allmulticast mode [ 203.778753][T11119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1491'. [ 203.782733][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1491'. [ 203.786517][T11119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1491'. [ 203.803255][T11119] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20003 [ 204.119575][ T5848] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.199897][ T5743] Bluetooth: hci3: command 0x040f tx timeout [ 204.205790][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.289616][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 204.292975][ T5848] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 204.295726][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.300345][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 204.304220][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.308361][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.314185][ T5848] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 204.317967][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.324671][ T5848] usb 1-1: config 0 descriptor?? [ 204.327561][T11124] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 204.340430][ T5848] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 204.520099][ T5743] Bluetooth: hci4: command 0x1003 tx timeout [ 204.520126][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 204.604605][T11124] openvswitch: netlink: Actions may not be safe on all matching packets [ 204.746953][ T10] usb 1-1: USB disconnect, device number 12 [ 204.765852][ T42] audit: type=1400 audit(1785628478.356:1172): avc: denied { mounton } for pid=11126 comm="syz.5.1494" path="/syzcgroup/unified/syz5" dev="pstore" ino=5407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 205.490248][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.846949][T11122] netlink: 'syz.6.1492': attribute type 2 has an invalid length. [ 205.883486][T11138] netlink: 'syz.6.1496': attribute type 9 has an invalid length. [ 205.886279][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 205.896158][T11138] netlink: 'syz.6.1496': attribute type 9 has an invalid length. [ 205.898638][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 205.912289][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.916598][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.919405][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.925286][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.936544][T11140] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 206.041754][T11151] program syz.1.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.099679][T11153] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1502'. [ 206.192947][ T5856] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 206.238188][T11164] SELinux: policydb magic number 0x22867a99 does not match expected magic number 0xf97cff8c [ 206.242419][T11164] SELinux: failed to load policy [ 206.254167][T11164] usbip-vudc usbip-vudc.0: gadget not bound [ 206.279472][ T42] audit: type=1400 audit(1785628479.866:1173): avc: denied { setopt } for pid=11165 comm="syz.5.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 206.288170][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.291547][ T5758] Bluetooth: hci3: command 0x040f tx timeout [ 206.341037][ T5856] usb 11-1: Using ep0 maxpacket: 16 [ 206.345563][ T5856] usb 11-1: config 0 interface 0 has no altsetting 0 [ 206.351916][ T5856] usb 11-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 206.358993][ T5856] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.362918][ T5856] usb 11-1: Product: syz [ 206.364700][ T5856] usb 11-1: Manufacturer: syz [ 206.366257][ T5856] usb 11-1: SerialNumber: syz [ 206.369823][ T5856] usb 11-1: config 0 descriptor?? [ 206.464303][T11192] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 206.466923][T11192] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 206.470744][T11192] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 206.478558][T11192] 8021q: VLANs not supported on ip6gre0 [ 206.578210][ T5856] dvb_usb_dtv5100 11-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 206.585608][ T5856] usb 11-1: USB disconnect, device number 3 [ 206.663015][ T2116] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 206.790315][T11142] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 206.796671][T11143] gadgetfs: bound to dummy_udc driver [ 206.809644][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 206.823555][ T2116] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.827974][ T2116] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 206.831765][ T2116] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 206.835295][ T2116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.839943][ T2116] usb 6-1: config 0 descriptor?? [ 206.845147][ T2116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 206.847377][ T2116] dvb-usb: bulk message failed: -22 (3/0) [ 206.854494][ T2116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 206.858346][ T2116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 206.860590][ T2116] usb 6-1: media controller created [ 206.863123][ T2116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.868732][ T2116] dvb-usb: bulk message failed: -22 (6/0) [ 206.871708][ T2116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 206.875783][ T2116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input37 [ 206.881541][ T2116] dvb-usb: schedule remote query interval to 150 msecs. [ 206.883817][ T2116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 206.911484][ T41] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 207.041883][ T2116] dvb-usb: bulk message failed: -22 (1/0) [ 207.045834][ T2116] dvb-usb: error while querying for an remote control event. [ 207.056117][ T5826] usb 6-1: USB disconnect, device number 25 [ 207.073375][ T5826] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 207.075091][ T41] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 207.080181][ T41] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.085071][ T41] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.088158][ T41] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 207.093412][ T41] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 207.096816][ T41] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.099804][ T41] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.103090][ T41] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 207.108691][ T41] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 207.112348][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.115035][ T41] usb 10-1: Product: syz [ 207.116403][ T41] usb 10-1: Manufacturer: syz [ 207.117977][ T41] usb 10-1: SerialNumber: syz [ 207.123175][ T41] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 207.127971][ T41] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 207.132841][ T41] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 207.386206][ T2116] usb 10-1: USB disconnect, device number 14 [ 207.393728][ T2116] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 207.400590][ T2116] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 207.407061][ T2116] ti_usb_3410_5052 10-1:2.0: device disconnected [ 207.494440][ T42] audit: type=1400 audit(1785628481.085:1174): avc: denied { ioctl } for pid=11214 comm="syz.0.1521" path="socket:[43921]" dev="sockfs" ino=43921 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.503789][T11215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1521'. [ 207.507687][ T42] audit: type=1400 audit(1785628481.095:1175): avc: denied { write } for pid=11214 comm="syz.0.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 207.515724][ T42] audit: type=1400 audit(1785628481.095:1176): avc: denied { ioctl } for pid=11214 comm="syz.0.1521" path="socket:[45224]" dev="sockfs" ino=45224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 207.530947][T11215] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.1521:11215 [ 207.591558][T11221] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 207.628330][T11221] tmpfs: Bad value for 'mpol' [ 207.791123][ T42] audit: type=1804 audit(1785628481.375:1177): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1525" name="/newroot/377/file0/file1" dev="overlay" ino=2083 res=1 errno=0 [ 207.827188][ T42] audit: type=1400 audit(1785628481.415:1178): avc: denied { write } for pid=11230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.873521][ T42] audit: type=1400 audit(1785628481.465:1179): avc: denied { write } for pid=11235 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.954627][T11243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.954965][ T42] audit: type=1400 audit(1785628481.545:1180): avc: denied { write } for pid=11239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.982037][ T9686] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.985003][ T9686] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.987849][ T9686] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.003516][ T9686] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.030904][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1531'. [ 208.035154][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1531'. [ 208.048828][ T42] audit: type=1400 audit(1785628481.635:1181): avc: denied { write } for pid=11249 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.182758][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 208.362448][ T5743] Bluetooth: hci3: command 0x040f tx timeout [ 208.362528][ T5095] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.503109][T11274] binder: 11273:11274 ioctl c0306201 200000000640 returned -22 [ 208.506596][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'. [ 208.802205][ T5826] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 208.846651][ T5095] Bluetooth: hci4: command 0x1003 tx timeout [ 208.850172][ T5758] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 208.963171][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 208.970136][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.983380][ T5826] usb 1-1: config 5 has an invalid interface number: 63 but max is 2 [ 208.986947][ T5826] usb 1-1: config 5 has an invalid interface number: 56 but max is 2 [ 208.989669][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'. [ 208.998634][ T5826] usb 1-1: config 5 has an invalid interface number: 111 but max is 2 [ 209.002675][ T5826] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 209.006633][ T5826] usb 1-1: config 5 has no interface number 0 [ 209.009480][ T5826] usb 1-1: config 5 has no interface number 1 [ 209.019607][ T5826] usb 1-1: config 5 has no interface number 2 [ 209.024827][ T5826] usb 1-1: config 5 interface 63 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 209.038439][ T5826] usb 1-1: config 5 interface 63 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 209.048043][ T5826] usb 1-1: config 5 interface 63 altsetting 5 endpoint 0xD has an invalid bInterval 64, changing to 7 [ 209.057564][ T5826] usb 1-1: config 5 interface 63 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 209.063252][ T5826] usb 1-1: config 5 interface 56 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 209.067907][ T5826] usb 1-1: config 5 interface 56 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 209.074140][ T5826] usb 1-1: config 5 interface 56 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 209.078567][ T5826] usb 1-1: config 5 interface 56 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 209.084939][ T5826] usb 1-1: config 5 interface 56 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 209.089382][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 209.094213][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 209.098775][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 209.103807][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 209.108318][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 209.112773][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 209.117165][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 209.121623][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 209.126161][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 209.142465][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 209.146817][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 209.152551][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 209.153804][ T42] audit: type=1400 audit(1785628482.744:1182): avc: denied { write } for pid=11298 comm="syz.5.1547" name="naa.1234567890abcdef" dev="configfs" ino=31790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.153875][T11301] [ 209.153881][T11301] ====================================================== [ 209.153892][T11301] WARNING: possible circular locking dependency detected [ 209.153899][T11301] syzkaller #0 Tainted: G L [ 209.153905][T11301] ------------------------------------------------------ [ 209.153909][T11301] syz.5.1547/11301 is trying to acquire lock: [ 209.153915][T11301] ffff88802008a280 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 209.153994][T11301] [ 209.153994][T11301] but task is already holding lock: [ 209.153997][T11301] ffff88805d070d18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 209.154051][T11301] [ 209.154051][T11301] which lock already depends on the new lock. [ 209.154051][T11301] [ 209.154055][T11301] [ 209.154055][T11301] the existing dependency chain (in reverse order) is: [ 209.154059][T11301] [ 209.154059][T11301] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 209.154074][T11301] lock_acquire+0x1b9/0x370 [ 209.154105][T11301] __mutex_lock+0x1a4/0x1bd0 [ 209.154141][T11301] tcm_set_name+0x29/0xb0 [ 209.154150][T11301] function_make+0x21c/0x3f0 [ 209.154170][T11301] configfs_mkdir+0x51e/0xb70 [ 209.154183][T11301] vfs_mkdir+0x361/0x850 [ 209.154205][T11301] filename_mkdirat+0x48b/0x5e0 [ 209.154216][T11301] __x64_sys_mkdir+0x6b/0x90 [ 209.154242][T11301] do_syscall_64+0x115/0x870 [ 209.154255][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.154277][T11301] [ 209.154277][T11301] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 209.154293][T11301] lock_acquire+0x1b9/0x370 [ 209.154305][T11301] __mutex_lock+0x1a4/0x1bd0 [ 209.154316][T11301] configfs_rmdir+0x5ae/0x950 [ 209.154329][T11301] vfs_rmdir+0x328/0x8a0 [ 209.154342][T11301] filename_rmdir+0x31a/0x5c0 [ 209.154352][T11301] __x64_sys_rmdir+0x46/0x70 [ 209.154363][T11301] do_syscall_64+0x115/0x870 [ 209.154375][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.154385][T11301] [ 209.154385][T11301] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 209.154402][T11301] check_prev_add+0xeb/0xe60 [ 209.154413][T11301] __lock_acquire+0x136c/0x1a40 [ 209.154425][T11301] lock_acquire+0x1b9/0x370 [ 209.154436][T11301] down_write+0x8b/0x1f0 [ 209.154449][T11301] configfs_depend_item_unlocked+0xf3/0x6a0 [ 209.154462][T11301] usbg_make_tpg+0x261/0x620 [ 209.154472][T11301] target_fabric_make_tpg+0xab/0x8c0 [ 209.154499][T11301] configfs_mkdir+0x51e/0xb70 [ 209.154512][T11301] vfs_mkdir+0x361/0x850 [ 209.154525][T11301] filename_mkdirat+0x48b/0x5e0 [ 209.154535][T11301] __x64_sys_mkdir+0x6b/0x90 [ 209.154546][T11301] do_syscall_64+0x115/0x870 [ 209.154557][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.154567][T11301] [ 209.154567][T11301] other info that might help us debug this: [ 209.154567][T11301] [ 209.154571][T11301] Chain exists of: [ 209.154571][T11301] &sb->s_type->i_mutex_key#25 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 209.154571][T11301] [ 209.154592][T11301] Possible unsafe locking scenario: [ 209.154592][T11301] [ 209.154595][T11301] CPU0 CPU1 [ 209.154598][T11301] ---- ---- [ 209.154601][T11301] lock(&opts->dep_lock); [ 209.154608][T11301] lock(gadget_subsys.su_mutex); [ 209.154616][T11301] lock(&opts->dep_lock); [ 209.154624][T11301] lock(&sb->s_type->i_mutex_key#25); [ 209.154634][T11301] [ 209.154634][T11301] *** DEADLOCK *** [ 209.154634][T11301] [ 209.154637][T11301] 5 locks held by syz.5.1547/11301: [ 209.154643][T11301] #0: ffff8880244ae450 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 209.154689][T11301] #1: ffff88805746e500 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 209.154725][T11301] #2: ffffffff8fd88028 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 209.154753][T11301] #3: ffffffff90253340 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 209.154780][T11301] #4: ffff88805d070d18 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 209.154806][T11301] [ 209.154806][T11301] stack backtrace: [ 209.154814][T11301] CPU: 3 UID: 0 PID: 11301 Comm: syz.5.1547 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.154829][T11301] Tainted: [L]=SOFTLOCKUP [ 209.154833][T11301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.154840][T11301] Call Trace: [ 209.154857][T11301] [ 209.154861][T11301] dump_stack_lvl+0x100/0x190 [ 209.154886][T11301] print_circular_bug.cold+0x178/0x1c7 [ 209.154904][T11301] check_noncircular+0x146/0x160 [ 209.154917][T11301] check_prev_add+0xeb/0xe60 [ 209.154929][T11301] __lock_acquire+0x136c/0x1a40 [ 209.154943][T11301] ? rcu_is_watching+0x12/0xc0 [ 209.154983][T11301] lock_acquire+0x1b9/0x370 [ 209.154996][T11301] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 209.155010][T11301] ? __pfx___might_resched+0x10/0x10 [ 209.155030][T11301] down_write+0x8b/0x1f0 [ 209.155043][T11301] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 209.155057][T11301] ? __pfx_down_write+0x10/0x10 [ 209.155071][T11301] configfs_depend_item_unlocked+0xf3/0x6a0 [ 209.155085][T11301] ? __lock_acquire+0x49f/0x1a40 [ 209.155098][T11301] usbg_make_tpg+0x261/0x620 [ 209.155110][T11301] ? __pfx_usbg_make_tpg+0x10/0x10 [ 209.155122][T11301] ? find_held_lock+0x2b/0x80 [ 209.155130][T11301] ? __pfx_usbg_make_tpg+0x10/0x10 [ 209.155142][T11301] target_fabric_make_tpg+0xab/0x8c0 [ 209.155157][T11301] configfs_mkdir+0x51e/0xb70 [ 209.155171][T11301] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 209.155186][T11301] ? __pfx_configfs_mkdir+0x10/0x10 [ 209.155201][T11301] ? inode_permission+0x374/0x620 [ 209.155216][T11301] vfs_mkdir+0x361/0x850 [ 209.155231][T11301] filename_mkdirat+0x48b/0x5e0 [ 209.155242][T11301] ? __pfx_filename_mkdirat+0x10/0x10 [ 209.155254][T11301] ? strncpy_from_user+0x19d/0x2d0 [ 209.155290][T11301] ? do_getname+0x191/0x390 [ 209.155304][T11301] __x64_sys_mkdir+0x6b/0x90 [ 209.155315][T11301] do_syscall_64+0x115/0x870 [ 209.155327][T11301] ? clear_bhb_loop+0x40/0x90 [ 209.155339][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.155349][T11301] RIP: 0033:0x7f09b799e019 [ 209.155358][T11301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.155368][T11301] RSP: 002b:00007f09b5bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 209.155379][T11301] RAX: ffffffffffffffda RBX: 00007f09b7c26180 RCX: 00007f09b799e019 [ 209.155386][T11301] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 209.155393][T11301] RBP: 00007f09b7a3500c R08: 0000000000000000 R09: 0000000000000000 [ 209.155399][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.155405][T11301] R13: 00007f09b7c26218 R14: 00007f09b7c26180 R15: 00007ffcbd2a4988 [ 209.155415][T11301] [ 209.159152][ T5826] usb 1-1: config 5 interface 111 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 209.192181][T11304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58472 sclass=netlink_route_socket pid=11304 comm=syz.6.1546 [ 209.193159][ T5826] usb 1-1: config 5 interface 63 has no altsetting 0 [ 209.215766][T11304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=11304 comm=syz.6.1546 [ 209.216161][ T5826] usb 1-1: config 5 interface 56 has no altsetting 0 [ 209.442846][ T5826] usb 1-1: config 5 interface 111 has no altsetting 0 [ 209.446521][ T5826] usb 1-1: Dual-Role OTG device on HNP port [ 209.448798][ T5826] usb 1-1: New USB device found, idVendor=0403, idProduct=dc01, bcdDevice=f0.43 [ 209.451705][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.454336][ T5826] usb 1-1: Product: syz [ 209.455728][ T5826] usb 1-1: Manufacturer: syz [ 209.457260][ T5826] usb 1-1: SerialNumber: syz [ 210.443107][ T5758] Bluetooth: hci3: command 0x040f tx timeout [ 211.573803][ T5826] ftdi_sio 1-1:5.63: FTDI USB Serial Device converter detected [ 211.576662][ T5826] ftdi_sio ttyUSB0: unknown device type: 0xf043 [ 211.580925][ T5826] ftdi_sio 1-1:5.56: FTDI USB Serial Device converter detected [ 211.583977][ T5826] ftdi_sio ttyUSB1: unknown device type: 0xf043 [ 211.587746][ T5826] ftdi_sio 1-1:5.111: FTDI USB Serial Device converter detected [ 211.590766][ T5826] ftdi_sio ttyUSB2: unknown device type: 0xf043 [ 211.599575][ T5826] usb 1-1: USB disconnect, device number 13 [ 211.607696][ T5826] ftdi_sio 1-1:5.63: device disconnected [ 211.612630][ T5826] ftdi_sio 1-1:5.56: device disconnected [ 211.618709][ T5826] ftdi_sio 1-1:5.111: device disconnected [ 212.523949][ T5758] Bluetooth: hci3: command 0x040f tx timeout [ 214.605439][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.245339][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21110 ms [ 215.248111][ C1] sl0: transmit timed out, driver error?