last executing test programs: 4m41.391829506s ago: executing program 1 (id=18): r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/mcfilter\x00') r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000001080000", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r3, &(0x7f0000000d40)={0x14, 0x0, 0x0}, &(0x7f0000000fc0)={0x44, &(0x7f0000000d80)={0x0, 0x3, 0x5, "525f0028d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m36.68108149s ago: executing program 1 (id=30): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x73}}}}, [@chandef_params, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40000c4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000140)="7500e710", 0x4, 0x80, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0xa, 0x5, 0xfff, 0xf, 0x8, 0x9, 0x1001, 0x92e}}) clock_adjtime(0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) r7 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000300)={0x3, @pix={0x280, 0x1e0, 0x55595659, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000600)=0x1) 4m35.050182585s ago: executing program 1 (id=34): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a415159000020102030109022e0001010080320904"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x913, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40055}, 0x40040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x4}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc081}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000600)={0xa14, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x3, 0x48, 0x6c, 0x2, 0x30, 0x9, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x3149, 0x1, 0x8, 0x1, 0xffff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6, 0x1a0, 0xc3, 0x6, 0x1, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0xa}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x16, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x0, 0x824, 0x85, 0x2, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x80, 0xc18, 0x81, 0x2, 0x100, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9214, 0x8, 0x5, 0x6, 0x8, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xc1e, 0x8, 0xa3a, 0x40, 0x2, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x6, 0x8}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x2}, {0x5, 0x7}, {0x4, 0x9}, {0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x8, 0xa, 0x1, 0xffff, 0xb, 0xe2e2, 0x3]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x5, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x19}, {0x3}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {0x1}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x6, 0x2, 0xffff, 0x5, 0xd83, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x8}, {0x4, 0x3}, {0x7}, {0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x7, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9d8, 0x5, 0x6, 0x8, 0xc, 0x5, 0x382, 0xc000]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x7}, {0x7, 0x5}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0xa}, {0x6, 0xa}, {}, {0x0, 0x5}, {0x2}, {0x3}, {0x5, 0x2}, {0x0, 0x7}, {}, {0x7, 0x1}, {0x3, 0xa}, {0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x4, 0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x5, 0x5, 0x8, 0x9, 0x66, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x9, 0x3, 0x1ff, 0x601, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xa, 0x2, 0x24, 0x4a, 0x7, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x48, 0x6c, 0x0, 0x74, 0x60, 0x60, 0x41, 0x49, 0x6c, 0x24, 0x7, 0x36, 0x2, 0x6, 0x60, 0x5, 0x6c, 0x0, 0x1b, 0xb, 0x1, 0x6c, 0x1, 0x60, 0x6, 0x4, 0x18, 0x60, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x2}, {0x5, 0x3}, {0x3}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x8, 0x9, 0x4, 0x4, 0x3, 0xf47f]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x48, 0x16, 0x36, 0xf, 0x18, 0x30, 0x16, 0x6, 0x3]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0xb, 0x9, 0x1, 0x2, 0xc, 0x0, 0xb, 0x48, 0x1b, 0x1b, 0xc, 0x30, 0x36, 0x1b, 0x16, 0x24, 0x1, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xb50, 0xff80, 0x8, 0x4, 0x7, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x3ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x800, 0x341, 0x94c9, 0x3, 0xd, 0xd5c9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0x1b, 0xc, 0x12, 0xc, 0x3, 0x0, 0x1b, 0x1, 0x24, 0xc, 0x30, 0x1, 0xc, 0x5, 0x6, 0x9, 0x6c, 0x48, 0x48, 0x12, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x36, 0x4, 0x6c, 0x2, 0xc, 0x9, 0x2, 0x16, 0x1b, 0x6, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x4, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x7, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x1}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x3}, {}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x4}, {0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x7}, {0x3, 0x8}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x3, 0x5}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x3, 0xfff, 0x1400, 0x8, 0x2, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf3, 0x4, 0x5, 0x101, 0x46, 0xd7e3, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x3}, {0x4, 0x9}, {0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0xf}, {0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x2}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x7, 0x7}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x10, 0x5, 0x6, 0x4, 0x7, 0x7, 0xaf99]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x30, 0x2, 0x10, 0xffff, 0xc, 0x9]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x1, 0x2, 0x2, 0x6, 0x7844, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x969, 0x0, 0x4, 0x1, 0xaf8, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x2, 0x3, 0x7, 0x1, 0x3, 0x40, 0xf7f7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x1ff, 0x1, 0xa1f8, 0xdd1b, 0x5, 0x7fff]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x4}, {}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x1}, {0x4, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0xc, 0x3, 0x36, 0x9, 0xc, 0x60, 0x3c34ab64664e02cb, 0x2, 0x2, 0x30, 0x12, 0x36, 0x9, 0x1, 0x3, 0xb]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0xa}, {0x2, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x2}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x6}, {}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x18, 0x16, 0xb, 0x12, 0x63, 0x1b, 0x60, 0x24, 0x9, 0x18, 0x1, 0xb, 0x6c, 0x6, 0x12, 0xc, 0x18, 0x1b, 0x1, 0x60, 0x16, 0x36, 0x1b, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0x5, 0x60, 0x24, 0x24, 0x1b, 0x6, 0x48, 0x6, 0x12, 0x6, 0x1b, 0xb]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x4}, {0x4, 0x7}, {0x3, 0x7}, {0x1}, {0x2, 0x2}, {0x5}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x4}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x1}, {0x5, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d06, 0x1, 0xef, 0x0, 0x74b0, 0x6, 0x7ff, 0x3f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x7, 0x5, 0x1d, 0x10, 0x1, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x2, 0x8, 0x1, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffd, 0x1, 0x7f, 0x800, 0x9, 0x43, 0x5cb4]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x5, 0x12, 0x2, 0x18, 0x7e, 0x1b, 0x5, 0x24, 0x9, 0x68, 0x4, 0x1, 0xb, 0x2, 0x16, 0x5, 0x12, 0x6c, 0x6c, 0x17, 0x1, 0x6c, 0x30, 0x6, 0x18, 0x60, 0x60, 0x48, 0x69, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x8, 0x3, 0x8544, 0x1, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x0, 0x1, 0x7, 0x0, 0x3, 0x1, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8b2, 0x3, 0xfe, 0xe, 0x6, 0x6, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x12, 0x3, 0x6, 0x1, 0x36, 0x30, 0x24, 0x0, 0xb, 0x6, 0x5, 0x60, 0x5, 0x5, 0xc, 0x60, 0x12, 0x3, 0x4, 0x68, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xc, 0xc, 0x1b, 0xb, 0x48, 0x4, 0x1b, 0x1b, 0x24, 0x9, 0x6c, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x9, 0x6a18, 0xe5, 0x19b, 0x0, 0xfff7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc3, 0xfff8, 0x5, 0x0, 0x1, 0x5, 0x7, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x7}, {0x2, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3d, 0xb, 0x9, 0x60, 0xb, 0x30, 0xb, 0x5, 0x1b, 0x9, 0xb, 0x12, 0x12, 0x2, 0x1b, 0x36, 0x24, 0x9, 0x9, 0x24, 0x3, 0x4]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x19, 0x2, 0x1, 0x6, 0xfff7, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0xb, 0x30, 0x48, 0x12, 0x6, 0x1b, 0x48, 0x16, 0x16, 0x5]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xd26e, 0x40, 0x81, 0x6, 0x7, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb, 0xe4, 0x5a2, 0x7, 0x43, 0xac, 0xd0d]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xd20f, 0x8, 0x3, 0xfffb, 0x401, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x1}, {0x3, 0x7}, {}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x1}, {0x3, 0x3}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0x5}, {0x4}, {0x0, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x5}, {}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x3}, {0x2, 0x4}, {0x4, 0xa}, {0x0, 0x13}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x1}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0x6, 0xc0c, 0xffff, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x12a, 0x101, 0xb, 0x9, 0x1, 0xc, 0x7, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x18, 0x9, 0x0, 0x4, 0xcf, 0x184a, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x6, 0x12, 0xb, 0xa, 0x36, 0xb, 0x36, 0x24, 0x16, 0x9, 0x24, 0x6, 0x58, 0x4, 0x30, 0x1, 0x9, 0x1b, 0x24, 0x1, 0x2, 0xb, 0x24, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xd, 0xfff, 0x9, 0xfff8, 0x80, 0x4000]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0xa}, {0x7, 0xa}, {}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0xc, 0x4, 0xb, 0x4, 0x12, 0x48, 0x4, 0x30, 0x24, 0x1, 0x9, 0x12, 0x16, 0x2, 0x12, 0x18, 0x6, 0x1, 0x36, 0x0, 0x30]}]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0xc010}, 0x10) 4m32.285016827s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x8e000) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000020"], 0x24}}, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000d00)={0x2020}, 0x2020) 4m29.548510537s ago: executing program 1 (id=46): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0000b0a1dd253364cd36000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000180)="f2add5", 0x3}, {&(0x7f0000000540)="518031202cf03c2405afe1fc9234647d5716cdc3bb6f0f8764c86a57c2b12564934e16f99d2c034443877f248f7c7070a9530f1ac9f6e432", 0x38}], 0x2) 4m28.873424143s ago: executing program 1 (id=52): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r0, 0x540a, 0x2000000) 4m28.663432003s ago: executing program 32 (id=52): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r0, 0x540a, 0x2000000) 2m47.12183779s ago: executing program 0 (id=340): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x49, 0x0, &(0x7f0000000100)) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000680)={0x2, &(0x7f00000006c0)=[{0x8, '\x00', @buffer={"d9aecc7e5d0fcaf161b063556cfb1f56773be03a9f35d3146825213c689000c5", 0x20}, 0x12}, {0x16, '\x00', @data=0x42fb6, 0x100}]}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x80000}) 2m46.864111792s ago: executing program 0 (id=344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) getpeername(r0, 0x0, &(0x7f00000002c0)) write(r0, &(0x7f0000000000)="3f000000010040", 0x7) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000008732b1300400001020301090269000301f40006080b000201002040090400000001012000092401030006d10013090401000001022000090401010101022000090501090800030509082501030f0c080009040200000102200009040201010102200009058209200007ff4c082501810f400500"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) open(0x0, 0x240000, 0x10a) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={0x0, 0x56, 0x8d}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha512_mb\x00'}}, &(0x7f00000001c0)="b58aced3377b424f973aef53dba22d65f68acaed46fab12c364165918d75c66e24b84b65eb867f09bd486e05935d3580069b40312b7b276f46f78b11627d9116411ea17422ccfbfb553c67b8727542ec9a9fbed03554", &(0x7f0000000300)=""/141) 2m43.960952586s ago: executing program 0 (id=353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 2m43.258414201s ago: executing program 0 (id=354): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m43.045418687s ago: executing program 0 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="6d6561730000010000000000", 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000340)={'c6xdigio\x00', [0x100, 0x6, 0x13600, 0x6, 0x3, 0x10006, 0xf9, 0x40003, 0x80008, 0x7, 0x2, 0x1, 0x7, 0x800, 0x6, 0xfd, 0x7, 0x80000000, 0x400, 0x7fffffff, 0xb740, 0xca9e, 0xc, 0x20401e58, 0x8, 0xf39e, 0xb, 0x100, 0x9, 0x1, 0x2]}) 2m41.025857048s ago: executing program 0 (id=363): epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1c, &(0x7f0000000100)={[0x3]}, 0xfffffffffffffe92) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYRES8=r0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x20000000, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) r4 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000005c0)='\x00', 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x30}, {&(0x7f00000010c0)=ANY=[], 0x1fc}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="11c9064268e957a7", 0x8}], 0x1}, 0x40) syz_usb_connect(0x1, 0x155, &(0x7f0000000d80)=ANY=[@ANYBLOB="120100039f706220450c8262d6e70102030109024301020101800409046caa02655a2c0909050404100001790409050e0060000c04070725010009be8d07250100f904000904c97f0b1bd710e90a2401010026000201020924830300010104ff0724050503488a0c240202040202017f0002000a2402010204010aee400905034200000905830725010830010109050d1020005709043404eddc48d6ea9ec62ae40d14118f4606a4247a4ea91525958cea816a60426d8bb2137a40586817c8fba21effcff0d691f30adf27bb614dd9192dd2268d5345df007907250108070500090505001000ffd30f090508032000260acf09050302480005180409050400"], &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5, 0x3, 0x5, 0x8, 0x6}, 0x78, 0x0, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x861}}, {0xd4, &(0x7f0000000400)=ANY=[@ANYBLOB="d403ae2d0056d71762e230b20fc83c4b7d0929a3587cbdabb27e5e053deb6e136e2e407cd160ecbb6f4927297f375ba2cfca72e763c3352cf8ff4136807931dc6289846022f424141bf1ccd0e83e973f17e8335cc8d074a2d828ff975c75e11a33d119cbe7c66f514160e900b50a09e55edfb8598be76ee00f896ca78c69fd8d4902451e409ee3c37e954139e2a771ad8e282ec00bd95f635268bd07"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x80b}}, {0xba, &(0x7f0000000880)=ANY=[@ANYBLOB="ba030fbe063409534beb0ee5e41f91d5a5e281f713a5fc348d84737c75468e2c40ce35d2e327c5f1b0e6ede8cb3c8127e45a1eb76f1e365bcb0f6dcc2670944b11ec9d8d2306dfeb345068d6242f453f09e73d2ab4475ba23253788a1a1e348f868cdbde7d155c28abb5a30bf0a568ab24dd6a2e2107b832b4d368a5657b580accbdd4da866dd65e07845069ed3deae683175e14cd21bbfb0f385be5f06481e1d601908003126a0da6b5f61f52e89eb43ed9ca795a9abcfad6d4"]}, {0xa5, &(0x7f0000000940)=ANY=[@ANYBLOB="a503e2ce9b2a4b9789e5a8fc12bf9b271400caab6242a89c6ac1f2f488b8596b7e33bdd9792a42f9928236a2ea9ff684030685f31f6dbdd1f4e6d16c77e6151b5f5fa55cfb24f2d1f4b05fef529b00879ba60d45fe8e6cf4fe9d4200b9fa57846b825992b930e90b9d907c7aa54bba724ee8019da1fc748c34d3402496c192da1e8935843d39bfd0a64c00e2d5f05b0a1c6fb35024ef2e5469db63dfd3281b81"]}, {0xa4, &(0x7f0000000a00)=ANY=[@ANYBLOB="a4036800c65c0f8bd230c5ee577651ab5573c3aeab01a5e3795395ab7bb5819004386b427d10b3236ea5fb63487b7f8d05cbdc9bf3f264d81b7d67b7e40419831749e47a4794feb5bad768459936bd790353a18d20e6d281db6cfed733fede954b678ce3156c8bb6fef84faa9f10cd23c0887c91fdc7c9a40c73df8305ed29167d794b5f9b172256f8c83502f8b8c926bc101777dbcc466831922fb4b32b471c54464f23"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x436}}]}) 2m25.5971842s ago: executing program 33 (id=363): epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1c, &(0x7f0000000100)={[0x3]}, 0xfffffffffffffe92) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYRES8=r0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x20000000, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) r4 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000005c0)='\x00', 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x30}, {&(0x7f00000010c0)=ANY=[], 0x1fc}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="11c9064268e957a7", 0x8}], 0x1}, 0x40) syz_usb_connect(0x1, 0x155, &(0x7f0000000d80)=ANY=[@ANYBLOB="120100039f706220450c8262d6e70102030109024301020101800409046caa02655a2c0909050404100001790409050e0060000c04070725010009be8d07250100f904000904c97f0b1bd710e90a2401010026000201020924830300010104ff0724050503488a0c240202040202017f0002000a2402010204010aee400905034200000905830725010830010109050d1020005709043404eddc48d6ea9ec62ae40d14118f4606a4247a4ea91525958cea816a60426d8bb2137a40586817c8fba21effcff0d691f30adf27bb614dd9192dd2268d5345df007907250108070500090505001000ffd30f090508032000260acf09050302480005180409050400"], &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5, 0x3, 0x5, 0x8, 0x6}, 0x78, 0x0, 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x861}}, {0xd4, &(0x7f0000000400)=ANY=[@ANYBLOB="d403ae2d0056d71762e230b20fc83c4b7d0929a3587cbdabb27e5e053deb6e136e2e407cd160ecbb6f4927297f375ba2cfca72e763c3352cf8ff4136807931dc6289846022f424141bf1ccd0e83e973f17e8335cc8d074a2d828ff975c75e11a33d119cbe7c66f514160e900b50a09e55edfb8598be76ee00f896ca78c69fd8d4902451e409ee3c37e954139e2a771ad8e282ec00bd95f635268bd07"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x80b}}, {0xba, &(0x7f0000000880)=ANY=[@ANYBLOB="ba030fbe063409534beb0ee5e41f91d5a5e281f713a5fc348d84737c75468e2c40ce35d2e327c5f1b0e6ede8cb3c8127e45a1eb76f1e365bcb0f6dcc2670944b11ec9d8d2306dfeb345068d6242f453f09e73d2ab4475ba23253788a1a1e348f868cdbde7d155c28abb5a30bf0a568ab24dd6a2e2107b832b4d368a5657b580accbdd4da866dd65e07845069ed3deae683175e14cd21bbfb0f385be5f06481e1d601908003126a0da6b5f61f52e89eb43ed9ca795a9abcfad6d4"]}, {0xa5, &(0x7f0000000940)=ANY=[@ANYBLOB="a503e2ce9b2a4b9789e5a8fc12bf9b271400caab6242a89c6ac1f2f488b8596b7e33bdd9792a42f9928236a2ea9ff684030685f31f6dbdd1f4e6d16c77e6151b5f5fa55cfb24f2d1f4b05fef529b00879ba60d45fe8e6cf4fe9d4200b9fa57846b825992b930e90b9d907c7aa54bba724ee8019da1fc748c34d3402496c192da1e8935843d39bfd0a64c00e2d5f05b0a1c6fb35024ef2e5469db63dfd3281b81"]}, {0xa4, &(0x7f0000000a00)=ANY=[@ANYBLOB="a4036800c65c0f8bd230c5ee577651ab5573c3aeab01a5e3795395ab7bb5819004386b427d10b3236ea5fb63487b7f8d05cbdc9bf3f264d81b7d67b7e40419831749e47a4794feb5bad768459936bd790353a18d20e6d281db6cfed733fede954b678ce3156c8bb6fef84faa9f10cd23c0887c91fdc7c9a40c73df8305ed29167d794b5f9b172256f8c83502f8b8c926bc101777dbcc466831922fb4b32b471c54464f23"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x436}}]}) 1m47.89238764s ago: executing program 5 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0xca033, 0xffffffffffffffff, 0xbd837000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000140)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) read(r4, &(0x7f00000002c0)=""/10, 0x5b) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x12) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x260, 0x168, 0x10, 0x190, 0xb, 0x260, 0x250, 0x250, 0x260, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffffff], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0xd0, 0x138, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r', 0x80}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0x2, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xffffffff, 0x0, 0xffffffff, 0xff], 'dummy0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x21, 0xff, 0x1, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) syz_emit_ethernet(0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaca05d2caa008863"], 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r8, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x44, &(0x7f0000000040)={0x0, 0x0}, 0x10) 1m46.509809835s ago: executing program 5 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) read$FUSE(r0, &(0x7f00000086c0)={0x2020}, 0x2020) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) fstat(r1, 0x0) read(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x23000000, 0x0) 1m46.086786306s ago: executing program 5 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000340)="d28a08d988a88d8bf2f08c8286ddabc56e2ba393c67c417b042a26b2a440f555eeea83dd63938772f47336f55b88e1eb45370266cdec", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1m44.254327099s ago: executing program 5 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1m42.951504928s ago: executing program 5 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="6d656173000001000000000031", 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000340)={'c6xdigio\x00', [0x100, 0x6, 0x13600, 0x6, 0x3, 0x10006, 0xf9, 0x40003, 0x80008, 0x7, 0x2, 0x1, 0x7, 0x800, 0x6, 0xfd, 0x7, 0x80000000, 0x400, 0x7fffffff, 0xb740, 0xca9e, 0xc, 0x20401e58, 0x8, 0xf39e, 0xb, 0x100, 0x9, 0x1, 0x2]}) 1m42.192369202s ago: executing program 5 (id=487): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}]}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000002c0)={0x2, 0x1000, 0x1}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x3fffffffd, 0x80000001, 0x0, 0xfffffffffffffffd, 0x40000, 0xffffffff}, {0x0, 0x4}, 0x0, 0x6e6bb6}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x0, @in6=@loopback, 0x3503, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x200003}}, 0xe8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000000c0)={0x763bf26aa405d86c, 0x100000, 0xfffffffd, 0x1, 0x9}) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0xd00, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f07917100074100000000000000"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) 1m26.34926402s ago: executing program 34 (id=487): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}]}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000002c0)={0x2, 0x1000, 0x1}) r2 = socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x3fffffffd, 0x80000001, 0x0, 0xfffffffffffffffd, 0x40000, 0xffffffff}, {0x0, 0x4}, 0x0, 0x6e6bb6}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x0, @in6=@loopback, 0x3503, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x200003}}, 0xe8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000000c0)={0x763bf26aa405d86c, 0x100000, 0xfffffffd, 0x1, 0x9}) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0xd00, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f07917100074100000000000000"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) 4.237651655s ago: executing program 3 (id=819): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x200000) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20942, 0x56) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) sendfile(r0, r0, 0x0, 0x4ba5) 4.143792478s ago: executing program 4 (id=821): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000007600)=[{&(0x7f0000007440)=""/192, 0xc0}], 0x1) 4.067083069s ago: executing program 3 (id=824): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000500)={0x90, 0x0, r1, {0x20000000000007, 0x0, 0xe, 0xfa7, 0x0, 0xfffff801, {0x2, 0x3fc, 0x20e, 0x6, 0x10000, 0x0, 0x77ff, 0x7, 0x4, 0x0, 0x7, r2, r3, 0x5, 0x1000}}}, 0x90) 3.931127303s ago: executing program 4 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc00) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) sendfile(0xffffffffffffffff, r0, 0x0, 0xc00) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0x20000) sendfile(r3, r0, 0x0, 0x20000) 3.741007491s ago: executing program 3 (id=831): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) mknod(&(0x7f0000000080)='./bus\x00', 0x1024, 0x1000000) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) read$FUSE(r0, &(0x7f0000002a00)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x5e}, 0xffd3) 3.550466824s ago: executing program 7 (id=835): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.537249523s ago: executing program 6 (id=836): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="93", 0x1}], 0x1) 3.505380695s ago: executing program 2 (id=837): r0 = io_uring_setup(0x2fe5, &(0x7f0000000100)={0x0, 0x341, 0x0, 0x80001, 0x80059}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 3.448921126s ago: executing program 4 (id=838): io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f0000002900)=[{0x0, &(0x7f0000000180)="a14f", 0x3, 0x2}], 0x0) 3.433295726s ago: executing program 6 (id=839): mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x18) 3.404726185s ago: executing program 2 (id=840): r0 = io_uring_setup(0x27e3, &(0x7f0000000400)={0x0, 0xd320, 0x800, 0x2, 0x1a0}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) 3.372721758s ago: executing program 7 (id=841): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) 3.313339318s ago: executing program 4 (id=842): r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x28002011}) dup3(r1, r0, 0x0) 3.31126322s ago: executing program 6 (id=843): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.258092903s ago: executing program 2 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='100', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='1', 0x1) 3.255704628s ago: executing program 7 (id=845): mount$bpf(0x0, 0x0, 0x0, 0x400, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0xfffffffffffffffc}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') writev(r0, &(0x7f00000003c0), 0x100000000000022d) 3.179446746s ago: executing program 7 (id=846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.165610099s ago: executing program 4 (id=847): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x8004b706, 0x0) 3.148078889s ago: executing program 6 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='s', 0x1) 3.056857016s ago: executing program 4 (id=849): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a415159000020102030109022e0001010080320904"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x913, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40055}, 0x40040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x4}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc081}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000600)={0xda0, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x3, 0x48, 0x6c, 0x2, 0x30, 0x9, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x3149, 0x1, 0x8, 0x1, 0xffff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6, 0x1a0, 0xc3, 0x6, 0x1, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0xa}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x16, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x0, 0x824, 0x85, 0x2, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x80, 0xc18, 0x81, 0x2, 0x100, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9214, 0x8, 0x5, 0x6, 0x8, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xc1e, 0x8, 0xa3a, 0x40, 0x2, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x6, 0x8}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x1}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x2}, {0x5, 0x7}, {0x4, 0x9}, {0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x8, 0xa, 0x1, 0xffff, 0xb, 0xe2e2, 0x3]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x5, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x19}, {0x3}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {0x1}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x6, 0x2, 0xffff, 0x5, 0xd83, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x8}, {0x4, 0x3}, {0x7}, {0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x7, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9d8, 0x5, 0x6, 0x8, 0xc, 0x5, 0x382, 0xc000]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x7}, {0x7, 0x5}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0xa}, {0x6, 0xa}, {}, {0x0, 0x5}, {0x2}, {0x3}, {0x5, 0x2}, {0x0, 0x7}, {}, {0x7, 0x1}, {0x3, 0xa}, {0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x4, 0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x0, 0x5, 0x5, 0x8, 0x9, 0x66, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x9, 0x3, 0x1ff, 0x601, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xa, 0x2, 0x24, 0x4a, 0x7, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x48, 0x6c, 0x0, 0x74, 0x60, 0x60, 0x41, 0x49, 0x6c, 0x24, 0x7, 0x36, 0x2, 0x6, 0x60, 0x5, 0x6c, 0x0, 0x1b, 0xb, 0x1, 0x6c, 0x1, 0x60, 0x6, 0x4, 0x18, 0x60, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x2}, {0x5, 0x3}, {0x3}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0x8, 0x9, 0x4, 0x4, 0x3, 0xf47f]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x48, 0x16, 0x36, 0xf, 0x18, 0x30, 0x16, 0x6, 0x3]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0xb, 0x9, 0x1, 0x2, 0xc, 0x0, 0xb, 0x48, 0x1b, 0x1b, 0xc, 0x30, 0x36, 0x1b, 0x16, 0x24, 0x1, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xb50, 0xff80, 0x8, 0x4, 0x7, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x3ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x800, 0x341, 0x94c9, 0x3, 0xd, 0xd5c9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x36, 0x1b, 0xc, 0x12, 0xc, 0x3, 0x0, 0x1b, 0x1, 0x24, 0xc, 0x30, 0x1, 0xc, 0x5, 0x6, 0x9, 0x6c, 0x48, 0x48, 0x12, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x36, 0x4, 0x6c, 0x2, 0xc, 0x9, 0x2, 0x16, 0x1b, 0x6, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x4, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x7, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x1}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x3}, {}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x4}, {0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x7}, {0x3, 0x8}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x3, 0x5}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x3, 0xfff, 0x1400, 0x8, 0x2, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf3, 0x4, 0x5, 0x101, 0x46, 0xd7e3, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x3}, {0x4, 0x9}, {0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0xf}, {0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x3}, {0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x2}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x7, 0x7}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x10, 0x5, 0x6, 0x4, 0x7, 0x7, 0xaf99]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x30, 0x2, 0x10, 0xffff, 0xc, 0x9]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x1, 0x2, 0x2, 0x6, 0x7844, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x969, 0x0, 0x4, 0x1, 0xaf8, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x2, 0x3, 0x7, 0x1, 0x3, 0x40, 0xf7f7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x1ff, 0x1, 0xa1f8, 0xdd1b, 0x5, 0x7fff]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0xa}, {0x4, 0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x4}, {}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x1}, {0x4, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0xc, 0x3, 0x36, 0x9, 0xc, 0x60, 0x3c34ab64664e02cb, 0x2, 0x2, 0x30, 0x12, 0x36, 0x9, 0x1, 0x3, 0xb]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0xa}, {0x2, 0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x2}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x5, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x6}, {}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x18, 0x16, 0xb, 0x12, 0x63, 0x1b, 0x60, 0x24, 0x9, 0x18, 0x1, 0xb, 0x6c, 0x6, 0x12, 0xc, 0x18, 0x1b, 0x1, 0x60, 0x16, 0x36, 0x1b, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0x5, 0x60, 0x24, 0x24, 0x1b, 0x6, 0x48, 0x6, 0x12, 0x6, 0x1b, 0xb]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x4}, {0x4, 0x7}, {0x3, 0x7}, {0x1}, {0x2, 0x2}, {0x5}, {0x6, 0x6}, {0x1, 0x8}, {0x1, 0x4}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x1}, {0x5, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d06, 0x1, 0xef, 0x0, 0x74b0, 0x6, 0x7ff, 0x3f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x7, 0x5, 0x1d, 0x10, 0x1, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x2, 0x8, 0x1, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffd, 0x1, 0x7f, 0x800, 0x9, 0x43, 0x5cb4]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x5, 0x12, 0x2, 0x18, 0x7e, 0x1b, 0x5, 0x24, 0x9, 0x68, 0x4, 0x1, 0xb, 0x2, 0x16, 0x5, 0x12, 0x6c, 0x6c, 0x17, 0x1, 0x6c, 0x30, 0x6, 0x18, 0x60, 0x60, 0x48, 0x69, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff7, 0x8, 0x3, 0x8544, 0x1, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x0, 0x1, 0x7, 0x0, 0x3, 0x1, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8b2, 0x3, 0xfe, 0xe, 0x6, 0x6, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x12, 0x3, 0x6, 0x1, 0x36, 0x30, 0x24, 0x0, 0xb, 0x6, 0x5, 0x60, 0x5, 0x5, 0xc, 0x60, 0x12, 0x3, 0x4, 0x68, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xc, 0xc, 0x1b, 0xb, 0x48, 0x4, 0x1b, 0x1b, 0x24, 0x9, 0x6c, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x9, 0x6a18, 0xe5, 0x19b, 0x0, 0xfff7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc3, 0xfff8, 0x5, 0x0, 0x1, 0x5, 0x7, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x7}, {0x2, 0x6}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x390, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x22, 0x24, 0x48, 0x18, 0x989b672edb124373, 0x12, 0x1b, 0x6, 0x3, 0x30, 0x7464395f9dac46e0, 0x3, 0xc, 0x9, 0x18, 0xc, 0x1, 0x16, 0x30, 0x4, 0x5, 0xb, 0x30, 0x18, 0x0, 0x16, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x12, 0x36, 0x0, 0x16, 0x36, 0x36, 0x30, 0x2, 0x1, 0x2, 0xb, 0x36, 0x6c, 0x48, 0x1b, 0x4, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf44d, 0x2202, 0xfffa, 0xd219, 0xa8, 0x6, 0x7]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x9, 0x18, 0x60, 0x6c, 0x18, 0x9, 0x6c, 0x24, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7ff, 0x6, 0x6, 0x7, 0xd9, 0xe, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x4e, 0x1, 0x0, 0xffff, 0x53d5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2}, {0x3, 0x7}, {0x5, 0x3}, {0x3, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x3}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0xa}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x2}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x3}, {0x7}, {0x0, 0x2}, {0x6, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0xa}, {0x4, 0x2}, {0x3, 0x6}, {0x3, 0x4}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x1}, {0x4, 0x11}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x2}, {0x6, 0xa}, {0x3, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x73cb43c5db8fcb81, 0x36, 0x3, 0x60, 0x60, 0x39, 0x3, 0x1, 0x2, 0x1b, 0x0, 0x24, 0x36, 0x1, 0x36, 0x0, 0x4, 0x1, 0x6c, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x6}, {0x4, 0x6}, {0x7, 0x4}, {0x7}, {0x4}, {0x4, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x7}, {}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0x6}, {0x3}, {}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5e7, 0x6, 0x3, 0xfc, 0x7, 0x8, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x6c, 0x9, 0x30, 0x48, 0x18, 0x56, 0x1b, 0x1b, 0x16, 0x4, 0x9, 0x4, 0x4, 0x12, 0x30, 0x6, 0x24, 0x9, 0x5, 0x18, 0x6c, 0x60, 0x18, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x9, 0x13, 0x101, 0x2, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0xa, 0x7ff, 0x5, 0xf800, 0x6b64, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x4, 0x5, 0x30, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x25, 0x48, 0x3, 0x9, 0x30, 0x48, 0x6c, 0x1c, 0x6c, 0x1b, 0x16, 0x24, 0x36, 0x5a, 0x24, 0x1, 0x5, 0x18, 0x36, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0xa}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x668, 0x3879, 0x2, 0x100, 0x102, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x400, 0x4, 0x6, 0x3, 0x2, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x6, 0x3}, {0x6, 0x9}, {0x2}, {0x5}, {0x7, 0x6}, {0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0xa}, {0x0, 0x4}, {}, {0x1, 0x9}, {0x5, 0xa}, {0x7, 0x5}, {0x7, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x48, 0xb, 0xb, 0x60, 0x30, 0x36, 0x4, 0x24, 0xc, 0x18, 0x31, 0x2, 0x36, 0x18, 0xc, 0x6, 0x2, 0x24, 0x36, 0x2, 0x3, 0x3, 0x48, 0x12, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x1}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x6, 0xc, 0x2, 0x2, 0x18, 0x5, 0x2, 0x1b, 0x4, 0x1b, 0x12, 0x9, 0x4, 0x1b, 0x0, 0x1b, 0x36, 0x5, 0xb, 0x6c, 0x6c, 0x48, 0x36, 0x6c]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x3, 0x3}, {0x7, 0x7}, {0x7}, {0x7, 0x4}, {0x7}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x8}, {0x7}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x5, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3d, 0xb, 0x9, 0x60, 0xb, 0x30, 0xb, 0x5, 0x1b, 0x9, 0xb, 0x12, 0x12, 0x2, 0x1b, 0x36, 0x24, 0x9, 0x9, 0x24, 0x3, 0x4]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x19, 0x2, 0x1, 0x6, 0xfff7, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0xb, 0x30, 0x48, 0x12, 0x6, 0x1b, 0x48, 0x16, 0x16, 0x5]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xd26e, 0x40, 0x81, 0x6, 0x7, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb, 0xe4, 0x5a2, 0x7, 0x43, 0xac, 0xd0d]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xd20f, 0x8, 0x3, 0xfffb, 0x401, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x1}, {0x3, 0x7}, {}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x1}, {0x3, 0x3}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0x5}, {0x4}, {0x0, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x3}, {0x4, 0x6}, {0x4, 0x3}, {0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x5}, {}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x3}, {0x2, 0x4}, {0x4, 0xa}, {0x0, 0x13}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x1}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0x6, 0xc0c, 0xffff, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x12a, 0x101, 0xb, 0x9, 0x1, 0xc, 0x7, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x18, 0x9, 0x0, 0x4, 0xcf, 0x184a, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x6, 0x12, 0xb, 0xa, 0x36, 0xb, 0x36, 0x24, 0x16, 0x9, 0x24, 0x6, 0x58, 0x4, 0x30, 0x1, 0x9, 0x1b, 0x24, 0x1, 0x2, 0xb, 0x24, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xd, 0xfff, 0x9, 0xfff8, 0x80, 0x4000]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0xa}, {0x7, 0xa}, {}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0xc, 0x4, 0xb, 0x4, 0x12, 0x48, 0x4, 0x30, 0x24, 0x1, 0x9, 0x12, 0x16, 0x2, 0x12, 0x18, 0x6, 0x1, 0x36, 0x0, 0x30]}]}]}]}, 0xda0}, 0x1, 0x0, 0x0, 0xc010}, 0x10) 3.053249716s ago: executing program 7 (id=850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001600010028bdf100fedbdf350a107100", @ANYRES32, @ANYBLOB="08000900c0000000"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffe0}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b0000000000050000001400050020010000000000000000010000"], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) write$sndseq(r0, &(0x7f0000000740)=[{0x84, 0x77, 0x1, 0x0, @time={0x2, 0x320}, {0x0, 0x2}, {}, @raw32={[0x3]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x246101, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'hsr0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xe, &(0x7f0000001700)=ANY=[@ANYRES16=r6], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000009000000182a", @ANYRES32=r2, @ANYBLOB="00002000f2ffffff00000000"], 0x0, 0x5, 0xe6, &(0x7f00000003c0)=""/230, 0x40f00, 0x28, '\x00', r5, @netfilter=0x2d, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x8, &(0x7f0000000580)=[r2, r2, r2, r2, r2, r2, r9, r2, r2], &(0x7f00000005c0)=[{0x1, 0x4, 0x7, 0x9}, {0x3, 0x4, 0xe}, {0x2, 0x1, 0x3, 0x1}, {0x0, 0x5, 0xd, 0xb}, {0x5, 0x3, 0xc, 0x3}, {0x4, 0x2, 0x10, 0x8}, {0x2, 0x1, 0xe, 0x1}, {0x2, 0x3, 0x7, 0x3}], 0x10, 0xcdd}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) 3.041721902s ago: executing program 6 (id=851): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = timerfd_create(0x1, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r6, &(0x7f0000000280)=""/134, 0x86) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)}}, {{&(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)="7abcc29a3fd80c1867a92462ab674025b95c31951ab860b9961e137b6f68e90ed9a36d0262b78ddd15c8625b555250de918581a029af7a5eb465fc58eecf1eed87d3421f7315b9d572c7e4c98c278b5306e7c3e03fafebd588579ccb76fa79c7e7f88d4f008133c342b15fee2bb23efa3fa4c04844dc84b68227c1e9f15adf706d2999b2e939f93f34cf8bc5884c99153f0abff81d173768264ed85f003eda1d1ef27e0fd3e37352426cefe89081fdd27fe41185fdac28718efe74762ab6712ee880f7e4212a48760d9dd51387ae04e5108caac2b06b029886", 0xfffffffffffffe2f}], 0x2}}], 0x2, 0x20000000) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="922b"], 0x9) socket$inet_smc(0x2b, 0x1, 0x0) 2.120736914s ago: executing program 6 (id=852): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$join(0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xe000, 0xcb, 0x401, 0x400, 0x0, [{0xdc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3, '\x00', 0x98}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xb, 0x8, '\x00', 0x10}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0xe5}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0x8, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0xa6}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) syz_open_dev$video(0x0, 0x8, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 2.053827156s ago: executing program 3 (id=853): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) socket(0x10, 0x3, 0x0) write$UHID_INPUT(r2, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 2.047908137s ago: executing program 2 (id=854): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) getrlimit(0xe, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000480), 0x101, 0x541000) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0xf, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="00724b146c196a37c26c000935eba1", 0x0, 0x400000, 0x10011, 0x1, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)='Y', 0x8678}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000050000010000000c030000000001000a000000"], 0x20}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 1.146284138s ago: executing program 3 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x290242, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000000201040006000000000000000000005a241cc631a1bcded884a1036d8551a8dace73638d68cc0599284b49cbff69f80b5b53526ca11641b5886e424ecbfb335a04c5a2307b26f6daa8e4e59d"], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60) 1.012806415s ago: executing program 2 (id=856): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000faaf499ce711af231687e562b27a1b88e8e8f55facd435f69485c63dbfbd7d659d6de9f4f63a6fae05f9c27ccc638a78c07e08508a298216e51ffc61be32e3c2277f454393a619"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x40000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) write(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r4, 0x0, r3, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x1b) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="9f001800000000000000240200000000000000000000080000000100000d0500010002000000030000005600000009000000000000100200000000300000cf0000002e00"], 0x0, 0x46, 0x0, 0x6}, 0x28) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000f00008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) recvfrom$phonet(r7, &(0x7f0000000180)=""/88, 0x58, 0x40, &(0x7f0000000280)={0x23, 0x26, 0xa9, 0x5}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000200)=0x6a) 352.131624ms ago: executing program 7 (id=857): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83200000c6010500240012800b00010067656e65766500001400028005000c000200000008000100010000d1"], 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a7256", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x0, 0x3}, &(0x7f000009de80), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="d700000020000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f61147c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) write$P9_RREADDIR(r5, &(0x7f0000000f80)={0xb, 0x29, 0x2, {0x10}}, 0xb) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000040)="2e9b3d0007e03cd65193a1e93daca63c86dd", 0x12}, {&(0x7f00000001c0)="d78d31402b512b3ead7c3bfa33d1853aa5b677db45ff1ee865a083dc64cc43d1be7a1e6e7109511d2fc5", 0x658}], 0x2) close_range(r0, r0, 0xe50c018f026da14b) ioctl$FIOCLEX(r1, 0x5451) 119.561425ms ago: executing program 3 (id=858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x88}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@svm={0x4, 0x1, 0x1080, {0x70000}, {"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"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x9, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x7}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x40000000000f) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000140)=r7) ioctl(r0, 0x8, &(0x7f00000006c0)="5b6a4c70ad90c2dd34763c7ff5cfd76078019378cb8466c707927d8be37097eaa38e7fdc0d7bb894e70fe1a55a9040b674588d2ca2f45165aeea5f0e5dcc879fc7476f8b08ec1e3c7ffacda9562fd6cfe95e3c9544c875cf0a39f998f7a4f43aa22a3129b28e02bc0c702da3ddbd1dd21a02a72dffa7fe0300a96f45ea8fc61efd131b3436b5baca280b56d4b5c3ad6f4b45c111bb6d224e32926a") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000240)={r9, 0x0, 0x0}, 0xd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES16=r7], 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000000300)) 0s ago: executing program 2 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): "syz.4.294" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 180.770240][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 180.790868][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.800640][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.814740][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.824354][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.842508][ T30] audit: type=1807 audit(1787510452.468:510): UNKNOWN=meas res=0 [ 180.845280][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.850421][ T30] audit: type=1802 audit(1787510452.468:511): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.294" res=0 errno=0 [ 180.859895][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.893415][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.903137][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.912176][ T30] audit: type=1400 audit(1787510452.528:512): avc: denied { connect } for pid=7125 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.932212][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.932309][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.956734][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.966414][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.975716][ T7122] ldm_validate_partition_table(): Disk read failed. [ 180.984379][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.994042][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.011054][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 181.020768][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.029303][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 181.038984][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.047354][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 181.056968][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.065091][ T7122] Dev loop7: unable to read RDB block 0 [ 181.083198][ T7122] loop7: unable to read partition table [ 181.144724][ T7122] loop7: partition table beyond EOD, truncated [ 181.208283][ T7122] loop_reread_partitions: partition scan of loop7 (úùƒå¡™jÌ–ãßÔ 8½?ã}X‹%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQýŠ5) failed (rc=-5) [ 184.001947][ T30] audit: type=1400 audit(1787510455.628:513): avc: denied { create } for pid=7148 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 184.038222][ T7124] ima: policy update failed [ 184.097686][ T30] audit: type=1400 audit(1787510455.708:514): avc: denied { write } for pid=7156 comm="syz.0.302" name="c.1" dev="configfs" ino=10094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.249350][ T30] audit: type=1400 audit(1787510455.718:515): avc: denied { write } for pid=7156 comm="syz.0.302" name="c.1" dev="configfs" ino=10094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.413204][ T30] audit: type=1802 audit(1787510455.728:516): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.294" res=0 errno=0 [ 186.702427][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 187.336065][ T7179] capability: warning: `syz.2.310' uses deprecated v2 capabilities in a way that may be insecure [ 187.418291][ T30] audit: type=1400 audit(1787510459.048:517): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 188.351738][ T7210] overlayfs: workdir and upperdir must be separate subtrees [ 188.361790][ T7209] rnbd_client L607: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 188.377278][ T7209] rtrs_client L2826: pathname cannot contain / and . [ 188.926360][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.933444][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.970939][ T30] audit: type=1804 audit(1787510460.598:518): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.5.317" name="ima_policy_written" res=0 errno=-17 [ 189.067561][ T30] audit: type=1807 audit(1787510460.598:519): UNKNOWN=meas res=0 [ 189.086942][ T30] audit: type=1802 audit(1787510460.598:520): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.317" res=0 errno=0 [ 189.673362][ T984] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 189.682485][ T5817] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.711008][ T7216] ima: policy update failed [ 189.715650][ T30] audit: type=1802 audit(1787510461.358:521): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.317" res=0 errno=0 [ 189.815170][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 189.832533][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 189.838125][ T5817] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 189.855423][ T984] usb 3-1: Using ep0 maxpacket: 16 [ 189.861379][ T984] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 189.896508][ T984] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 189.916269][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.919869][ T984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.945224][ T5817] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.956582][ T984] usb 3-1: config 0 has no interface number 0 [ 189.956651][ T984] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 189.956677][ T984] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 189.956703][ T984] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 189.956727][ T984] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 6 [ 189.956747][ T984] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 189.997484][ T5817] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.030982][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.051315][ T984] usb 3-1: config 0 descriptor?? [ 190.056938][ T30] audit: type=1807 audit(1787510461.678:522): UNKNOWN=meas res=0 [ 190.170192][ T7215] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.192083][ T30] audit: type=1802 audit(1787510461.688:523): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.319" res=0 errno=0 [ 190.211703][ T5817] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.761397][ T7215] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.815302][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.819796][ T984] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.828567][ T7223] ima: policy update failed [ 190.844854][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.887125][ T30] audit: type=1802 audit(1787510462.518:524): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.319" res=0 errno=0 [ 190.916618][ T5817] usb 4-1: config 0 descriptor?? [ 191.138896][ T7215] snd_dummy snd_dummy.0: control 0:-1:3142:syz0:16385 is already present [ 191.368344][ T5817] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 191.383865][ T5817] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 191.408954][ T5817] corsair-psu 0003:1B1C:1C09.0004: item fetching failed at offset 2/5 [ 191.426863][ T5817] corsair-psu 0003:1B1C:1C09.0004: probe with driver corsair-psu failed with error -22 [ 191.513801][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.320'. [ 191.598117][ T984] usb 4-1: USB disconnect, device number 13 [ 191.674034][ T7236] fuse: Unknown parameter '.d' [ 191.680562][ T7236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7236 comm=syz.5.323 [ 192.069565][ T30] audit: type=1400 audit(1787510463.698:525): avc: denied { append } for pid=7244 comm="syz.4.325" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.562244][ T5787] usb 3-1: USB disconnect, device number 13 [ 193.030209][ T30] audit: type=1400 audit(1787510463.968:526): avc: denied { ioctl } for pid=7244 comm="syz.4.325" path="socket:[15192]" dev="sockfs" ino=15192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.072961][ T30] audit: type=1400 audit(1787510464.158:527): avc: denied { write } for pid=7240 comm="syz.5.324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 193.105841][ T7245] warning: `syz.4.325' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.180424][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.182655][ T7259] syzkaller0: entered promiscuous mode [ 193.191247][ T30] audit: type=1400 audit(1787510464.798:528): avc: denied { connect } for pid=7244 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.194923][ T7259] syzkaller0: entered allmulticast mode [ 193.248519][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.297891][ T7255] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 193.485835][ T7255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.614917][ T7260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.651350][ T7260] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 193.663124][ T7260] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 193.705813][ T7262] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 193.715321][ T7262] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 193.754313][ T7275] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 193.754313][ T7275] The task syz.5.332 (7275) triggered the difference, watch for misbehavior. [ 193.817892][ T5787] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.882456][ T984] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 193.973863][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 193.999526][ T5787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.013775][ T5787] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 194.046811][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.060501][ T5787] usb 3-1: Product: syz [ 194.074055][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 194.080059][ T5787] usb 3-1: Manufacturer: syz [ 194.086693][ T984] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.104329][ T5787] usb 3-1: SerialNumber: syz [ 194.125831][ T984] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 194.135459][ T984] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.147253][ T984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.157883][ T984] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.168043][ T984] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.181151][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.517070][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'. [ 195.430590][ T5787] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 195.508194][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 195.508213][ T30] audit: type=1400 audit(1787510467.138:531): avc: denied { map } for pid=7266 comm="syz.3.330" path="socket:[14122]" dev="sockfs" ino=14122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.561336][ T5787] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 195.577278][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.334'. [ 195.586367][ T984] usb 4-1: GET_CAPABILITIES returned 0 [ 195.593155][ T984] usbtmc 4-1:16.0: can't read capabilities [ 195.615541][ T5787] usb 3-1: USB disconnect, device number 14 [ 195.650565][ T30] audit: type=1400 audit(1787510467.138:532): avc: denied { read } for pid=7266 comm="syz.3.330" path="socket:[14122]" dev="sockfs" ino=14122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.676297][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 196.033950][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 196.052567][ T5611] Bluetooth: hci0: command 0x4000 tx timeout [ 196.075695][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 196.088946][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 196.282153][ T7289] synth uevent: /bus/acpi: unknown uevent action string [ 196.389699][ T5715] usb 4-1: USB disconnect, device number 14 [ 197.641667][ T7298] MTD: Couldn't look up '': -22 [ 198.825478][ T30] audit: type=1400 audit(1787510470.458:533): avc: denied { create } for pid=7305 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.870152][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.342'. [ 198.880607][ T30] audit: type=1400 audit(1787510470.498:534): avc: denied { write } for pid=7305 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.909335][ T7304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.322543][ T5787] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 199.540654][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.549624][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.712805][ T5787] usb 6-1: Using ep0 maxpacket: 32 [ 199.718689][ T5787] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 199.732184][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.741494][ T5787] usb 6-1: Product: syz [ 199.746312][ T5787] usb 6-1: Manufacturer: syz [ 199.751246][ T5787] usb 6-1: SerialNumber: syz [ 199.806824][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 200.047286][ T5787] usb 6-1: config 0 descriptor?? [ 200.255397][ T5828] IPVS: starting estimator thread 0... [ 200.403467][ T5787] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 200.482303][ T5787] dvb-usb: bulk message failed: -22 (4/0) [ 201.245993][ T5787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.342956][ T5787] dvb-usb: bulk message failed: -22 (5/0) [ 201.373508][ T5787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.412880][ T7325] IPVS: using max 55 ests per chain, 132000 per kthread [ 201.499645][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.551693][ T5787] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 201.598774][ T5787] usb 6-1: media controller created [ 201.766378][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.775396][ T5602] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 201.790869][ T30] audit: type=1400 audit(1787510473.418:535): avc: denied { sqpoll } for pid=7336 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 201.837063][ T5787] usb 6-1: selecting invalid altsetting 3 [ 201.851581][ T5787] ttusb2: set interface to alts=3 failed [ 201.920076][ T5787] DVB: Unable to find symbol tda10086_attach() [ 201.928644][ T5787] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 201.946871][ T5787] dvb-usb: bulk message failed: -22 (4/0) [ 201.959465][ T5787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.981537][ T5787] dvb-usb: bulk message failed: -22 (5/0) [ 201.991192][ T5787] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 202.011606][ T5787] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 202.511706][ T5787] usb 6-1: USB disconnect, device number 6 [ 202.643785][ T5787] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 202.824645][ T7335] 9p: Bad value for 'rfdno' [ 202.973764][ T7359] comedi comedi0: Minor -4 is invalid! [ 202.994230][ T30] audit: type=1807 audit(1787510474.618:536): UNKNOWN=meas res=0 [ 203.115142][ T30] audit: type=1802 audit(1787510474.618:537): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.355" res=0 errno=0 [ 203.240048][ T7366] FAULT_INJECTION: forcing a failure. [ 203.240048][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 203.284242][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.358 Not tainted syzkaller #0 PREEMPT(full) [ 203.284271][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 203.284281][ T7366] Call Trace: [ 203.284287][ T7366] [ 203.284294][ T7366] dump_stack_lvl+0x100/0x190 [ 203.284325][ T7366] should_fail_ex.cold+0x5/0xa [ 203.284350][ T7366] _copy_from_user+0x2e/0xd0 [ 203.284376][ T7366] __x64_sys_rt_sigprocmask+0x185/0x410 [ 203.284402][ T7366] ? __pfx___x64_sys_rt_sigprocmask+0x10/0x10 [ 203.284425][ T7366] ? fput+0x7c/0x100 [ 203.284440][ T7366] ? ksys_write+0x1ac/0x250 [ 203.284463][ T7366] ? __pfx_ksys_write+0x10/0x10 [ 203.284491][ T7366] do_syscall_64+0x123/0x790 [ 203.284517][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.284534][ T7366] RIP: 0033:0x7fe29b19e0d9 [ 203.284548][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.284564][ T7366] RSP: 002b:00007fe29bfc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000000e [ 203.284580][ T7366] RAX: ffffffffffffffda RBX: 00007fe29b425fa0 RCX: 00007fe29b19e0d9 [ 203.284592][ T7366] RDX: 0000000000000000 RSI: 000020000078b000 RDI: 0000000000000000 [ 203.284602][ T7366] RBP: 00007fe29bfc9090 R08: 0000000000000000 R09: 0000000000000000 [ 203.284611][ T7366] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 203.284621][ T7366] R13: 00007fe29b426038 R14: 00007fe29b425fa0 R15: 00007ffefd05b8b8 [ 203.284644][ T7366] [ 206.842428][ T5787] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 207.015816][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 207.036460][ T5787] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 207.077534][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.116755][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.162245][ T5787] usb 3-1: config 0 descriptor?? [ 207.977960][ T30] audit: type=1400 audit(1787510479.578:538): avc: denied { name_bind } for pid=7391 comm="syz.2.370" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 208.087387][ T5787] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 208.126516][ T5787] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 208.177249][ T5787] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 208.205557][ T5787] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 208.231121][ T5787] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 208.254323][ T5787] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 208.268871][ T30] audit: type=1400 audit(1787510479.628:539): avc: denied { connect } for pid=7391 comm="syz.2.370" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.937765][ T7397] 9p: Bad value for 'rfdno' [ 210.137281][ T7414] comedi comedi0: Minor -4 is invalid! [ 210.905899][ T10] usb 3-1: USB disconnect, device number 15 [ 212.783916][ T7363] ima: policy update failed [ 212.807506][ T30] audit: type=1802 audit(1787510484.438:540): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.355" res=0 errno=0 [ 213.276218][ T7438] MTD: Couldn't look up '': -22 [ 215.477654][ T5732] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 215.683766][ T5732] usb 6-1: Using ep0 maxpacket: 8 [ 215.695492][ T5732] usb 6-1: unable to get BOS descriptor or descriptor too short [ 215.718109][ T5732] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 215.750963][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.769476][ T5732] usb 6-1: Product: syz [ 215.775187][ T5732] usb 6-1: Manufacturer: syz [ 215.786227][ T5732] usb 6-1: SerialNumber: syz [ 215.952565][ T5715] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 216.210926][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.5.386'. [ 216.459441][ T5715] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 216.482231][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.521368][ T5715] usb 5-1: config 0 descriptor?? [ 217.941592][ T5732] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 217.973171][ T5715] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 218.023506][ T30] audit: type=1400 audit(1787510489.658:541): avc: denied { ioctl } for pid=7466 comm="syz.3.391" path="socket:[16430]" dev="sockfs" ino=16430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.120792][ T5732] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 218.176629][ T5715] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 218.196368][ T5732] usb 6-1: USB disconnect, device number 7 [ 218.206080][ T5715] [drm] Initialized udl on minor 1 [ 218.295969][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 218.372834][ T30] audit: type=1400 audit(1787510489.978:542): avc: denied { append } for pid=7475 comm="syz.5.393" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 218.733325][ T7479] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 220.358957][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 220.636810][ T5715] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.647187][ T30] audit: type=1400 audit(1787510492.278:543): avc: denied { create } for pid=7490 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.647194][ T7486] hsr_slave_0 (unregistering): left promiscuous mode [ 220.715838][ T5715] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 220.744303][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.756179][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.765310][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.776140][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.783923][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.827853][ T5715] usb 5-1: USB disconnect, device number 10 [ 221.744130][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 223.306502][ T5602] Bluetooth: hci5: command tx timeout [ 224.682600][ T30] audit: type=1400 audit(1787510496.238:544): avc: denied { connect } for pid=7524 comm="syz.2.405" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.820069][ T30] audit: type=1400 audit(1787510496.248:545): avc: denied { write } for pid=7524 comm="syz.2.405" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.392437][ T5602] Bluetooth: hci5: command tx timeout [ 225.468512][ T6061] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.377829][ T7531] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.516356][ T7532] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.933436][ T6061] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.229320][ T6061] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.343478][ T6061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.484629][ T5602] Bluetooth: hci5: command tx timeout [ 227.578235][ T30] audit: type=1400 audit(1787510499.208:546): avc: denied { read } for pid=5258 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 227.593061][ T5602] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 227.659541][ T30] audit: type=1400 audit(1787510499.288:547): avc: denied { create } for pid=7550 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.750638][ T30] audit: type=1800 audit(1787510499.378:548): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.410" name="id" dev="configfs" ino=16090 res=0 errno=0 [ 227.782552][ T5787] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 227.786622][ T7538] 9p: Bad value for 'rfdno' [ 227.893675][ T6061] bridge_slave_1: left allmulticast mode [ 227.906266][ T6061] bridge_slave_1: left promiscuous mode [ 227.912929][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.923137][ T6061] bridge_slave_0: left allmulticast mode [ 227.928935][ T6061] bridge_slave_0: left promiscuous mode [ 227.936191][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.961633][ T7562] comedi comedi0: Minor -4 is invalid! [ 227.976802][ T5787] usb 5-1: Using ep0 maxpacket: 8 [ 228.004706][ T5787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.096228][ T5787] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 228.396536][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.445988][ T5787] usb 5-1: Product: syz [ 228.459186][ T5787] usb 5-1: Manufacturer: syz [ 228.482440][ T5787] usb 5-1: SerialNumber: syz [ 228.546453][ T30] audit: type=1400 audit(1787510500.178:549): avc: denied { write } for pid=7554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.641353][ T30] audit: type=1400 audit(1787510500.268:550): avc: denied { write } for pid=7571 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.721030][ T5602] Bluetooth: hci5: command tx timeout [ 230.392576][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.404'. [ 231.162168][ T5787] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 231.996256][ T5787] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 232.015132][ T5787] usb 5-1: USB disconnect, device number 11 [ 232.037296][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 232.067505][ T30] audit: type=1400 audit(1787510503.698:551): avc: denied { name_bind } for pid=7588 comm="syz.3.416" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 232.143799][ T30] audit: type=1400 audit(1787510503.698:552): avc: denied { bind } for pid=7588 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.163246][ T30] audit: type=1400 audit(1787510503.748:553): avc: denied { setopt } for pid=7588 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.163522][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.228638][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.251847][ T6061] bond0 (unregistering): Released all slaves [ 232.272261][ T6061] bond1 (unregistering): Released all slaves [ 232.416852][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 232.638117][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.653594][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.669053][ T7492] bridge_slave_0: entered allmulticast mode [ 232.685020][ T7492] bridge_slave_0: entered promiscuous mode [ 232.728838][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.756378][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.786945][ T7492] bridge_slave_1: entered allmulticast mode [ 232.800481][ T7492] bridge_slave_1: entered promiscuous mode [ 232.891820][ T30] audit: type=1400 audit(1787510504.518:554): avc: denied { open } for pid=7602 comm="syz.3.419" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 233.029674][ T30] audit: type=1400 audit(1787510504.588:555): avc: denied { ioctl } for pid=7602 comm="syz.3.419" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 233.076737][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.096694][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.148415][ T7492] team0: Port device team_slave_0 added [ 233.170307][ T7492] team0: Port device team_slave_1 added [ 233.301173][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.330109][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.368050][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 233.378553][ T7492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.436193][ T6061] hsr_slave_0: left promiscuous mode [ 233.445800][ T6061] hsr_slave_1: left promiscuous mode [ 233.462269][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.481628][ T30] audit: type=1400 audit(1787510505.108:556): avc: denied { write } for pid=7604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.490447][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.583466][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.604849][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.659612][ T7631] vcan0: tx address claim with dest, not broadcast [ 233.679458][ T30] audit: type=1400 audit(1787510505.308:557): avc: denied { write } for pid=7629 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.708532][ T6061] veth1_macvtap: left promiscuous mode [ 233.747702][ T6061] veth0_macvtap: left promiscuous mode [ 233.757556][ T6061] veth1_vlan: left promiscuous mode [ 233.774828][ T6061] veth0_vlan: left promiscuous mode [ 233.798563][ T5828] Bluetooth: (null): Too short H5 packet [ 233.816799][ T5828] Bluetooth: (null): Invalid header checksum [ 233.930877][ T139] Bluetooth: (null): Invalid header checksum [ 234.035475][ T5787] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 234.345919][ T139] Bluetooth: (null): Invalid header checksum [ 234.365657][ T139] Bluetooth: (null): Invalid header checksum [ 234.891982][ T5787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.222517][ T2226] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.382395][ T2226] usb 5-1: Using ep0 maxpacket: 8 [ 235.407617][ T2226] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.428253][ T2226] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 235.456041][ T2226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.466054][ T2226] usb 5-1: Product: syz [ 235.470414][ T2226] usb 5-1: Manufacturer: syz [ 235.481199][ T2226] usb 5-1: SerialNumber: syz [ 235.576027][ T139] Bluetooth: (null): Invalid header checksum [ 235.582172][ T5787] usb 4-1: not running at top speed; connect to a high speed hub [ 235.590016][ T139] Bluetooth: (null): Invalid header checksum [ 235.598555][ T139] Bluetooth: (null): Invalid header checksum [ 235.604620][ T5787] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 235.616355][ T139] Bluetooth: (null): Invalid header checksum [ 235.622570][ T139] Bluetooth: (null): Invalid header checksum [ 235.628877][ T139] Bluetooth: (null): Invalid header checksum [ 235.635782][ T139] Bluetooth: (null): Invalid header checksum [ 235.642108][ T139] Bluetooth: (null): Invalid header checksum [ 235.648242][ T5787] usb 4-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 235.652581][ T139] Bluetooth: (null): Invalid header checksum [ 235.658978][ T5787] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 235.673866][ T5787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 106, changing to 4 [ 235.685051][ T5787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 62520, setting to 1023 [ 235.685832][ T139] Bluetooth: (null): Invalid header checksum [ 235.698052][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.711114][ T5787] usb 4-1: Product: ည [ 235.715471][ T5787] usb 4-1: Manufacturer: î´ŸèŽí­è²®â™ì™¢ï´‚ᇎ৙ë§ë“让襃槖᧩ⲷᬱ韓鋑ẘ칭殊ç¬çŽ£ïŸ‚郓횧焤ᡪ⼋å³ï³¨ï¹éµ‚昢Ზ㿠Წ相햫锋㽤﹢豪忛⾩쳮殖å‡ï«¿é§¦è“ªå¹¾ã¦‚׭톫ᇱè³ë¢¥ã‹¹ãŠ¨ìŠ¾é«µâ’–ルᅘ骹핧찚廫Ԓä¹ïœ´èŽŒè£˜ä«‰ê•’︷ᖡ∫ì©ç¯‰è¸€Ì‡á¼á±» [ 235.721567][ T139] Bluetooth: (null): Invalid header checksum [ 235.742269][ T5787] usb 4-1: SerialNumber: syz [ 236.242532][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.424'. [ 236.411619][ T2226] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.436729][ T139] Bluetooth: (null): Invalid header checksum [ 236.453010][ T139] Bluetooth: (null): Invalid header checksum [ 236.475130][ T139] Bluetooth: (null): Invalid header checksum [ 236.494811][ T139] Bluetooth: (null): Invalid header checksum [ 236.515166][ T139] Bluetooth: (null): Invalid header checksum [ 236.524467][ T139] Bluetooth: (null): Invalid header checksum [ 236.534926][ T139] Bluetooth: (null): Invalid header checksum [ 236.546636][ T139] Bluetooth: (null): Invalid header checksum [ 236.554144][ T2226] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 236.564584][ T139] Bluetooth: (null): Invalid header checksum [ 236.571151][ T139] Bluetooth: (null): Invalid header checksum [ 236.587093][ T2226] usb 5-1: USB disconnect, device number 12 [ 236.629286][ T6063] Bluetooth: (null): Invalid header checksum [ 236.641390][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 236.670573][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 236.687362][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 236.746041][ T42] Bluetooth: (null): Invalid header checksum [ 236.791150][ T6061] team0 (unregistering): Port device dummy0 removed [ 236.808477][ T30] audit: type=1804 audit(1787510508.438:558): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.5.425" name="ima_policy_written" res=0 errno=-17 [ 236.849021][ T30] audit: type=1807 audit(1787510508.438:559): UNKNOWN=meas res=0 [ 237.010398][ T139] Bluetooth: (null): Invalid header checksum [ 237.034802][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.043562][ T139] Bluetooth: (null): Invalid header checksum [ 237.051129][ T30] audit: type=1802 audit(1787510508.438:560): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.425" res=0 errno=0 [ 237.070046][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.096540][ T139] Bluetooth: (null): Invalid header checksum [ 237.096543][ T7492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.150805][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 237.925271][ T5787] usb 4-1: USB disconnect, device number 15 [ 238.154539][ T6367] udevd[6367]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 238.180753][ T7645] ima: policy update failed [ 238.193030][ T30] audit: type=1802 audit(1787510509.828:561): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.425" res=0 errno=0 [ 238.229753][ T7492] hsr_slave_0: entered promiscuous mode [ 238.250004][ T7492] hsr_slave_1: entered promiscuous mode [ 239.399226][ T6061] IPVS: stop unused estimator thread 0... [ 240.523965][ T30] audit: type=1400 audit(1787510512.148:562): avc: denied { write } for pid=7664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.562891][ T7492] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 240.649124][ T30] audit: type=1400 audit(1787510512.278:563): avc: denied { setopt } for pid=7680 comm="syz.2.432" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.697955][ T30] audit: type=1400 audit(1787510512.318:564): avc: denied { write } for pid=7684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.777299][ T7492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.786026][ T7492] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 240.865370][ T7492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.881541][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7 [ 240.893539][ T7492] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 240.911429][ T7492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.929611][ T7492] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 240.992427][ T2226] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 241.004576][ T7492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.171907][ T2226] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 241.216787][ T7708] ip_tables: iptables: counters copy to user failed while replacing table [ 241.221954][ T2226] usb 4-1: no configurations [ 242.150273][ T2226] usb 4-1: can't read configurations, error -22 [ 242.155097][ T7713] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 242.186148][ T7492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.220765][ T7492] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.236078][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 242.247178][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.254335][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.297894][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.305014][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.332580][ T2226] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 242.493354][ T2226] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 242.519075][ T2226] usb 4-1: no configurations [ 242.542398][ T2226] usb 4-1: can't read configurations, error -22 [ 242.550487][ T2226] usb usb4-port1: attempt power cycle [ 242.558297][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 242.603299][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 242.833459][ T30] audit: type=1400 audit(1787510514.458:565): avc: denied { write } for pid=7706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.912479][ T2226] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 242.942440][ T5732] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 243.106334][ T5732] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 243.213268][ T5732] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.335199][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.383437][ T2226] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.391663][ T5732] usb 6-1: config 0 descriptor?? [ 243.399397][ T2226] usb 4-1: no configurations [ 243.408953][ T2226] usb 4-1: can't read configurations, error -22 [ 243.487970][ T5732] pwc: Askey VC010 type 2 USB webcam detected. [ 243.557921][ T30] audit: type=1400 audit(1787510515.188:566): avc: denied { write } for pid=7744 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.628077][ T2226] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 244.694160][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8 [ 244.755262][ T2226] usb 4-1: device descriptor read/8, error -71 [ 244.839022][ T5732] pwc: recv_control_msg error -32 req 02 val 2b00 [ 244.865387][ T5732] pwc: recv_control_msg error -32 req 02 val 2700 [ 244.882598][ T2226] usb usb4-port1: unable to enumerate USB device [ 244.887495][ T5732] pwc: recv_control_msg error -32 req 02 val 2c00 [ 244.916047][ T5732] pwc: recv_control_msg error -32 req 04 val 1000 [ 244.918534][ T7492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.000540][ T7759] input: syz1 as /devices/virtual/input/input8 [ 246.529173][ T5732] pwc: recv_control_msg error -71 req 04 val 1400 [ 246.538307][ T5732] pwc: recv_control_msg error -71 req 02 val 2000 [ 246.555969][ T5732] pwc: recv_control_msg error -71 req 02 val 2100 [ 246.575776][ T5732] pwc: recv_control_msg error -71 req 04 val 1500 [ 246.591132][ T5732] pwc: recv_control_msg error -71 req 02 val 2500 [ 246.608369][ T5732] pwc: recv_control_msg error -71 req 02 val 2400 [ 246.630790][ T5732] pwc: recv_control_msg error -71 req 02 val 2600 [ 246.657912][ T5732] pwc: recv_control_msg error -71 req 02 val 2900 [ 246.685799][ T5732] pwc: recv_control_msg error -71 req 02 val 2800 [ 246.709391][ T5732] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.733620][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'. [ 246.743714][ T5732] pwc: recv_control_msg error -71 req 04 val 1200 [ 247.667796][ T5732] pwc: Registered as video103. [ 247.736525][ T5732] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 248.749787][ T5732] usb 6-1: USB disconnect, device number 8 [ 248.838182][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 248.864910][ T7492] veth0_vlan: entered promiscuous mode [ 248.897055][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 248.913925][ T7492] veth1_vlan: entered promiscuous mode [ 249.051832][ T7492] veth0_macvtap: entered promiscuous mode [ 249.124339][ T7492] veth1_macvtap: entered promiscuous mode [ 249.330131][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.475086][ T7492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.836285][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.956426][ T6061] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.002523][ T6061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.007309][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 250.012129][ T6061] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.009352][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.021230][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.030696][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.060673][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.193276][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.227749][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.795270][ T30] audit: type=1400 audit(1787510523.328:567): avc: denied { watch } for pid=7817 comm="syz.4.454" path="/88" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 251.913609][ T30] audit: type=1400 audit(1787510523.348:568): avc: denied { getopt } for pid=7817 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.505393][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 254.615397][ T30] audit: type=1807 audit(1787510526.248:569): UNKNOWN=meas res=0 [ 254.718748][ T30] audit: type=1802 audit(1787510526.258:570): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.4.463" res=0 errno=0 [ 255.236260][ T7850] ima: policy update failed [ 255.254092][ T30] audit: type=1802 audit(1787510526.888:571): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.463" res=0 errno=0 [ 256.376468][ T30] audit: type=1400 audit(1787510528.008:572): avc: denied { call } for pid=7859 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 256.873119][ T7861] binder_alloc: 7859: pid 7859 spamming oneway? 2 buffers allocated for a total size of 4104 [ 256.915606][ T30] audit: type=1400 audit(1787510528.078:573): avc: denied { mount } for pid=7855 comm="syz.3.465" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 256.989506][ T30] audit: type=1400 audit(1787510528.088:574): avc: denied { bind } for pid=7855 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 257.507863][ T7875] CUSE: unknown device info "" [ 257.512940][ T7875] CUSE: unknown device info "" [ 257.517887][ T7875] CUSE: unknown device info "" [ 257.522957][ T7875] CUSE: unknown device info "" [ 257.528030][ T7875] CUSE: unknown device info "ÿ" [ 257.533295][ T7875] CUSE: zero length info key specified [ 257.776002][ T30] audit: type=1400 audit(1787510529.408:575): avc: denied { write } for pid=7865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.872413][ T5722] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 258.025181][ T30] audit: type=1400 audit(1787510529.648:576): avc: denied { write } for pid=7888 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.042402][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 258.087783][ T5722] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 258.127383][ T5722] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.176750][ T5722] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.249768][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.355744][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.413953][ T5722] usb 3-1: config 0 descriptor?? [ 259.482415][ T5817] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 259.560325][ T7912] netlink: 7 bytes leftover after parsing attributes in process `syz.5.474'. [ 259.642403][ T5817] usb 7-1: Using ep0 maxpacket: 32 [ 259.666218][ T5817] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 259.693816][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.705372][ T30] audit: type=1400 audit(1787510531.338:577): avc: denied { write } for pid=7898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.709347][ T5817] usb 7-1: Product: syz [ 259.798609][ T5817] usb 7-1: Manufacturer: syz [ 259.816631][ T5817] usb 7-1: SerialNumber: syz [ 259.867479][ T5817] usb 7-1: config 0 descriptor?? [ 259.882660][ T984] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 259.918712][ T5817] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 259.955918][ T5817] dvb-usb: bulk message failed: -22 (4/0) [ 259.981339][ T5817] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 260.003056][ T5817] dvb-usb: bulk message failed: -22 (5/0) [ 260.008912][ T5817] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 260.050949][ T30] audit: type=1400 audit(1787510531.628:578): avc: denied { write } for pid=7924 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.054081][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.131740][ T5817] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 260.141584][ T5817] usb 7-1: media controller created [ 260.640785][ T7893] dvb-usb: bulk message failed: -22 (7/0) [ 260.648116][ T7893] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 260.658499][ T7893] ttusb2: i2c transfer failed. [ 261.097195][ T984] usb 5-1: New USB device found, idVendor=15a4, idProduct=9015, bcdDevice= 2.00 [ 261.114193][ T984] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.135745][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.212606][ T7931] evm: overlay not supported [ 261.245157][ T984] usb 5-1: Product: syz [ 261.261691][ T984] usb 5-1: Manufacturer: syz [ 261.303202][ T984] usb 5-1: SerialNumber: syz [ 261.497769][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.527177][ T5722] usb 3-1: string descriptor 0 read error: -71 [ 261.566373][ T5722] usbhid 3-1:0.0: can't add hid device: -71 [ 261.591755][ T5722] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 261.619244][ T5817] usb 7-1: selecting invalid altsetting 3 [ 261.652100][ T5817] ttusb2: set interface to alts=3 failed [ 261.668546][ T5722] usb 3-1: USB disconnect, device number 16 [ 261.811655][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.479'. [ 261.828150][ T5817] DVB: Unable to find symbol tda10086_attach() [ 261.853049][ T5817] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 261.912468][ T5817] dvb-usb: bulk message failed: -22 (4/0) [ 261.940864][ T984] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 261.942732][ T5817] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 261.978781][ T984] dvb_usb_af9015 5-1:1.0: probe with driver dvb_usb_af9015 failed with error -22 [ 262.001495][ T5817] dvb-usb: bulk message failed: -22 (5/0) [ 262.021894][ T5817] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 262.050580][ T5817] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 262.106539][ T5817] usb 7-1: USB disconnect, device number 2 [ 262.133552][ T984] usb 5-1: USB disconnect, device number 13 [ 262.417418][ T30] audit: type=1400 audit(1787510534.048:579): avc: denied { write } for pid=7951 comm="syz.3.482" name="functions" dev="configfs" ino=10089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.418888][ T5817] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 262.700941][ T30] audit: type=1400 audit(1787510534.328:580): avc: denied { write } for pid=7932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.850256][ T7958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.481'. [ 262.998371][ T7963] xt_hashlimit: size too large, truncated to 1048576 [ 263.022820][ T30] audit: type=1400 audit(1787510534.648:581): avc: denied { write } for pid=7961 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.101723][ T30] audit: type=1804 audit(1787510534.728:582): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.5.484" name="ima_policy_written" res=0 errno=-17 [ 263.280034][ T30] audit: type=1807 audit(1787510534.728:583): UNKNOWN=meas res=0 [ 263.348441][ T30] audit: type=1802 audit(1787510534.728:584): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.484" res=0 errno=0 [ 266.030903][ T30] audit: type=1400 audit(1787510537.658:585): avc: denied { write } for pid=7986 comm="syz.4.490" name="functions" dev="configfs" ino=10089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.168013][ T30] audit: type=1400 audit(1787510537.658:586): avc: denied { write } for pid=7986 comm="syz.4.490" name="configs" dev="configfs" ino=10090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.368161][ T30] audit: type=1400 audit(1787510537.998:587): avc: denied { write } for pid=7973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.649575][ T30] audit: type=1400 audit(1787510538.268:588): avc: denied { setopt } for pid=8007 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.579731][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 267.662049][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 270.843900][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 270.843917][ T30] audit: type=1400 audit(1787510542.468:590): avc: denied { view } for pid=8041 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 271.132468][ T5817] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 271.277832][ T7971] ima: policy update failed [ 271.309521][ T30] audit: type=1802 audit(1787510542.938:591): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.484" res=0 errno=0 [ 271.360549][ T5817] usb 4-1: device descriptor read/64, error -71 [ 271.474421][ T984] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 271.559916][ T30] audit: type=1400 audit(1787510543.188:592): avc: denied { mount } for pid=8057 comm="syz.2.508" name="/" dev="ramfs" ino=18668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 271.630794][ T8059] xt_hashlimit: size too large, truncated to 1048576 [ 271.641190][ T30] audit: type=1400 audit(1787510543.258:593): avc: denied { create } for pid=8057 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.745449][ T5817] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 271.772700][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 271.803332][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.956679][ T984] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 271.957507][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.509'. [ 272.170744][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.181268][ T30] audit: type=1400 audit(1787510543.428:594): avc: denied { setopt } for pid=8057 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.280775][ T5817] usb 4-1: device descriptor read/64, error -71 [ 272.283937][ T984] usb 5-1: Product: syz [ 272.317272][ T984] usb 5-1: Manufacturer: syz [ 272.571441][ T5817] usb usb4-port1: attempt power cycle [ 272.625406][ T984] usb 5-1: SerialNumber: syz [ 272.656298][ T30] audit: type=1400 audit(1787510543.518:595): avc: denied { read } for pid=8057 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.751619][ T30] audit: type=1400 audit(1787510543.588:596): avc: denied { bind } for pid=8058 comm="syz.6.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 272.922451][ T5817] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 273.582645][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 273.714547][ T984] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 273.718612][ T5817] usb 4-1: device descriptor read/8, error -71 [ 274.448986][ T984] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 274.733425][ T984] usb 5-1: USB disconnect, device number 14 [ 274.760486][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 275.049013][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.512'. [ 275.117230][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.512'. [ 275.526636][ T8065] syz.2.508 (8065): drop_caches: 2 [ 276.865817][ T8096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8096 comm=syz.2.517 [ 277.134972][ T30] audit: type=1400 audit(1787510548.768:597): avc: denied { read } for pid=8101 comm="syz.3.520" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.199359][ T8103] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 277.207212][ T8103] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 277.228321][ T30] audit: type=1400 audit(1787510548.768:598): avc: denied { open } for pid=8101 comm="syz.3.520" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.311047][ T30] audit: type=1400 audit(1787510548.768:599): avc: denied { ioctl } for pid=8101 comm="syz.3.520" path="/dev/sg0" dev="devtmpfs" ino=716 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.336612][ T5607] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 277.408732][ T30] audit: type=1400 audit(1787510548.818:600): avc: denied { getopt } for pid=8099 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.451529][ T30] audit: type=1400 audit(1787510548.828:601): avc: denied { ioctl } for pid=8099 comm="syz.4.519" path="socket:[19697]" dev="sockfs" ino=19697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.514661][ T30] audit: type=1400 audit(1787510548.828:602): avc: denied { write } for pid=8099 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.532374][ T5607] usb 7-1: Using ep0 maxpacket: 16 [ 277.566312][ T5607] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.600850][ T5607] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.141683][ T5607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.173160][ T5607] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 97 [ 278.188720][ T5607] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.244414][ T5607] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 278.266773][ T5607] usb 7-1: Manufacturer: syz [ 278.303777][ T5607] usb 7-1: config 0 descriptor?? [ 279.502392][ T5607] rc_core: IR keymap rc-hauppauge not found [ 279.566707][ T5607] Registered IR keymap rc-empty [ 279.596791][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 279.668731][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 279.802035][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 279.802484][ T5607] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 279.955269][ T5607] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 280.041068][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.053982][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.063439][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.073064][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.080447][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.160018][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 280.212881][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 280.262844][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 280.316655][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 280.375163][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 282.192434][ T5602] Bluetooth: hci0: command tx timeout [ 282.907482][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 283.282893][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 283.302978][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 283.386637][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 283.423080][ T5607] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 283.440774][ T8150] netlink: 428 bytes leftover after parsing attributes in process `syz.4.535'. [ 283.443471][ T30] audit: type=1400 audit(1787510555.068:603): avc: denied { bind } for pid=8149 comm="syz.4.535" lport=134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.476949][ T5607] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 283.518894][ T8150] netlink: 96 bytes leftover after parsing attributes in process `syz.4.535'. [ 283.535631][ T5607] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 283.535640][ T30] audit: type=1400 audit(1787510555.068:604): avc: denied { name_bind } for pid=8149 comm="syz.4.535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 283.535677][ T30] audit: type=1400 audit(1787510555.068:605): avc: denied { node_bind } for pid=8149 comm="syz.4.535" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 283.698400][ T5607] usb 7-1: USB disconnect, device number 3 [ 283.736591][ T30] audit: type=1400 audit(1787510555.298:606): avc: denied { map } for pid=8151 comm="syz.3.534" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 283.847417][ T30] audit: type=1400 audit(1787510555.418:607): avc: denied { setopt } for pid=8151 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.931780][ T30] audit: type=1400 audit(1787510555.528:608): avc: denied { shutdown } for pid=8151 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.163462][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 284.232141][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.538'. [ 284.272467][ T5602] Bluetooth: hci0: command tx timeout [ 284.607177][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 284.762762][ T30] audit: type=1400 audit(1787510556.378:609): avc: denied { mount } for pid=8160 comm="syz.4.537" name="/" dev="overlay" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 285.143464][ T5838] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.206183][ T30] audit: type=1400 audit(1787510556.838:610): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 285.248749][ T8169] macvlan0: entered promiscuous mode [ 285.402644][ T5715] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 285.572481][ T5715] usb 7-1: Using ep0 maxpacket: 32 [ 285.697815][ T5838] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.352520][ T5602] Bluetooth: hci0: command tx timeout [ 286.424464][ T5715] usb 7-1: unable to get BOS descriptor or descriptor too short [ 286.433093][ T5715] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.445171][ T5715] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.457313][ T5715] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.466280][ T5715] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.481104][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.489308][ T5715] usb 7-1: Product: syz [ 286.493598][ T5715] usb 7-1: Manufacturer: syz [ 286.498228][ T5715] usb 7-1: SerialNumber: syz [ 286.598992][ T5838] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.725197][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 287.255401][ T5715] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 287.644237][ T5715] cdc_ncm 7-1:1.0: bind() failure [ 287.654492][ T5715] usb 7-1: USB disconnect, device number 4 [ 287.671027][ T5838] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.752469][ T5602] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 287.767434][ T30] audit: type=1800 audit(1787510559.398:611): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.548" name="id" dev="configfs" ino=18896 res=0 errno=0 [ 287.802192][ T30] audit: type=1400 audit(1787510559.428:612): avc: denied { getopt } for pid=8204 comm="syz.6.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.828488][ T8206] netlink: 'syz.6.547': attribute type 1 has an invalid length. [ 288.795952][ T5602] Bluetooth: hci0: command tx timeout [ 288.873646][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 288.873661][ T30] audit: type=1400 audit(1787510560.508:616): avc: denied { read } for pid=8212 comm="syz.6.550" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 288.905793][ T8212] ima: policy update failed [ 288.985771][ T30] audit: type=1400 audit(1787510560.508:617): avc: denied { open } for pid=8212 comm="syz.6.550" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 289.062879][ T30] audit: type=1802 audit(1787510560.538:618): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.550" res=0 errno=0 [ 289.654770][ T5838] bridge_slave_1: left allmulticast mode [ 289.718881][ T5838] bridge_slave_1: left promiscuous mode [ 289.792462][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.975081][ T5838] bridge_slave_0: left allmulticast mode [ 290.018784][ T5838] bridge_slave_0: left promiscuous mode [ 290.052875][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.239799][ T30] audit: type=1400 audit(1787510561.868:619): avc: denied { write } for pid=8221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.424841][ T30] audit: type=1400 audit(1787510562.058:620): avc: denied { write } for pid=8244 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.721029][ T5838] bond0 (unregistering): (slave 30): Releasing backup interface [ 290.746157][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.754266][ T30] audit: type=1800 audit(1787510562.378:621): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.553" name="id" dev="configfs" ino=18995 res=0 errno=0 [ 290.778057][ T5838] bond0 (unregistering): Released all slaves [ 290.808992][ T30] audit: type=1400 audit(1787510562.438:622): avc: denied { connect } for pid=8249 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.886008][ T30] audit: type=1400 audit(1787510562.498:623): avc: denied { write } for pid=8249 comm="syz.4.556" lport=53438 faddr=2001::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.941620][ T8258] FAULT_INJECTION: forcing a failure. [ 290.941620][ T8258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.945011][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 290.955663][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.3.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.955689][ T8258] Tainted: [L]=SOFTLOCKUP [ 290.955694][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 290.955703][ T8258] Call Trace: [ 290.955709][ T8258] [ 290.955714][ T8258] dump_stack_lvl+0x100/0x190 [ 290.955742][ T8258] should_fail_ex.cold+0x5/0xa [ 290.955764][ T8258] _copy_from_user+0x2e/0xd0 [ 290.955787][ T8258] copy_msghdr_from_user+0x9f/0x4c0 [ 290.955806][ T8258] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 290.955832][ T8258] ___sys_sendmsg+0x106/0x1e0 [ 290.955850][ T8258] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.955867][ T8258] ? get_pid_task+0x106/0x250 [ 290.955894][ T8258] ? find_held_lock+0x2b/0x80 [ 290.955926][ T8258] __sys_sendmsg+0x160/0x210 [ 290.955948][ T8258] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.955980][ T8258] do_syscall_64+0x123/0x790 [ 290.956006][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.956022][ T8258] RIP: 0033:0x7fe29b19e0d9 [ 290.956036][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.956050][ T8258] RSP: 002b:00007fe29bfc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.956067][ T8258] RAX: ffffffffffffffda RBX: 00007fe29b425fa0 RCX: 00007fe29b19e0d9 [ 290.956078][ T8258] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 290.956087][ T8258] RBP: 00007fe29bfc9090 R08: 0000000000000000 R09: 0000000000000000 [ 290.956096][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.956105][ T8258] R13: 00007fe29b426038 R14: 00007fe29b425fa0 R15: 00007ffefd05b8b8 [ 290.956125][ T8258] [ 292.121607][ T30] audit: type=1800 audit(1787510563.748:624): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.561" name="id" dev="configfs" ino=19052 res=0 errno=0 [ 292.154809][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.171446][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.181069][ T8129] bridge_slave_0: entered allmulticast mode [ 292.267276][ T8129] bridge_slave_0: entered promiscuous mode [ 292.346145][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.368234][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.375896][ T8129] bridge_slave_1: entered allmulticast mode [ 292.401468][ T8129] bridge_slave_1: entered promiscuous mode [ 293.475032][ T8288] ip_tables: iptables: counters copy to user failed while replacing table [ 293.571592][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.212470][ T5838] hsr_slave_1: left promiscuous mode [ 294.236838][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.253041][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.280565][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.292282][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.309113][ T30] audit: type=1400 audit(1787510565.938:625): avc: denied { write } for pid=8283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.340706][ T5838] veth1_macvtap: left promiscuous mode [ 294.346874][ T5838] veth0_macvtap: left promiscuous mode [ 294.355616][ T5838] veth1_vlan: left promiscuous mode [ 294.367208][ T5838] veth0_vlan: left promiscuous mode [ 294.464062][ T30] audit: type=1400 audit(1787510566.098:626): avc: denied { write } for pid=8318 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.503463][ T5715] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 294.703597][ T5715] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 294.733964][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.748167][ T30] audit: type=1400 audit(1787510566.378:627): avc: denied { bind } for pid=8325 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.748691][ T5715] usb 3-1: Product: syz [ 294.798046][ T5715] usb 3-1: Manufacturer: syz [ 294.802905][ T5715] usb 3-1: SerialNumber: syz [ 294.813592][ T5715] usb 3-1: config 0 descriptor?? [ 295.052153][ T5715] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 295.222577][ T5838] team0 (unregistering): Port device team_slave_1 removed [ 295.243503][ T5838] team0 (unregistering): Port device team_slave_0 removed [ 295.408573][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.409142][ T8331] Bluetooth: MGMT ver 1.23 [ 295.458658][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 295.612087][ T8129] team0: Port device team_slave_0 added [ 295.623572][ T30] audit: type=1804 audit(1787510567.258:628): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.6.575" name="ima_policy_written" res=0 errno=-17 [ 295.742775][ T984] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 295.753900][ T8129] team0: Port device team_slave_1 added [ 296.381870][ T30] audit: type=1807 audit(1787510567.258:629): UNKNOWN=meas res=0 [ 296.400613][ T30] audit: type=1802 audit(1787510567.258:630): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.6.575" res=0 errno=0 [ 296.420683][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.471247][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.503523][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 296.515413][ T8337] ima: policy update failed [ 296.534113][ T30] audit: type=1802 audit(1787510568.168:631): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.575" res=0 errno=0 [ 296.568917][ T984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.585438][ T984] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 296.598600][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.613987][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.622407][ T984] usb 4-1: Product: syz [ 296.627290][ T984] usb 4-1: Manufacturer: syz [ 296.632036][ T984] usb 4-1: SerialNumber: syz [ 296.649352][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.656881][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.685793][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.738920][ T5602] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 296.776882][ T30] audit: type=1800 audit(1787510568.408:632): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.576" name="id" dev="configfs" ino=20555 res=0 errno=0 [ 296.870583][ T8129] hsr_slave_0: entered promiscuous mode [ 298.079501][ T5715] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 298.090429][ T984] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 298.128751][ T8129] hsr_slave_1: entered promiscuous mode [ 298.169003][ T8129] debugfs: 'hsr0' already exists in 'hsr' [ 298.193386][ T8129] Cannot create hsr debugfs directory [ 298.315738][ T30] audit: type=1400 audit(1787510569.948:633): avc: denied { write } for pid=8333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.372988][ T984] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 298.420833][ T984] usb 4-1: USB disconnect, device number 24 [ 298.463854][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 298.617442][ T30] audit: type=1400 audit(1787510570.248:634): avc: denied { write } for pid=8353 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.889948][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 299.302388][ T984] usb 3-1: USB disconnect, device number 17 [ 299.458188][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.504654][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.534494][ T8129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.580093][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.611433][ T8129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.667771][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.703163][ T8129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.730613][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.743815][ T8129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 299.767983][ T8129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.776753][ T30] audit: type=1400 audit(1787510571.398:635): avc: denied { write } for pid=8361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.939924][ T30] audit: type=1400 audit(1787510571.568:636): avc: denied { write } for pid=8396 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.976403][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.137336][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.266078][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.273267][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.336922][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.344107][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.027484][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 301.099272][ T8408] MTD: Couldn't look up '': -22 [ 301.103602][ T8412] FAULT_INJECTION: forcing a failure. [ 301.103602][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 301.117475][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.2.588 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.117504][ T8412] Tainted: [L]=SOFTLOCKUP [ 301.117510][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 301.117520][ T8412] Call Trace: [ 301.117526][ T8412] [ 301.117533][ T8412] dump_stack_lvl+0x100/0x190 [ 301.117565][ T8412] should_fail_ex.cold+0x5/0xa [ 301.117589][ T8412] should_failslab+0xc2/0x120 [ 301.117619][ T8412] kmem_cache_alloc_noprof+0x91/0x6a0 [ 301.117645][ T8412] ? do_getname+0x35/0x390 [ 301.117670][ T8412] do_getname+0x35/0x390 [ 301.117692][ T8412] do_sys_openat2+0xc7/0x1e0 [ 301.117712][ T8412] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.117731][ T8412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.117759][ T8412] ? __fget_files+0x21f/0x3d0 [ 301.117789][ T8412] __x64_sys_openat+0x12d/0x210 [ 301.117809][ T8412] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.117825][ T8412] ? ksys_write+0x1ac/0x250 [ 301.117855][ T8412] do_syscall_64+0x123/0x790 [ 301.117880][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.117896][ T8412] RIP: 0033:0x7f0502f5e90e [ 301.117911][ T8412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.117927][ T8412] RSP: 002b:00007f0503f20ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.117943][ T8412] RAX: ffffffffffffffda RBX: 00007f0503f216c0 RCX: 00007f0502f5e90e [ 301.117955][ T8412] RDX: 0000000000000002 RSI: 00007f0503f20f90 RDI: ffffffffffffff9c [ 301.117966][ T8412] RBP: 00007f0503f21090 R08: 0000000000000000 R09: 0000000000000000 [ 301.117977][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.117987][ T8412] R13: 00007f0503226038 R14: 00007f0503225fa0 R15: 00007ffe06f99578 [ 301.118011][ T8412] [ 301.127060][ T8410] loop4: detected capacity change from 0 to 2640 [ 301.206554][ T8415] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 301.260046][ T5804] buffer_io_error: 10 callbacks suppressed [ 301.260062][ T5804] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.429645][ T30] audit: type=1400 audit(1787510573.058:637): avc: denied { name_connect } for pid=8414 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 301.458206][ T5804] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.469951][ T5804] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.487831][ T30] audit: type=1400 audit(1787510573.058:638): avc: denied { listen } for pid=8414 comm="syz.2.589" lport=40261 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.517091][ T5804] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.532034][ T5804] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.555493][ T30] audit: type=1400 audit(1787510573.058:639): avc: denied { accept } for pid=8414 comm="syz.2.589" lport=40261 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.626901][ T30] audit: type=1400 audit(1787510573.058:640): avc: denied { write } for pid=8414 comm="syz.2.589" lport=40261 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 301.657358][ T30] audit: type=1400 audit(1787510573.088:641): avc: denied { setopt } for pid=8414 comm="syz.2.589" lport=40261 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 301.683730][ T30] audit: type=1400 audit(1787510573.118:642): avc: denied { ioctl } for pid=8414 comm="syz.2.589" path="socket:[20800]" dev="sockfs" ino=20800 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.740496][ T30] audit: type=1400 audit(1787510573.248:643): avc: denied { getopt } for pid=8407 comm="syz.6.587" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 303.342558][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.112948][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.153375][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.296746][ T8129] veth0_vlan: entered promiscuous mode [ 304.320006][ T8129] veth1_vlan: entered promiscuous mode [ 304.354137][ T8129] veth0_macvtap: entered promiscuous mode [ 304.370992][ T8129] veth1_macvtap: entered promiscuous mode [ 304.514613][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.571115][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.657231][ T5839] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.699733][ T5839] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.746110][ T5838] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.811358][ T6064] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.812370][ T5787] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 304.897300][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.905470][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.940152][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.951438][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.958142][ T30] audit: type=1400 audit(1787510576.588:644): avc: denied { kexec_image_load } for pid=8467 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 305.015024][ T30] audit: type=1400 audit(1787510576.648:645): avc: denied { append } for pid=8467 comm="syz.3.599" name="dvr0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 305.072738][ T5787] usb 7-1: Using ep0 maxpacket: 16 [ 305.096291][ T5787] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 305.128257][ T5787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.141386][ T30] audit: type=1400 audit(1787510576.768:646): avc: denied { bind } for pid=8467 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.154905][ T5787] usb 7-1: config 0 descriptor?? [ 305.169723][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.600'. [ 305.181653][ T5787] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 305.198491][ T30] audit: type=1400 audit(1787510576.808:647): avc: denied { listen } for pid=8467 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.234964][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 305.322392][ T5722] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 305.397473][ T5787] usb 7-1: Detected FT232B [ 305.487420][ T5722] usb 3-1: New USB device found, idVendor=15a4, idProduct=9015, bcdDevice= 2.00 [ 305.513434][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.537454][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.548988][ T5722] usb 3-1: Product: syz [ 305.554683][ T5722] usb 3-1: Manufacturer: syz [ 305.559518][ T5722] usb 3-1: SerialNumber: syz [ 305.940648][ T984] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 306.327923][ T5787] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 306.365215][ T5787] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.377426][ T8495] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 306.386827][ T8495] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 306.397029][ T8495] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 306.406695][ T30] audit: type=1800 audit(1787510578.008:648): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.4.603" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 306.478100][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 306.627035][ T30] audit: type=1400 audit(1787510578.038:649): avc: denied { firmware_load } for pid=8491 comm="syz.4.603" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 306.792459][ T984] usb 8-1: device descriptor read/64, error -71 [ 307.180505][ T5722] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 307.242984][ T5722] dvb_usb_af9015 3-1:1.0: probe with driver dvb_usb_af9015 failed with error -22 [ 307.264202][ T5787] usb 7-1: USB disconnect, device number 5 [ 307.294032][ T5787] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 307.304296][ T5722] usb 3-1: USB disconnect, device number 19 [ 307.308459][ T5787] ftdi_sio 7-1:0.0: device disconnected [ 307.612388][ T984] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 307.802505][ T5715] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 308.042134][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 308.085310][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.102447][ T5715] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 308.129338][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.151452][ T8513] bond0: option arp_interval: invalid value (18446744073709551615) [ 308.155783][ T5715] usb 4-1: Product: syz [ 308.160279][ T8513] bond0: option arp_interval: allowed values 0 - 2147483647 [ 308.180001][ T5715] usb 4-1: Manufacturer: syz [ 308.185101][ T5715] usb 4-1: SerialNumber: syz [ 308.202404][ T984] usb 8-1: device descriptor read/64, error -71 [ 308.334437][ T984] usb usb8-port1: attempt power cycle [ 309.356734][ T5715] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 309.486978][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 309.661949][ T5715] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 309.773291][ T5715] usb 4-1: USB disconnect, device number 25 [ 309.798394][ T9] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 309.833365][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.835522][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 309.846476][ T9] usb 7-1: config 0 has no interface number 0 [ 309.875213][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.881961][ T8541] syz.4.615 (8541): attempted to duplicate a private mapping with mremap. This is not supported. [ 309.887843][ T9] usb 7-1: Product: syz [ 309.930289][ T9] usb 7-1: Manufacturer: syz [ 309.942939][ T9] usb 7-1: SerialNumber: syz [ 309.971434][ T9] usb 7-1: config 0 descriptor?? [ 310.198464][ T9] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 310.218292][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 310.229755][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 310.239880][ T9] usb 7-1: media controller created [ 310.263686][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.602408][ T984] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 310.624502][ T9] usb 7-1: USB disconnect, device number 6 [ 310.665338][ T8541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 310.703142][ T2226] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 310.742488][ T984] usb 8-1: device descriptor read/64, error -71 [ 311.362362][ T2226] usb 4-1: Invalid ep0 maxpacket: 32 [ 311.403276][ T984] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 311.502769][ T2226] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 311.588799][ T984] usb 8-1: device descriptor read/64, error -71 [ 311.653667][ T2226] usb 4-1: Invalid ep0 maxpacket: 32 [ 311.660495][ T2226] usb usb4-port1: attempt power cycle [ 311.710044][ T984] usb usb8-port1: attempt power cycle [ 311.716484][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.716565][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.780631][ T8571] FAULT_INJECTION: forcing a failure. [ 311.780631][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.796521][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.6.626 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.796552][ T8571] Tainted: [L]=SOFTLOCKUP [ 311.796558][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 311.796569][ T8571] Call Trace: [ 311.796575][ T8571] [ 311.796582][ T8571] dump_stack_lvl+0x100/0x190 [ 311.796612][ T8571] should_fail_ex.cold+0x5/0xa [ 311.796638][ T8571] _copy_from_iter+0x1f4/0x1690 [ 311.796667][ T8571] ? __asan_memset+0x23/0x50 [ 311.796691][ T8571] ? __pfx__copy_from_iter+0x10/0x10 [ 311.796717][ T8571] ? __pfx___alloc_skb+0x10/0x10 [ 311.796750][ T8571] netlink_sendmsg+0x808/0xda0 [ 311.796777][ T8571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.796802][ T8571] ? selinux_socket_sendmsg+0x198/0x2f0 [ 311.796832][ T8571] ____sys_sendmsg+0xa4d/0xbe0 [ 311.796850][ T8571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.796873][ T8571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.796903][ T8571] ___sys_sendmsg+0x190/0x1e0 [ 311.796924][ T8571] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.796943][ T8571] ? get_pid_task+0x106/0x250 [ 311.796974][ T8571] ? find_held_lock+0x2b/0x80 [ 311.797010][ T8571] __sys_sendmsg+0x160/0x210 [ 311.797036][ T8571] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.797074][ T8571] do_syscall_64+0x123/0x790 [ 311.797104][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.797123][ T8571] RIP: 0033:0x7f5028f9e0d9 [ 311.797140][ T8571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.797157][ T8571] RSP: 002b:00007f5029eac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.797175][ T8571] RAX: ffffffffffffffda RBX: 00007f5029225fa0 RCX: 00007f5028f9e0d9 [ 311.797187][ T8571] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 311.797197][ T8571] RBP: 00007f5029eac090 R08: 0000000000000000 R09: 0000000000000000 [ 311.797208][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.797218][ T8571] R13: 00007f5029226038 R14: 00007f5029225fa0 R15: 00007ffd07f3a1e8 [ 311.797242][ T8571] [ 312.125423][ T30] audit: type=1400 audit(1787510583.758:650): avc: denied { create } for pid=8573 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 312.182498][ T2226] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 312.191482][ T30] audit: type=1400 audit(1787510583.818:651): avc: denied { bind } for pid=8573 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 312.242246][ T30] audit: type=1400 audit(1787510583.858:652): avc: denied { listen } for pid=8573 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 312.270387][ T2226] usb 4-1: Invalid ep0 maxpacket: 32 [ 312.282406][ T984] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 312.314371][ T984] usb 8-1: device descriptor read/8, error -71 [ 312.422411][ T2226] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 312.443433][ T2226] usb 4-1: Invalid ep0 maxpacket: 32 [ 312.458771][ T2226] usb usb4-port1: unable to enumerate USB device [ 313.023811][ T984] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 313.031729][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.632'. [ 313.053548][ T984] usb 8-1: device descriptor read/8, error -71 [ 313.084073][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.632'. [ 313.164055][ T984] usb usb8-port1: unable to enumerate USB device [ 313.795300][ T30] audit: type=1400 audit(1787510585.418:653): avc: denied { getattr } for pid=8605 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.434350][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 316.480768][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 316.506448][ T30] audit: type=1400 audit(1787510588.138:654): avc: denied { read } for pid=8619 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.439311][ T30] audit: type=1400 audit(1787510588.138:655): avc: denied { open } for pid=8619 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.212433][ T5715] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 319.634290][ T5715] usb 7-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=9f.f5 [ 319.778192][ T5715] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 319.826540][ T5715] usb 7-1: config 4 has no interface number 0 [ 319.852588][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.958170][ T5715] usb 7-1: Product: syz [ 320.019263][ T5715] usb 7-1: Manufacturer: syz [ 320.079004][ T5715] usb 7-1: SerialNumber: syz [ 320.112568][ T5817] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 320.173241][ T30] audit: type=1400 audit(1787510591.798:656): avc: denied { write } for pid=8601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.410024][ T5817] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 320.553514][ T30] audit: type=1400 audit(1787510591.798:657): avc: denied { create } for pid=8601 comm="dhcpcd-run-hook" name="resolv.conf.eth11.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 320.627085][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.806282][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.881772][ T5715] ax88179_178a 7-1:4.147: probe with driver ax88179_178a failed with error -22 [ 320.916116][ T30] audit: type=1400 audit(1787510591.838:658): avc: denied { write } for pid=8601 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=4913 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 320.958586][ T5817] usb 4-1: Product: syz [ 321.016281][ T5817] usb 4-1: Manufacturer: syz [ 321.094820][ T5817] usb 4-1: SerialNumber: syz [ 321.231681][ T5715] usb 7-1: USB disconnect, device number 7 [ 321.387239][ T30] audit: type=1400 audit(1787510591.848:659): avc: denied { append } for pid=8601 comm="dhcpcd-run-hook" name="resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=4913 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 321.602179][ T5817] symbolserial 4-1:1.0: symbol converter detected [ 321.681837][ T5817] usb 4-1: symbol converter now attached to ttyUSB0 [ 321.844421][ T8663] netlink: 'syz.6.646': attribute type 1 has an invalid length. [ 322.388087][ T30] audit: type=1400 audit(1787510594.008:660): avc: denied { write } for pid=8659 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.477001][ T30] audit: type=1400 audit(1787510594.008:661): avc: denied { unlink } for pid=8659 comm="rm" name="resolv.conf.eth11.ipv4ll" dev="tmpfs" ino=4913 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.676730][ T8663] bond1: entered promiscuous mode [ 322.719473][ T8663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.759612][ T30] audit: type=1400 audit(1787510594.388:662): avc: denied { mount } for pid=8675 comm="syz.7.647" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 322.971311][ T30] audit: type=1400 audit(1787510594.598:663): avc: denied { ioctl } for pid=8679 comm="syz.6.648" path="socket:[22129]" dev="sockfs" ino=22129 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 323.132721][ T5787] usb 4-1: USB disconnect, device number 30 [ 323.854834][ T5787] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 324.068592][ T30] audit: type=1400 audit(1787510595.368:664): avc: denied { unmount } for pid=8129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 324.181917][ T5787] symbolserial 4-1:1.0: device disconnected [ 324.692143][ T30] audit: type=1400 audit(1787510596.318:665): avc: denied { write } for pid=8678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.336550][ T30] audit: type=1400 audit(1787510597.968:666): avc: denied { write } for pid=8718 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.404899][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 326.752206][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 328.434745][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.660'. [ 328.504901][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.660'. [ 328.722451][ T29] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 328.944988][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 329.011743][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.059988][ T29] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 329.170231][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.205786][ T29] usb 3-1: Product: syz [ 329.214397][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 329.241391][ T29] usb 3-1: Manufacturer: syz [ 329.287408][ T29] usb 3-1: SerialNumber: syz [ 329.434419][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 329.509233][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.593581][ T24] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 330.753909][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.850681][ T24] usb 4-1: Product: syz [ 330.865553][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 330.888404][ T24] usb 4-1: Manufacturer: syz [ 330.973415][ T24] usb 4-1: SerialNumber: syz [ 331.154413][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 332.282976][ T29] usb 3-1: USB disconnect, device number 20 [ 332.368792][ T30] audit: type=1400 audit(1787510603.998:667): avc: denied { write } for pid=8731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.377777][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 332.436125][ T24] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 332.476840][ T30] audit: type=1400 audit(1787510604.078:668): avc: denied { connect } for pid=8778 comm="syz.6.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 332.645632][ T30] audit: type=1400 audit(1787510604.278:669): avc: denied { write } for pid=8784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.646931][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 332.722373][ T5722] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 332.833572][ T24] usb 4-1: USB disconnect, device number 31 [ 332.854151][ T5722] usb 7-1: device descriptor read/64, error -71 [ 332.866748][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 333.122644][ T5722] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 333.337471][ T5722] usb 7-1: device descriptor read/64, error -71 [ 333.453107][ T5722] usb usb7-port1: attempt power cycle [ 333.853243][ T5722] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 333.947841][ T5722] usb 7-1: device descriptor read/8, error -71 [ 334.252586][ T5722] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 334.292848][ T5722] usb 7-1: device descriptor read/8, error -71 [ 334.317387][ T30] audit: type=1400 audit(1787510605.948:670): avc: denied { bind } for pid=8816 comm="syz.7.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 334.375946][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.667'. [ 334.390220][ T30] audit: type=1400 audit(1787510605.948:671): avc: denied { name_bind } for pid=8816 comm="syz.7.667" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 334.428638][ T5722] usb usb7-port1: unable to enumerate USB device [ 334.465162][ T30] audit: type=1400 audit(1787510605.948:672): avc: denied { node_bind } for pid=8816 comm="syz.7.667" saddr=ff02::1 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 335.475814][ T30] audit: type=1400 audit(1787510605.998:673): avc: denied { write } for pid=8794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.631220][ T8823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 335.643081][ T30] audit: type=1400 audit(1787510607.258:674): avc: denied { write } for pid=8834 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.992856][ T5715] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 337.142503][ T5715] usb 7-1: device descriptor read/64, error -71 [ 337.423011][ T5715] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 337.481772][ T30] audit: type=1400 audit(1787510609.108:675): avc: denied { create } for pid=8848 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 337.521932][ T30] audit: type=1400 audit(1787510609.138:676): avc: denied { write } for pid=8848 comm="syz.4.684" path="socket:[22877]" dev="sockfs" ino=22877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 338.420256][ T5715] usb 7-1: device descriptor read/64, error -71 [ 338.533815][ T5715] usb usb7-port1: attempt power cycle [ 338.563616][ T30] audit: type=1400 audit(1787510610.198:677): avc: denied { ioctl } for pid=8869 comm="syz.2.679" path="socket:[22368]" dev="sockfs" ino=22368 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.592717][ T8870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.608787][ T8870] xt_hashlimit: size too large, truncated to 1048576 [ 338.732058][ T8862] 9p: Bad value for 'wfdno' [ 338.839590][ T30] audit: type=1400 audit(1787510610.468:678): avc: denied { mounton } for pid=8876 comm="syz.2.693" path="/file0" dev="ramfs" ino=22453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 338.869498][ T8877] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 338.878650][ T8877] overlayfs: failed to set xattr on upper [ 338.884703][ T8877] overlayfs: ...falling back to redirect_dir=nofollow. [ 338.893277][ T5715] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 338.901755][ T8877] overlayfs: ...falling back to uuid=null. [ 338.908404][ T8877] overlayfs: conflicting lowerdir path [ 338.922794][ T5715] usb 7-1: device descriptor read/8, error -71 [ 338.936368][ T8880] comedi comedi0: Minor -4 is invalid! [ 338.954900][ T30] audit: type=1400 audit(1787510610.588:679): avc: denied { read write } for pid=8876 comm="syz.2.693" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 338.985568][ T30] audit: type=1400 audit(1787510610.588:680): avc: denied { open } for pid=8876 comm="syz.2.693" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 339.172542][ T5715] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 339.194386][ T5715] usb 7-1: device descriptor read/8, error -71 [ 339.302853][ T5715] usb usb7-port1: unable to enumerate USB device [ 339.322422][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 339.473320][ T24] usb 8-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 339.485335][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.493661][ T24] usb 8-1: Product: syz [ 339.497851][ T24] usb 8-1: Manufacturer: syz [ 339.502483][ T24] usb 8-1: SerialNumber: syz [ 339.509612][ T24] usb 8-1: config 0 descriptor?? [ 339.849536][ T8899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50907 sclass=netlink_route_socket pid=8899 comm=syz.2.699 [ 339.987879][ T8902] tmpfs: Bad value for 'mpol' [ 341.171190][ T24] usb 8-1: USB disconnect, device number 9 [ 341.217314][ T8917] block nbd0: Unsupported socket: should be TCP or UNIX. [ 341.405149][ T8917] xt_HMARK: spi-set and port-set can't be combined [ 341.494826][ T8915] 9p: Bad value for 'wfdno' [ 341.615356][ T8926] ======================================================= [ 341.615356][ T8926] WARNING: The mand mount option has been deprecated and [ 341.615356][ T8926] and is ignored by this kernel. Remove the mand [ 341.615356][ T8926] option from the mount to silence this warning. [ 341.615356][ T8926] ======================================================= [ 341.651350][ T8928] comedi comedi0: Minor -4 is invalid! [ 341.677381][ T8926] overlay: Unknown parameter 'fowner' [ 344.142404][ T5715] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 344.312384][ T5715] usb 7-1: device descriptor read/64, error -71 [ 344.350787][ T30] audit: type=1400 audit(1787510615.978:681): avc: denied { setopt } for pid=8970 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.496363][ T30] audit: type=1400 audit(1787510616.128:682): avc: denied { map } for pid=8970 comm="syz.3.717" path="/dev/video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 344.522452][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 344.593190][ T5715] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 344.740911][ T30] audit: type=1400 audit(1787510616.368:683): avc: denied { cmd } for pid=8977 comm="iou-wrk-8978" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 344.792400][ T5715] usb 7-1: device descriptor read/64, error -71 [ 344.923911][ T5715] usb usb7-port1: attempt power cycle [ 344.939383][ T8983] FAULT_INJECTION: forcing a failure. [ 344.939383][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.952811][ T8983] CPU: 1 UID: 0 PID: 8983 Comm: syz.7.727 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.952842][ T8983] Tainted: [L]=SOFTLOCKUP [ 344.952848][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 344.952859][ T8983] Call Trace: [ 344.952865][ T8983] [ 344.952871][ T8983] dump_stack_lvl+0x100/0x190 [ 344.952902][ T8983] should_fail_ex.cold+0x5/0xa [ 344.952927][ T8983] strncpy_from_user+0x3b/0x2d0 [ 344.952956][ T8983] do_getname+0x78/0x390 [ 344.952979][ T8983] user_path_at+0x26/0x60 [ 344.953004][ T8983] __x64_sys_mount+0x1fb/0x310 [ 344.953025][ T8983] ? __pfx___x64_sys_mount+0x10/0x10 [ 344.953052][ T8983] do_syscall_64+0x123/0x790 [ 344.953081][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.953099][ T8983] RIP: 0033:0x7f89b019e0d9 [ 344.953114][ T8983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.953131][ T8983] RSP: 002b:00007f89b1140028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.953148][ T8983] RAX: ffffffffffffffda RBX: 00007f89b0425fa0 RCX: 00007f89b019e0d9 [ 344.953160][ T8983] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 344.953171][ T8983] RBP: 00007f89b1140090 R08: 00002000000001c0 R09: 0000000000000000 [ 344.953188][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.953198][ T8983] R13: 00007f89b0426038 R14: 00007f89b0425fa0 R15: 00007fff8c2aadb8 [ 344.953222][ T8983] [ 346.166587][ T5715] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 346.205336][ T5715] usb 7-1: device descriptor read/8, error -71 [ 346.612361][ T5715] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 346.652840][ T5715] usb 7-1: device descriptor read/8, error -71 [ 346.782864][ T5715] usb usb7-port1: unable to enumerate USB device [ 347.778617][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 347.828939][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 349.261100][ T30] audit: type=1400 audit(1787510620.888:684): avc: denied { connect } for pid=9033 comm="syz.4.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.184790][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 350.421837][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 350.832383][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 352.422979][ T9068] genirq: Flags mismatch irq 2. 00200000 (aio_iiro_16) vs. 00200000 (pcl818) [ 352.697570][ T30] audit: type=1400 audit(1787510624.328:685): avc: denied { accept } for pid=9069 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.720391][ T29] usb 8-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f [ 352.730506][ T30] audit: type=1400 audit(1787510624.348:686): avc: denied { read } for pid=9069 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.751361][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.764274][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.782347][ T29] usb 8-1: Product: syz [ 352.790122][ T29] usb 8-1: Manufacturer: syz [ 352.806471][ T29] usb 8-1: SerialNumber: syz [ 353.965608][ T29] redrat3 8-1:1.0: Couldn't find all endpoints [ 354.011479][ T29] usb 8-1: USB disconnect, device number 10 [ 355.097455][ T30] audit: type=1400 audit(1787510626.728:687): avc: denied { append } for pid=9090 comm="syz.3.760" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.160418][ T30] audit: type=1400 audit(1787510626.728:688): avc: denied { read write } for pid=9090 comm="syz.3.760" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 355.242418][ T30] audit: type=1400 audit(1787510626.728:689): avc: denied { open } for pid=9090 comm="syz.3.760" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 355.325004][ T30] audit: type=1400 audit(1787510626.728:690): avc: denied { ioctl } for pid=9090 comm="syz.3.760" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 358.155618][ T30] audit: type=1400 audit(1787510629.788:691): avc: denied { ioctl } for pid=9119 comm="syz.3.767" path="socket:[23463]" dev="sockfs" ino=23463 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 359.445922][ T30] audit: type=1400 audit(1787510631.078:692): avc: denied { map } for pid=9141 comm="syz.4.768" path="/dev/input/event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 359.503094][ T9146] misc userio: No port type given on /dev/userio [ 359.637518][ T30] audit: type=1400 audit(1787510631.268:693): avc: denied { read } for pid=9149 comm="syz.2.778" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 359.688163][ T9152] rnbd_client L202: map_device: Unknown parameter or missing value 'ses' [ 359.702035][ T30] audit: type=1400 audit(1787510631.268:694): avc: denied { open } for pid=9149 comm="syz.2.778" path="/165/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 359.826633][ T9155] kAFS: Invalid Command on /proc/fs/afs/cells file [ 360.099502][ T30] audit: type=1400 audit(1787510631.728:695): avc: denied { write } for pid=9166 comm="syz.3.786" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 360.427753][ T30] audit: type=1400 audit(1787510632.058:696): avc: denied { mount } for pid=9176 comm="syz.4.791" name="/" dev="pstore" ino=4081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 360.461773][ T30] audit: type=1400 audit(1787510632.088:697): avc: denied { create } for pid=9178 comm="syz.3.792" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.512799][ T30] audit: type=1400 audit(1787510632.148:698): avc: denied { read write } for pid=9178 comm="syz.3.792" name="file2" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.570553][ T30] audit: type=1400 audit(1787510632.148:699): avc: denied { ioctl open } for pid=9178 comm="syz.3.792" path="/186/file0/file2" dev="overlay" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.599344][ T24] hid-generic 0009:FFFF6EA4:0009.0006: hidraw0: HID v0.04 Device [syz0] on syz0 [ 360.648902][ T30] audit: type=1400 audit(1787510632.278:700): avc: denied { unlink } for pid=5598 comm="syz-executor" name="file2" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.724998][ T9185] fido_id[9185]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 361.564579][ T9231] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 361.880154][ T9251] CUSE: unknown device info "" [ 361.894378][ T9251] CUSE: unknown device info "ÿw" [ 361.909045][ T9251] CUSE: unknown device info "" [ 361.927536][ T9251] CUSE: unknown device info "" [ 361.942158][ T9251] CUSE: unknown device info "" [ 361.970358][ T9250] bcache: register_bcache() error : failed to open device [ 361.971361][ T9251] CUSE: unknown device info "" [ 361.993264][ T9251] CUSE: unknown device info "" [ 362.004296][ T9251] CUSE: DEVNAME unspecified [ 362.020229][ T9257] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 362.037759][ T9257] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 362.113970][ T9257] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 362.165340][ T9257] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 362.206451][ T9257] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 362.234286][ T9257] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 362.249418][ T9257] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 362.288338][ T9257] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 362.323345][ T9257] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 362.721259][ T9294] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 363.803612][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.850'. [ 363.844671][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.850'. [ 363.953956][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 365.556538][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.7.857'. [ 366.115500][ T1437] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 366.127591][ T1437] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 366.135984][ T1437] CPU: 1 UID: 0 PID: 1437 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 366.146996][ T1437] Tainted: [L]=SOFTLOCKUP [ 366.151311][ T1437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 366.161358][ T1437] Workqueue: events_highpri f_midi_in_work [ 366.167153][ T1437] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 366.172340][ T1437] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab 3e 31 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 366.191954][ T1437] RSP: 0018:ffffc9000602fa08 EFLAGS: 00010006 [ 366.197998][ T1437] RAX: dffffc0000000000 RBX: ffff888079c30a10 RCX: 0000000000000001 [ 366.205946][ T1437] RDX: 000000000000000c RSI: ffffffff87d9d585 RDI: 0000000000000060 [ 366.213891][ T1437] RBP: ffff888028bf00e0 R08: 0000000000000005 R09: 0000000000000005 [ 366.221843][ T1437] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888028bf0c00 [ 366.229791][ T1437] R13: ffff888079c30a00 R14: ffff888028bf00d8 R15: 0000000000000000 [ 366.237744][ T1437] FS: 0000000000000000(0000) GS:ffff888123c88000(0000) knlGS:0000000000000000 [ 366.246649][ T1437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.253295][ T1437] CR2: 0000200000e5e000 CR3: 0000000020bfe000 CR4: 00000000003526f0 [ 366.261244][ T1437] Call Trace: [ 366.264504][ T1437] [ 366.267433][ T1437] usb_ep_queue+0xfa/0x3c0 [ 366.271831][ T1437] f_midi_in_work+0x9b0/0x1580 [ 366.276574][ T1437] ? __pfx_f_midi_in_work+0x10/0x10 [ 366.281746][ T1437] ? process_one_work+0x906/0x1b10 [ 366.286844][ T1437] ? process_one_work+0x906/0x1b10 [ 366.291952][ T1437] process_one_work+0xac7/0x1b10 [ 366.296881][ T1437] ? __pfx_process_one_work+0x10/0x10 [ 366.302232][ T1437] ? __pfx_f_midi_in_work+0x10/0x10 [ 366.307406][ T1437] worker_thread+0x5ef/0xe50 [ 366.311977][ T1437] ? __pfx_worker_thread+0x10/0x10 [ 366.317082][ T1437] ? kthread+0x13a/0x450 [ 366.321321][ T1437] ? __pfx_worker_thread+0x10/0x10 [ 366.326413][ T1437] kthread+0x373/0x450 [ 366.330460][ T1437] ? __pfx_kthread+0x10/0x10 [ 366.335036][ T1437] ret_from_fork+0x730/0xd60 [ 366.339598][ T1437] ? __pfx_ret_from_fork+0x10/0x10 [ 366.344681][ T1437] ? __switch_to+0x800/0x10f0 [ 366.349342][ T1437] ? __pfx_kthread+0x10/0x10 [ 366.353916][ T1437] ret_from_fork_asm+0x1a/0x30 [ 366.358670][ T1437] [ 366.361669][ T1437] Modules linked in: [ 366.365536][ T1437] ---[ end trace 0000000000000000 ]--- [ 366.370961][ T1437] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 366.376153][ T1437] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab 3e 31 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 366.395825][ T1437] RSP: 0018:ffffc9000602fa08 EFLAGS: 00010006 [ 366.401866][ T1437] RAX: dffffc0000000000 RBX: ffff888079c30a10 RCX: 0000000000000001 [ 366.409810][ T1437] RDX: 000000000000000c RSI: ffffffff87d9d585 RDI: 0000000000000060 [ 366.417763][ T1437] RBP: ffff888028bf00e0 R08: 0000000000000005 R09: 0000000000000005 [ 366.425721][ T1437] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888028bf0c00 [ 366.433679][ T1437] R13: ffff888079c30a00 R14: ffff888028bf00d8 R15: 0000000000000000 [ 366.441623][ T1437] FS: 0000000000000000(0000) GS:ffff888123c88000(0000) knlGS:0000000000000000 [ 366.450536][ T1437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.457103][ T1437] CR2: 0000200000e5e000 CR3: 0000000020bfe000 CR4: 00000000003526f0 [ 366.465054][ T1437] Kernel panic - not syncing: Fatal exception [ 366.471289][ T1437] Kernel Offset: disabled [ 366.475589][ T1437] Rebooting in 86400 seconds..