last executing test programs: 6m24.223960668s ago: executing program 2 (id=961): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="b700000012edfffebfa3000000000000250a000028feffff6203f0fff8ffffff61a4f0ff000000007c0400000000000077000000000000002604000001ed0a00550a020017ffff17bf400000000000007b1a00fe000000001d04000000000000c60000000000000095000000000000000f3bc065b7a379d17cf9333379fc9e84af69002435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91082050e420fe275d0002000001b6482a0800000098efefb202ee010400006e7a1d03001f379cbf01de00b1b564fef3bef7d90692a4380548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc4b6cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0f2ce39da8db04acd00009fbe4b61a615c6c57ac21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e791665858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7296e37c4f46010400000000c3d829faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b85d9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1ba7ec6667e699fdc9a1f5a7b3caae05f13792292cbb49b3aab06b1e042ff2164d80c605532908ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c1e3fcd7071b53ac29df826f8ae6d6e18c1eac7e9bb5a05d8edf808df932c19e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b308008931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000400000000001800010300000000000000407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668238e85c79eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c0230ddfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb057253472f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f33400047445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faee0beac08dfb8d3682ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3816953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694cd5fe9d145906d410f58f1951405d10504efe402cae085afef5dbd616e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f024f8da775f71150212b84fc0456351e096f1e7e6133ae14d1429cd4905dabb52e43af0065acf97b49512d1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232c54226e24b6c38e70380bb2f57e8767dc811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed6caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb9517f787b0900278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e5343571a95b12aec06a9f581ea97c3f03add23f14c8db5555c62de4f626483632a2ab549000ccd3a3477f88dd6e66bbb6a8083432a94081f72ed7fec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e0df6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900662201ae21ef164437f7ecf8ed9a22da26ae804bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2bd16adae02c821b62428902aad499825ab85a348638384cd1f8bb72b3e5250b0d0a20b4e2a2328d53b5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717719ca77a4e0a97c1c6ca791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65246fec3c34e2de044cdaa70b8a67b33fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1deee15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba69060000008b4264eb6f5137bdaa075f1488d22230592a7900000000000037c8986c1c19100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b8697741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e029a210fa9274d4ad7c445e50f76419ab4f78f67a09e63dd4faa2e7b19399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e228cca07bab4770b4185de44db6bf21fef32a8d5b36d9016238fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e31d4731614a50c16c6a417442ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffeac350a5c554a387de4ee7aac6478dd82bef044a6d33c789d566c90c46ad581ac62f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bdad938bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f9b180010000000000000c89f3fb2f951ae81d7fcc8bc0400000000000000000000000000000000009231feef311734493c9fd999c728e3e21bb4f2bafbcd197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e80b65a9201bc4b730500df5a0100363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe038c8348bcdd40a1792be952c17f56e5e2f73019352f1fb6822a99f933ee220d5233fa20595aa5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd957729d63dc1bfc7b772cb000000af22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce90146b444338c1f7a2e991888d64e861583f0e0022121248465d37e7c386f8c614dff95defb464172998a684e21ca960897c32a127453ffffffffffffffffbcfcd7e27e37ea9c80a5b073208d29f2e4ce9438bc39300bbcc27a457296cc27f224ef4ced0773ed6bdbe4c8965d7002fa8b4c1b11f3c5e74ecedeaf4221f17448241500000000b52ee61d77b0d5adb1ca7ab9c34e7d72738309da56d5fc96acb119283c534cd5b0429d3e923c4aba0000000000000000000000f30000c54e3614c328e472bbcab5010973f6887d602bbf2f090c8ca87e58621ed208b2c48e38d86b017657daa0371e96dee683d0ce64485c47d89b363dc2b5e3dc998181c150f1f963c52b8750d947448d29bfd944d350b83c2919b1eff72072a9e1e615f5ddd8cab9459689cf259acb61a73cfeffffffffffffff4a354904909e15a68b999a8b5e5f08fcdf295e6fb68fdba28e3c6f566246416b4cf698b6fc5e9e39eb4e15e2f74e76d40e8646f0bb5395c8e31f92ccb73ff45b2bef72b2ab4306708e8e2df01ee6eb2c61bca7a1c820b821e35ac210caa0e676ff182644678bf7c8fe554cf5b32c283b226b398e977d8455971bfa42bb733cd63123255acb793b35582ae61ca8834e9d6f0fd2c57a82c89bd2e6f8d3504135854c36179dc71eeeb7b89d697abe74bb0accb12cdb4e2b4666f0ab74f0bbec4deaf1ae8fb2f2666ca202a1547d3642046e3397617c3bc8c85616e1d0d45b08e5eea4962141ffcaadfeec7e7dda146b36e4f681e8318069e821dcbe9dd41c4fcf025402e38ad8dc5c9fb7329e3719ba226d58afbf1ab306a7b57740085a0df4a07346b75ba21f9513b269657b0483a4e7530db07e5b1354920153227389487b53b661033ff2c10ef982eeb7dafb460104ae0c779c521bfa7f9daf3d7085d7d80f279227aa4e8dbf672e0000000000000000000000000000000071b96aa2dcb74da616702edf6139d0ece1a10dc80bb31916cf3347e764a33fddeb5aba6e332a82117b7d3aa656455af4ed9fcc560645168173547a9d6efa2d167290c0e63e7b80a186cb34c18b422782ee5ec268c283231507ab4409442f5c125d97aae5a4c2960aab0c16ef54966d295f7e8db38d6e8200000000000000000000000024fbdc9c129b0861e0639f8237ee9b7ce67b1d4c786dad3685dc1c7cbf7a096dfa475303b606c5fc9e769122f41402b5976cf221af47eb9ceb279a08d8e084f4f808ad2ec841f86070eee32a4b4fbdc77f06fcdb3941aac633882c264a27e8784a9cc704939132e428317b68e80f805dbc19d6e09f1adb4fb706c5a280b1958800ef630517347fa2076a28081cca208a182efa4dbf9e7e6474ced53c36eefd000000000000000000000000000000000000000041bb141a12605fd0fe2534690caa2473d671911619a001462e0deb4e7b13b055f341af34d66f6501550206bad3d64eb498ba4070f8a5b1061d353bb74d521d52887c84c47fc8385e0590410203c3f13c53fd72c67d33b9aeeb1841bd2234efb055dc7c9031080cecc7ac4ff261d0810b67354f08fc2eada568ad49000000000000000000000000008210e99d338dbfc97441a9d7c5636616d31b5dc352adcbe84acf31652eec4ed2e1509232e23361548acf88e0333e2721d8f7fd1b3086b2dacd3624bec743821e9d39f6f5a5cd9b1483fdfec3412d0bfb18ca8df5d8904ec0f4c43c9348038c8b9d94b86025b46b96e825552880c94cb2bfecb6da827a56083923cd121d4b14df15b761028caab512f6bd749140a6639180a0172e0859ce1274afaacc997e2c468402c63c13decc3280955b92ef902274efd653eedc0bf3f066856bf5204036e0448a2f70d62c8467ee661b5fbc764f9c044eb14a4071078120d1b3ce85e955a3ffe48845af190ee8eceb97d22fa0829aa18042a450e73364c68f12e8c4821e5ba17d5d36847fa7516d511f92824f1d514847e34ce43cb2eec6a1dd3d16db2f7afad959b3777b6be9b18fed9d0ac9cd4f7fe97d38aef9bc4ad9a1bf9ec77c7a28d6bc6b14968c8f045bf81d3f8bbdd0d040c50dfc647307b1222b06439890ff618d2b2689ea4c5e4672b21726df2c2d69707def1fdd062fe49502064595d4854393f40444f80a7eb3eeb533b50aa4bcf563b4125219b9aa4f67830c7d475b99c07787fd286134d223d06eeb68b9a7bdf82c7bb7cf16e03d2313543e9f221a267808e0245500e4a712d25851697a939e097490d327e700a2a2674dc3867175f886c24791d3a100000000846e4eaa8631308dab74d0f45b4fb1081f753ae999241215627152f6a96a62250260255cb21181c53493419ecbf00c0a3c4fa674f744fcc020981e0896fd4d8199ef96cae461605ff2ca3e4c5db3de7eb1062a123650067cff0c7d433202249db2133781aac9c8a9815a4ef3805221219c3a9cd80c816cd83939bfddf17d8e99590b7387be9e440dc06d43ec40f0e8ab1ec008299f96ecc4b0e0e2e3d5e68b0686398e1197ed2c8ec536d4a62ba950e60ce28afe7296042e1a4c9c35b72e409e1a371b8ff9e3c972756b6c1685a6f9d9c97dde0d213c59068faf02f65943171bfb8cba50a2337ec4e51c2d75ee8fd76b0c0e39f2189a7a36a381ffea08e2feb64a3f37213292928c2db3353baafcadccc43a87e131cf88e801646ebffc99e7c2cc08cd30dd601c03da57a55ba661d9df114296b360f702179b16ac22f8e95621028b8747b7e68cae474ca00130f60fcb1a810a969329c9c5fa000000008313705e362202ccf47ef4fcb9045036095e7d7c0f240c858d565751c0b92d906100a04fc0cc40e4327c2798b85e416db5e8a64e7d81ebe888624f68ed3a0e138505c476941ae36a9373450d37b3bab73f8dd8e67c415805466724ebcc698a1876002f5b6a994e037c2991a0566dd92df6fcc9320feee693a80b4a18abce533b34a18e84f515217d", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35}, 0x94) 6m24.086286711s ago: executing program 2 (id=962): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x1, 0x1, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x10000, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff}, {0x20000000000, 0x4, 0x6, 0x9}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@dev}]}]}, 0x13c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400000000005001500010000800500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000001500000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001407f"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$get_keyring_id(0x0, 0x0, 0x1) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) 6m19.331734139s ago: executing program 2 (id=973): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000280)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) (fail_nth: 7) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) setresgid(0xee00, 0xee01, 0x0) setregid(0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="81060f00000097d816b49daf07d2e91b9b678b7261e513958e3589f0cc0e22b85c647f33651e6c847c3627d6e804bccf5f80fcd946d66a7ac58065088484125a7de066a49c6aa2749581b3cac57c52d21bbbe7746dc4e6c46e1eb7c23183e1b2b4f316bf3fa775308677af0ed35eba872689d09f1f4b0aa5c232e24b7476d989336c7ee8231e0ef0d0cc25afe37574069bf759e8b7a436be865473ac14e7f6c960251979bf89a8489813ef455a2b5fece7e143f5fd95ea4fc013f2d763feeacfcf1c33ee9b0f900e"], 0x0, 0x0, 0x0, 0x0, 0x0}) 6m17.358954388s ago: executing program 2 (id=982): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000040)='./file0/../file0\x00', 0x110) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r6, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x300003, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 6m15.699631348s ago: executing program 2 (id=986): readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060005000000000008000a00", @ANYRES32=0x0, @ANYBLOB="a6acaa508ad42e0873affbf219a54d312cefc96b57fef1001917faffffffffffffffca2b6cc45806829a5d55cb60bdde385402d40d140547e66baf5cd38c107ba026bffc65bc14116233d235cfc1404aad728fe57873dcfa835a92fa14000647f4b7da"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',rootmo']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="050000000a000000324900008000000000010000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000200000000000000000000000000000000000000000097f68137af6854a0ab9da85701145f2691369836aff09455be7646e1c2e7d56f2d0bc29a906c2d4526cf121d516f1e79902b99bead15d434c3117b59530f105674bb41de27fa21f4b8e8aeded45cd29e3ab2c008f002f67ff3839702ffa64accac2f823bb72618e1ee55081580dc0bd429fce245c61631f6ef48983fd1ac5d343fc8759d5a4b05602c82e191606c0941beeed0315d77682818263d0ddcf51d7d3b9823cc9a6760e58eb13240d895cf293ec757a91da7b8ca97bb237329c542132118bbfa933fe70be7804d2c8c9bbe772adca7"], 0x50) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m11.865590995s ago: executing program 2 (id=1000): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000007c0), 0x110090, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=virtio,afid=0xfffffffffffff393,cache=none,posixacl,access=client,access=user,afid=0x00000000000001ff,cache=mmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0xe, 0x9, 0x8, 0x1, @mcast2, @remote, 0x8, 0x700, 0x7, 0xc0}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6c6295b8c56c557a}, 0xc, &(0x7f0000000600)={&(0x7f0000000c80)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYBLOB="1000f339fffffbdbdf25190000003400018008000300030000001400020064756d6d793000000000000000000000140002006d6163766c616e3000000000000000004c00018008000100", @ANYRESOCT=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14008020000000000000746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626174616476300008000000000000000800010016a4695860ff2d8b58773c47ab3087bc41ea93e897a7551cb6190e025e8ea7054d927bb66116e6855f6c2f12a025896e4a9282ee1cd90a9f017abb8a3a1829db38115e43d116e864b2384d077b7b3719f0b3aa6f3e9dd97695f8a9deee5e5007b3af3d1b0f828a8f41e6a3ce687fc7c5f96dd643d62bb21968005d039cac01023fbe07e6513b1062f2824050da075f93a6e098e9896b63cb034943c74d6450c08dadee6d54c9f98fcc43abd227baba3a95db580b917d49a4c277426874a8fc10d34bc4270367eaf55d42b124bff7ca4b40d1fb44b36325", @ANYRES32=r9, @ANYBLOB="1400018008000100", @ANYRES64=r10, @ANYBLOB="08000100", @ANYRESDEC=r7, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x24004805}, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES8=r9, @ANYRES16=r8, @ANYRES8=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 6m10.697274806s ago: executing program 32 (id=1000): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000007c0), 0x110090, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=virtio,afid=0xfffffffffffff393,cache=none,posixacl,access=client,access=user,afid=0x00000000000001ff,cache=mmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0xe, 0x9, 0x8, 0x1, @mcast2, @remote, 0x8, 0x700, 0x7, 0xc0}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6c6295b8c56c557a}, 0xc, &(0x7f0000000600)={&(0x7f0000000c80)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYBLOB="1000f339fffffbdbdf25190000003400018008000300030000001400020064756d6d793000000000000000000000140002006d6163766c616e3000000000000000004c00018008000100", @ANYRESOCT=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14008020000000000000746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626174616476300008000000000000000800010016a4695860ff2d8b58773c47ab3087bc41ea93e897a7551cb6190e025e8ea7054d927bb66116e6855f6c2f12a025896e4a9282ee1cd90a9f017abb8a3a1829db38115e43d116e864b2384d077b7b3719f0b3aa6f3e9dd97695f8a9deee5e5007b3af3d1b0f828a8f41e6a3ce687fc7c5f96dd643d62bb21968005d039cac01023fbe07e6513b1062f2824050da075f93a6e098e9896b63cb034943c74d6450c08dadee6d54c9f98fcc43abd227baba3a95db580b917d49a4c277426874a8fc10d34bc4270367eaf55d42b124bff7ca4b40d1fb44b36325", @ANYRES32=r9, @ANYBLOB="1400018008000100", @ANYRES64=r10, @ANYBLOB="08000100", @ANYRESDEC=r7, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x24004805}, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES8=r9, @ANYRES16=r8, @ANYRES8=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 4m6.573738155s ago: executing program 4 (id=1385): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 4m5.391765188s ago: executing program 4 (id=1387): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xfffffe3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000a) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0xffffffffffffffd) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x7f, 0x6, {0xffffffffffffffff}, {r1}, 0xdc, 0x3}) setresuid(r3, 0xee00, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x2, 0xac4, {}, {0xffffffffffffffff}, 0x9, 0x8}) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x23, 0x0, &(0x7f00000001c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002040200000000000000000000000000000005900000000000"], 0x50) socket$alg(0x26, 0x5, 0x0) 4m4.179974727s ago: executing program 4 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x11c}}, 0x0) 4m4.178575119s ago: executing program 4 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000002}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x10}, {0x1, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000011c0)={0x1, 0x0, [{0x570, 0x0, 0x9}]}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xc3a}]}}]}, 0x3c}}, 0x44) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4m4.010446128s ago: executing program 4 (id=1392): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x40008, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x1]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)={'L-', 0xb}, 0x16, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffc]}}, 0x5c) 4m3.083833313s ago: executing program 4 (id=1397): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 4m1.981003853s ago: executing program 33 (id=1397): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 13.770617044s ago: executing program 6 (id=2005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000001b00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r3], 0x40}}, 0x48010) close(r2) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000840)={{0x3, 0x0, 0x80, {0xd000, 0x3000, 0x2}}, "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", "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"}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x400, 0x0, 0x376}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 12.653401167s ago: executing program 1 (id=2010): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='!-\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e2000000000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x24000058) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x541880, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)={0x9, {0x7f, 0xe7, 0xfffffff8, 0xfffff000}, {0x2, 0x3, 0xffffbfff, 0xfff}, {0x40, 0x5}}) 12.421970072s ago: executing program 6 (id=2013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x20000001) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x98}}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="750a00000000000061119c000000000018000000000000000000000000000000950000000000000059d9547b7df05a"], &(0x7f0000000000)='GPL\x00'}, 0x80) 11.689370655s ago: executing program 1 (id=2014): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40}}, 0x50) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x2}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r4 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x6301}}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x3, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.511644383s ago: executing program 6 (id=2016): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x4, 0x8, 0x3, 0x200, 0x6, 0x80000001}, {0xb46, 0x8000, 0x1, 0x7, 0x3, 0x3}]}) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x4, 0x8, 0x3, 0x200, 0x6, 0x80000001}, {0xb46, 0x8000, 0x1, 0x7, 0x3, 0x3}]}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0x2, 0x12) (async) write$cgroup_int(r0, &(0x7f00000001c0)=0x2, 0x12) r2 = socket$netlink(0x10, 0x3, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x34, 0x4a, 0x2, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, r3}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000002) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)={0x514, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x17}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x4d8, 0x111, 0x0, 0x1, {0x4d4, 0x5, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2d5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x26}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe00}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7883270}]}, 0x514}, 0x1, 0x0, 0x0, 0x840}, 0x9000) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)={0x514, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x17}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x4d8, 0x111, 0x0, 0x1, {0x4d4, 0x5, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2d5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x81}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x26}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe00}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7883270}]}, 0x514}, 0x1, 0x0, 0x0, 0x840}, 0x9000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x5bb) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24040881}, 0x40000) r5 = socket$caif_stream(0x25, 0x1, 0x1) close_range(r1, r5, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xef, &(0x7f0000000a80)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x2, 0x1, 0x5, 0xa0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "932802"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc4, 0xff5e, 0xf7}, {0x6, 0x24, 0x1a, 0x8001, 0x22}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mdlm_detail={0x74, 0x24, 0x13, 0x9, "4cc1f25ee74fa7055ac858cbd4aeed88305dcf45b88b88ae0b50d0b4ca0aadd27ae16bc12a57a6732314a94fa861fd1e290fc55a37e244ac4c22532dc8c78f7b237ef440729acb003c684550823bdd1656275b6048991de96357c079edb259935eb91f8a138dbb543752269baa13b5d1"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xfa, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xb, 0x6}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x250, 0xe, 0x40, 0x5, 0x40, 0x40}, 0x72, &(0x7f0000000bc0)={0x5, 0xf, 0x72, 0x2, [@generic={0x63, 0x10, 0xa, "37ec9a841becc0ea1286d384c716e6f7c325954af989cbc967d28b28748901c9d353771711b4fe7f725b68dd2ed555c21f3cfcd8d3a067431272d0d41669d8c1ea71518becfc25d6cb044484d81df4e5d23ad043d49d0a7b8cc9154f3a0f94c8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x9, 0x5}]}, 0x6, [{0x26, &(0x7f0000000c40)=@string={0x26, 0x3, "eb8317dfe3a1544990d4c355aea9420e19fd357b3ae3690f33e00fb53bac6e1c2466940b"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x43, &(0x7f0000000d00)=@string={0x43, 0x3, "3ddbd525616501d11a98db02850270dfbe3cb544d755e77fc7f90af4bc4f0060600a81b5ddcca1257553f8b9b91d47c0285344bf4e4fcc95bb78ea513e825f7bf4"}}, {0xd2, &(0x7f0000000d80)=@string={0xd2, 0x3, "d636d31c287c077851b9c9a13ce0d5020ed884d2df16a85b05883fc9cb5aff50cfe4ba857bb31e11c102d33a5595226c753d7f30d42dd494f2d5c7702deea697a7def40f583398e0da42a15a49935c09e4022462bbdced67167e0b398e4109171f52c10fc8033e4fd57da311faf5004f8f624d619bfb02f2b011a03a3232407e4aaae3f6cf76886e01128f77c3ad368036896a82c3ea564542368914775d39246bb6acc76b1ddf586c5d7f8fb632860ed77dcb27919b18a707a6c8b380070f1d669b12b3a557d87aff9b4a273e2de6db"}}, {0x20, &(0x7f0000000e80)=@string={0x20, 0x3, "94221016fd9a1373086b73fffa349852642f20e5e99e0896e311b3fd1200"}}]}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000f40)={'nr0\x00', {0x2, 0x0, @private}}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001080)={0x4, 0x5, &(0x7f0000000f80)=[0xe8f, 0x5, 0x3, 0x1, 0x1d3d], &(0x7f0000000fc0)=[0xb46, 0xf5, 0x0, 0x80, 0x4], &(0x7f0000001000), &(0x7f0000001040)=[0x8, 0x9, 0x8000, 0x7, 0x9e, 0xcfe3]}) (async) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001080)={0x4, 0x5, &(0x7f0000000f80)=[0xe8f, 0x5, 0x3, 0x1, 0x1d3d], &(0x7f0000000fc0)=[0xb46, 0xf5, 0x0, 0x80, 0x4], &(0x7f0000001000), &(0x7f0000001040)=[0x8, 0x9, 0x8000, 0x7, 0x9e, 0xcfe3]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000010c0)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000010c0)=0x0) sched_setscheduler(r6, 0x3, &(0x7f0000001100)=0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1bc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x1050) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000001240)=0x1) read$dsp(r0, &(0x7f0000001280), 0x0) mknodat$null(r0, &(0x7f00000012c0)='./file0\x00', 0x10, 0x103) (async) mknodat$null(r0, &(0x7f00000012c0)='./file0\x00', 0x10, 0x103) syz_clone(0x44004080, &(0x7f0000001300)="ae067f460ee0769ad5d7aab8e10d431bb3f7b91b3b90baa7ce3226dd58128d0f9457497dba2aadc5dfca92b370721dccfa604b42f46025fa6f95ac937acf81259efb015877523b45c1bc04", 0x4b, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)="3234a4a14b5eefbe31b7ab0c9857a194c85a91cec2e146640512ea4c5934f57334d64b1669195cd803c2bfc2ce50b81ab45358eac0048823b0d82f374e9b492e103d76254e67013a1814ec4177af65dcb3c7b5f7cb0aa1f53ca37110401555c38ad0ee0384c01defbfef387dccc941dd6d3777cf70a86091a80508da5809e0c285cb44b9d112b8a6912adf4984c7d4cad168cb6db33f3cccc7d999c2a63543c87d12f241eca1a5e223780e90ac3a6df2af8fa03d00b2993e1fc28469") r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r7, &(0x7f00000014c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001500)=0x20) (async) getsockname$l2tp6(r7, &(0x7f00000014c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001500)=0x20) 9.917431261s ago: executing program 1 (id=2019): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000000)=0x4, 0x4) 8.601713193s ago: executing program 1 (id=2022): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xec}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000440)="9f870afe3c1c6c10e8151d5199ab11e66b4e0de2f79ac8c65d6356e0a3c9b44227eeccf8cb8f41714283537855459f278b4c40ffbbb0276601e31659ed38b92295a32b9176cdd102befb3f850a53dff73233018be37d1b733f846dfb90a13e6d996c5e5c5daff386dab026dde5d4a1dd8cce432f6d176ce09c154074b5", 0x0, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f846ae18ba5f22ccec65edd84e9d", 0x9f46, r4}, 0x38) unshare(0x400) io_uring_enter(r5, 0x351e, 0x483, 0x0, 0x0, 0x0) 8.515766609s ago: executing program 5 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='!-\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e2000000000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003300000000000000000000000000ffff6401010100000000d6690de306227df59b728f000000000400000000000000000000000000000000000000000000000000000000000000ff7fffffffffffff0000000000000000ffffffffffffffff040000000000000000000000000000000000000000000000000000000000000010000000090000000000000000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002dbd70002abd70002b00"/268], 0x154}}, 0x24000058) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000000000000000}}, {@directio}, {@dfltuid}, {@fscache}, {@fscache}, {@cachetag={'cachetag', 0x3d, ':('}}]}}) r6 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x541880, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000000)={0x9, {0x7f, 0xe7, 0xfffffff8, 0xfffff000}, {0x2, 0x3, 0xffffbfff, 0xfff}, {0x40, 0x5}}) 8.371581039s ago: executing program 3 (id=2025): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xa800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x7fffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000280), 0xfffffffb, r1}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xd7a0, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000040)={0x2, r2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000004c0)={0x0}) 7.576097235s ago: executing program 5 (id=2027): r0 = socket$alg(0x26, 0x5, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000005c0)={0x0, 0x1}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x40, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0x2, 0x6, 0x67e4, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r5}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) close_range(r2, 0xffffffffffffffff, 0x0) 7.427799726s ago: executing program 3 (id=2028): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.759927154s ago: executing program 3 (id=2029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x15) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f6"], 0x40}, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) 6.749524826s ago: executing program 6 (id=2030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f017a00bad104b000eeec360fc7310f1ad50f01c80f01c80f01c9f30faeeb0f0107", 0x22}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x200000) 6.53990932s ago: executing program 0 (id=2031): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffe4e9000000000000000062", 0x78) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c13000/0x4000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x3}}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd01003a001600140000006000000000"], 0xfdef) 6.48775927s ago: executing program 5 (id=2032): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000000)=0x4, 0x4) 5.785355097s ago: executing program 3 (id=2033): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004dc0)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getrlimit(0xf, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000011140100"], 0x20}, 0x1, 0x0, 0x0, 0x24008855}, 0x40000c0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getgroups(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x42, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x0, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x6, 0x89d2, 0x8, 0x2, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x90, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x8, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7f, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f30, 0xd, 0x566, 0x2, 0x4, 0xb, 0x4, 0x20005, 0x8, 0x4000009, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x16a8, 0x800001, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xc, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x0, 0x7e, 0xffff, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x40, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x8, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x80000006, 0xffffffff, 0x8, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 4.576054297s ago: executing program 5 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='!-\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e2000000000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x24000058) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000000000000000}}, {@directio}, {@dfltuid}, {@fscache}, {@fscache}, {@cachetag={'cachetag', 0x3d, ':('}}]}}) r6 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x541880, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000000)={0x9, {0x7f, 0xe7, 0xfffffff8, 0xfffff000}, {0x2, 0x3, 0xffffbfff, 0xfff}, {0x40, 0x5}}) 4.534500316s ago: executing program 0 (id=2035): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.566948258s ago: executing program 6 (id=2036): r0 = socket$inet(0x2, 0x6, 0x201000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x6049) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x0, @raw_data="641df2cd09fba09811d137321702e2f8af107c8611a5fd8979270c882419ab152ba93f655642786228b805b21000686f4fb086a21ff56d644bd65cd8b2d6c65350c719a2f0b360c73c3de90f7dafb234550dc4b50a3d8d490652d6b4a14c306adb3b8c384d68e04a7808adee01371f01c09091fdb234efc52b7b46a861b16080821536dc567a24f1ab9ac3ee7f360d990bbe8ea7bc17ae826d6d1a3a97e618c6cb3f66f8fb21b7a52526c15ec426c274e2c5f813ea7d38bb5de2ed7466a926798c052754a444e277"}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) 3.41916372s ago: executing program 5 (id=2037): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="29db5cb3", @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df25020000001400020076657468305f766c616e0000000000000900010073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000040)=""/1, 0x0, 0x3}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) 3.285657146s ago: executing program 0 (id=2038): rt_sigaction(0xd, &(0x7f0000003a40)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc4, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{0x0, 0x32, 0x0, 0xf500}}], 0x1, 0x0) 3.284333338s ago: executing program 3 (id=2039): write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000001c0)=0x6e, 0x80800) bind$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r2}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r7, 0x0, 0x0, 0x0) 2.175174825s ago: executing program 3 (id=2040): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x40008, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x1]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)={'L-', 0xb}, 0x16, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffc]}}, 0x5c) 2.079878553s ago: executing program 0 (id=2041): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.016239182s ago: executing program 0 (id=2042): socket(0x40000000015, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0x80184132, &(0x7f0000000340)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0x3]], '\x00', [{}, {0x0, 0xfffffffc}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) semctl$IPC_RMID(0x0, 0x0, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f0000000240)) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3", 0x2f, r7) close(0x3) 1.103810452s ago: executing program 0 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000700", 0x33a) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@mmap={0xe, 0x3, 0x4, 0x2000, 0x6, {r2, r3/1000+60000}, {0x1, 0x0, 0xb4, 0x1, 0x5, 0x7, "0bf6ae62"}, 0x3ff, 0x1, {}, 0x7fff, 0x0, r4}) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.045868579s ago: executing program 1 (id=2044): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000000)=0x4, 0x4) 257.248046ms ago: executing program 6 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x15) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f6"], 0x40}, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) 143.942936ms ago: executing program 5 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x20004e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x6f) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x1000000, @b}, 0x48, r3) 0s ago: executing program 1 (id=2047): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000003b00)={0x2, 0x0, @private=0xa010102}, 0xffffffffffffffea) io_setup(0x10000, &(0x7f0000000800)) syz_usb_connect(0x0, 0x3f9, &(0x7f0000002280)={{0x12, 0x1, 0x250, 0xf1, 0x35, 0x61, 0x20, 0x1a0a, 0x107, 0x4ffa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e7, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe9, 0xe, 0xb, 0xed, 0x6b, 0xc4, 0x2, [], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x6, 0xf, 0x9}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x6, 0x4, 0x0, [@generic={0x91, 0x9, "90279637d24976f86b747a0cd5fc68a04295f7389f5af056aca809c7db0845843c131d676f2134e7afafe53590f6a5d38e45ca91a8f746a428e8fe23c10533bc354252832865d160d7a6dfd4750c200172344e88fbda8426474234a29cea64ab3354ac7620e53acafeb1a4b5a6b5a4d22a27d8c00180acb54b3d60d5c2d546e0bfd8a41e4bf7b8d71ddd6f2e3cf168"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x4, 0x8, 0xfd, [@generic={0xf9, 0x22, "3f485e31a126f62c7dc1dfef39513a47b3ce115fc7b5dac8f2927884743b53f765dafd143e67f86b59a40acc593e6e40c18b7dda87117d538ab5eeec619fe0636230e23f411fb48feb2647a698f8c77448555e2eccf5bb2686f4ff25dead7197f565adf1a1b744c4727651bbe289bfe31d2d487bc7fdd4de4f8ffafe1256d1f3db3c44efcced96af9889bb39b1bf0418842c6b106446a887a2c9d826e4ab920f17968e3e2f1966c68083fd9a4c68928403a0adf06fbce4e96cd9e977e94e64d61b69b8039a3e0adf3729be4bb01f104d2d104c313c2fc7465fb440dbcd71573e4d31b28b99ac4b6cbd1bcd0f70033ac9f0a80240ade766"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0xb5, 0x9, 0x6}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0xb, 0x6, 0x5, [@generic={0x6c, 0x9, "d287879eec95272102499f388cfb251ebdedfab34989170935ec08e653ee40a91f5eebe4ad6ae14e1d2d5b4e2535c544ed1299758556f16b40c1017ba2df78746e0003dacdd17304c1e045a5d8dd78f5bc224060a7c9c9575be258e9fe500c6deb5c5ebadaffc90bb76b"}, @generic={0x88, 0xa, "5affbc1c7ddc86100102b93cee632f21c593918507ed75594c55f93698ec2ff115fd9551bd860b021867e9cfcf01840ab8031541c70793d138342f60f1cd791be9822e5099bd0fae09596a6e22588dbe8e025df8ff144d16ef44755084508e5f3e7cc738c6064d5576cc3b62083300c23547a910b9423594a7ea3d568c821720c031521e8365"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x7, 0x0, 0x80, [@generic={0x27, 0x9c57822db9626152, "ce70ad9eaf8814f1f8359edbb65651941eaa0d4a1bbd6aff4d2535e8b2941d2f8c230400fd"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x5, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0x8, 0x7}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0x9, 0x6, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x0, 0x7, 0xff}}, {{0x9, 0x5, 0x3, 0xe, 0x10, 0x7, 0xe9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x6}, @generic={0xc6, 0x0, "b95de65282c5e41a059ceb3758fb8da2aa5dd197173465b747cb48450ce8474e846ef7f3db0c8c600745596edbfa62cf6940fee8646c7bd32bfa9f9334c247ec5f6594b3fe719e74ba1b5bbec3ad4e5da39483424abbbd713dd6fbe55aaa940dc06f9ddfd48f58ae09281e59a018b9f2405e147e2f7647c8dd74edf0a55f582b1791621790247589495cff568017b06293f1913ebc64be84cb29c5fa400be68f9d98f33443aea48233726f61dd5baa79905529066063acf1ccc4d20abd8a97f11dbda07b"}]}}]}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r1, 0x705, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) (async) read$FUSE(r7, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r7, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, r10, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) (async) splice(r7, 0x0, r9, 0x0, 0x2000, 0x8) kernel console output (not intermixed with test programs): end } for pid=11734 comm="syz.3.1540" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.829509][T11729] netlink: 'syz.6.1537': attribute type 8 has an invalid length. [ 540.868794][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.039968][ T30] audit: type=1400 audit(1761786270.275:1193): avc: denied { write } for pid=11734 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 541.824533][ T30] audit: type=1400 audit(1761786271.285:1194): avc: denied { connect } for pid=11749 comm="syz.5.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 541.855860][ T30] audit: type=1400 audit(1761786271.635:1195): avc: denied { unmount } for pid=11051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 542.624014][ T30] audit: type=1400 audit(1761786272.405:1196): avc: denied { read write } for pid=11761 comm="syz.5.1545" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 542.669241][ T30] audit: type=1400 audit(1761786272.405:1197): avc: denied { open } for pid=11761 comm="syz.5.1545" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 543.300395][T11767] fuse: Bad value for 'fd' [ 543.622775][ T30] audit: type=1400 audit(1761786273.405:1198): avc: denied { read write } for pid=11768 comm="syz.1.1547" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 543.654410][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.667853][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.676838][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.707915][ T30] audit: type=1400 audit(1761786273.405:1199): avc: denied { open } for pid=11768 comm="syz.1.1547" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 543.770166][ T30] audit: type=1400 audit(1761786273.435:1200): avc: denied { ioctl } for pid=11768 comm="syz.1.1547" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 543.802385][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.089805][ T30] audit: type=1400 audit(1761786273.435:1201): avc: denied { create } for pid=11768 comm="syz.1.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 544.302075][T11742] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 544.353547][T11778] random: crng reseeded on system resumption [ 544.430287][T11778] FAULT_INJECTION: forcing a failure. [ 544.430287][T11778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.443478][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.0.1550 Not tainted syzkaller #0 PREEMPT(full) [ 544.443494][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.443501][T11778] Call Trace: [ 544.443505][T11778] [ 544.443509][T11778] dump_stack_lvl+0x16c/0x1f0 [ 544.443529][T11778] should_fail_ex+0x512/0x640 [ 544.443545][T11778] _copy_from_user+0x2e/0xd0 [ 544.443559][T11778] memdup_user+0x6b/0xe0 [ 544.443570][T11778] strndup_user+0x78/0xe0 [ 544.443580][T11778] __x64_sys_mount+0x136/0x310 [ 544.443595][T11778] ? __pfx___x64_sys_mount+0x10/0x10 [ 544.443612][T11778] do_syscall_64+0xcd/0xfa0 [ 544.443629][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.443640][T11778] RIP: 0033:0x7f299438efc9 [ 544.443650][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.443660][T11778] RSP: 002b:00007f299522f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.443671][T11778] RAX: ffffffffffffffda RBX: 00007f29945e5fa0 RCX: 00007f299438efc9 [ 544.443678][T11778] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 544.443685][T11778] RBP: 00007f299522f090 R08: 00002000000002c0 R09: 0000000000000000 [ 544.443692][T11778] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 544.443698][T11778] R13: 00007f29945e6038 R14: 00007f29945e5fa0 R15: 00007ffc18729cb8 [ 544.443713][T11778] [ 544.698905][T11742] usb 2-1: Using ep0 maxpacket: 32 [ 545.414856][T11742] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 545.658422][T11742] usb 2-1: config 0 has no interface number 0 [ 545.675299][T11742] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 545.800234][T11742] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 545.875538][T11742] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 545.901700][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 545.901717][ T30] audit: type=1400 audit(1761786275.685:1207): avc: denied { setopt } for pid=11796 comm="syz.0.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 545.966934][T11742] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 545.981340][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.120436][T11742] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 546.133144][ T30] audit: type=1326 audit(1761786275.855:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 546.199741][T11742] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.235530][T11742] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 546.250438][T11803] netem: incorrect gi model size [ 546.257498][ T30] audit: type=1326 audit(1761786275.855:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 546.283904][T11803] netem: change failed [ 546.320769][T11742] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26159, setting to 1024 [ 546.340313][T11742] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 546.351425][T11801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=11801 comm=syz.0.1552 [ 546.400230][ T30] audit: type=1326 audit(1761786275.915:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 546.410349][ T5891] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 546.430231][T11742] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.453399][T11742] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 546.465180][T11742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.476310][ T30] audit: type=1326 audit(1761786275.915:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 546.517624][T11742] usb 2-1: Product: syz [ 546.557116][T11742] usb 2-1: Manufacturer: syz [ 546.577333][T11742] usb 2-1: SerialNumber: syz [ 546.594336][T11742] usb 2-1: config 0 descriptor?? [ 546.600692][ T30] audit: type=1326 audit(1761786275.915:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 546.621000][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.660864][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 546.674118][T11742] usb 2-1: can't set config #0, error -71 [ 546.690751][T11742] usb 2-1: USB disconnect, device number 29 [ 546.707281][ T5891] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 546.753034][ T5891] usb 4-1: config 179 has no interface number 0 [ 546.766005][ T30] audit: type=1326 audit(1761786275.935:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 546.792266][ T5891] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 546.821452][ T5891] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 546.839994][ T5891] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 546.867214][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.886100][ T5891] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 546.911493][ T30] audit: type=1326 audit(1761786275.935:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 546.935177][ T5891] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 546.935252][ T5891] usb 4-1: config 179 interface 65 has no altsetting 0 [ 547.021268][ T5891] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 547.040211][ T5898] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 547.189513][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.190136][ T30] audit: type=1326 audit(1761786275.935:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 547.663889][ T30] audit: type=1326 audit(1761786275.935:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 547.696999][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.705274][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.755672][ T5891] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23 [ 547.805647][ T5898] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 547.837418][ T5167] input input23: unable to receive magic message: -110 [ 547.920188][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.947912][ T5898] usb 6-1: Product: syz [ 547.955887][T11802] input input23: unable to receive magic message: -32 [ 547.965410][ T5898] usb 6-1: Manufacturer: syz [ 547.978195][ T5898] usb 6-1: SerialNumber: syz [ 548.531303][T11812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1556'. [ 548.712948][T11836] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1561'. [ 548.758406][T11836] usb usb5: usbfs: process 11836 (syz.1.1561) did not claim interface 0 before use [ 548.837779][T11812] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 549.266373][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.275848][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.284645][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.374122][ T5891] usb 4-1: USB disconnect, device number 30 [ 549.380068][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 549.388521][ T5898] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 549.420381][ T5898] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 549.645545][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.786350][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.410951][T11812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=11812 comm=syz.5.1556 [ 551.423759][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 551.423775][ T30] audit: type=1400 audit(1761786281.205:1274): avc: denied { ioctl } for pid=11827 comm="syz.6.1560" path="socket:[34738]" dev="sockfs" ino=34738 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 551.430296][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1560'. [ 551.726850][ T5898] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 551.741973][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.745619][ T5898] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 551.759798][ T5898] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 551.856300][ T5898] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -110 [ 551.937342][ T5898] usb 6-1: USB disconnect, device number 13 [ 552.046822][ T30] audit: type=1400 audit(1761786281.825:1275): avc: denied { write } for pid=11878 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 552.300526][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.604261][ T30] audit: type=1400 audit(1761786281.825:1276): avc: denied { getopt } for pid=11878 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 552.637646][ T30] audit: type=1400 audit(1761786282.415:1277): avc: denied { ioctl } for pid=11880 comm="syz.3.1568" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35110 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 552.673266][T11883] tmpfs: Bad value for 'mpol' [ 552.718703][ T30] audit: type=1400 audit(1761786282.455:1278): avc: denied { mounton } for pid=11880 comm="syz.3.1568" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 553.254492][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 553.685700][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.694160][ T30] audit: type=1400 audit(1761786282.945:1279): avc: denied { bind } for pid=11878 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 553.720217][ T5891] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 553.936718][ T30] audit: type=1400 audit(1761786283.715:1280): avc: denied { checkpoint_restore } for pid=11891 comm="syz.6.1572" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 554.057192][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 554.354380][ T5891] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 554.378800][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.379503][T11906] netem: incorrect gi model size [ 554.393485][T11906] netem: change failed [ 554.410632][ T5891] usb 1-1: Product: syz [ 554.413533][T11906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=11906 comm=syz.1.1573 [ 554.428180][ T5891] usb 1-1: Manufacturer: syz [ 554.449073][ T5891] usb 1-1: SerialNumber: syz [ 554.474255][ T5891] usb 1-1: config 0 descriptor?? [ 555.098447][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.107127][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.123950][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.423604][T11916] overlayfs: missing 'lowerdir' [ 555.807140][ T30] audit: type=1400 audit(1761786285.585:1281): avc: denied { create } for pid=11885 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 555.830644][ T30] audit: type=1400 audit(1761786285.615:1282): avc: denied { getopt } for pid=11885 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 555.906755][ T5891] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 555.958574][ T5891] asix 1-1:0.0: probe with driver asix failed with error -71 [ 556.068060][ T5891] usb 1-1: USB disconnect, device number 24 [ 556.891412][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.900310][ T11] block nbd0: Possible stuck request ffff88802612e000: control (read@0,4096B). Runtime 360 seconds [ 556.914688][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.922906][ T30] audit: type=1400 audit(1761786286.535:1283): avc: denied { create } for pid=11924 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 556.942699][ T30] audit: type=1400 audit(1761786286.655:1284): avc: denied { setopt } for pid=11924 comm="syz.6.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 557.186237][T11933] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1580'. [ 558.363709][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.225231][ T30] audit: type=1400 audit(1761786289.005:1285): avc: denied { read write } for pid=11947 comm="syz.1.1586" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 559.300666][ T30] audit: type=1400 audit(1761786289.005:1286): avc: denied { open } for pid=11947 comm="syz.1.1586" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 559.375686][ T30] audit: type=1400 audit(1761786289.125:1287): avc: denied { create } for pid=11953 comm="syz.3.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 559.420519][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.740234][T11499] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 559.910308][T11499] usb 4-1: Using ep0 maxpacket: 8 [ 559.928356][T11499] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 559.940338][T11499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.969338][T11499] usb 4-1: Product: syz [ 559.991204][T11499] usb 4-1: Manufacturer: syz [ 559.996847][T11499] usb 4-1: SerialNumber: syz [ 560.023859][T11499] usb 4-1: config 0 descriptor?? [ 560.135833][T11499] gspca_main: se401-2.14.0 probing 047d:5003 [ 560.292481][T11961] bridge3: entered promiscuous mode [ 560.297785][T11961] bridge3: entered allmulticast mode [ 560.705623][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.715918][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.770258][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.015134][ T30] audit: type=1400 audit(1761786290.785:1288): avc: denied { write } for pid=11953 comm="syz.3.1587" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 561.168816][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 561.178648][ T30] audit: type=1400 audit(1761786290.945:1289): avc: denied { append } for pid=11953 comm="syz.3.1587" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 561.336872][ T30] audit: type=1326 audit(1761786291.055:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 561.619679][ T30] audit: type=1326 audit(1761786291.055:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 562.135657][T11499] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 562.164645][ T30] audit: type=1326 audit(1761786291.055:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 562.193065][ T30] audit: type=1326 audit(1761786291.055:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 562.216473][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.238048][T11981] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1593'. [ 562.262606][ T30] audit: type=1326 audit(1761786291.055:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 562.286078][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.360639][ T30] audit: type=1326 audit(1761786291.065:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 562.384108][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.601358][ T5808] usb 4-1: USB disconnect, device number 31 [ 562.625440][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.625481][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.643823][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.616588][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.663103][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.675242][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.690278][ T30] audit: type=1326 audit(1761786291.075:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 563.713728][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.663956][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.673134][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.684197][ T30] audit: type=1326 audit(1761786291.075:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 565.595609][ T30] audit: type=1326 audit(1761786291.075:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 565.619669][ T30] audit: type=1326 audit(1761786291.075:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 565.643997][ T30] audit: type=1326 audit(1761786291.085:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 565.667819][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.670355][ T5182] udevd[5182]: worker [5813] /devices/virtual/block/nbd0 timeout; kill it [ 565.677475][ T30] audit: type=1326 audit(1761786291.085:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 565.709447][ T5182] udevd[5182]: seq 12162 '/devices/virtual/block/nbd0' killed [ 567.180495][T11499] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 567.191036][T12006] FAULT_INJECTION: forcing a failure. [ 567.191036][T12006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.212366][T12006] CPU: 1 UID: 0 PID: 12006 Comm: syz.1.1600 Not tainted syzkaller #0 PREEMPT(full) [ 567.212394][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.212405][T12006] Call Trace: [ 567.212412][T12006] [ 567.212420][T12006] dump_stack_lvl+0x16c/0x1f0 [ 567.212456][T12006] should_fail_ex+0x512/0x640 [ 567.212483][T12006] _copy_from_user+0x2e/0xd0 [ 567.212508][T12006] do_sys_poll+0x1d5/0xdf0 [ 567.212536][T12006] ? is_bpf_text_address+0x94/0x1a0 [ 567.212561][T12006] ? kernel_text_address+0x8d/0x100 [ 567.212583][T12006] ? __kernel_text_address+0xd/0x40 [ 567.212607][T12006] ? arch_stack_walk+0xa6/0x100 [ 567.212632][T12006] ? __pfx_do_sys_poll+0x10/0x10 [ 567.212684][T12006] ? __lock_acquire+0x622/0x1c90 [ 567.212765][T12006] ? __pfx_timespec64_add_safe+0x10/0x10 [ 567.212798][T12006] ? ktime_get_ts64+0x2d2/0x400 [ 567.212827][T12006] ? read_tsc+0x9/0x20 [ 567.212849][T12006] ? ktime_get_ts64+0x256/0x400 [ 567.212885][T12006] __x64_sys_poll+0x1a6/0x450 [ 567.212905][T12006] ? __pfx___x64_sys_poll+0x10/0x10 [ 567.212933][T12006] do_syscall_64+0xcd/0xfa0 [ 567.212964][T12006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.212984][T12006] RIP: 0033:0x7fba00b8efc9 [ 567.213001][T12006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.213020][T12006] RSP: 002b:00007fba01a59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 567.213040][T12006] RAX: ffffffffffffffda RBX: 00007fba00de5fa0 RCX: 00007fba00b8efc9 [ 567.213054][T12006] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000200000002500 [ 567.213067][T12006] RBP: 00007fba01a59090 R08: 0000000000000000 R09: 0000000000000000 [ 567.213079][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.213091][T12006] R13: 00007fba00de6038 R14: 00007fba00de5fa0 R15: 00007ffe912b3338 [ 567.213120][T12006] [ 567.220248][ T1538] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 567.419748][T11499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 567.431241][T11499] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 567.449697][T11499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.501496][T12010] comedi: No check for data length of config insn id 4 is implemented [ 567.529479][T12010] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 567.577449][T11499] usb 6-1: config 0 descriptor?? [ 567.606772][T12001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 567.654382][T12010] comedi: Assuming n=47571 is correct [ 567.798576][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.073539][ T1538] usb 4-1: Using ep0 maxpacket: 8 [ 569.027992][T11499] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 569.056488][ T1538] usb 4-1: config 99 has an invalid descriptor of length 0, skipping remainder of the config [ 569.077358][T11499] usb 6-1: USB disconnect, device number 14 [ 569.417471][ T1538] usb 4-1: config 99 has no interfaces? [ 569.758271][ T1538] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 569.781362][ T1538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.803435][ T1538] usb 4-1: Product: syz [ 569.817761][ T1538] usb 4-1: Manufacturer: syz [ 569.832123][ T1538] usb 4-1: SerialNumber: syz [ 569.930879][ T1538] usb 4-1: can't set config #99, error -71 [ 569.975324][ T1538] usb 4-1: USB disconnect, device number 32 [ 570.303350][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.321947][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.398978][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 570.399094][ T30] audit: type=1400 audit(1761786300.165:1323): avc: denied { create } for pid=12036 comm="syz.3.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 570.425266][ T30] audit: type=1400 audit(1761786300.165:1324): avc: denied { connect } for pid=12036 comm="syz.3.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 571.350023][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.358396][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.381491][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.640149][ T30] audit: type=1400 audit(1761786301.415:1325): avc: denied { read } for pid=12039 comm="syz.1.1609" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 572.127006][ T30] audit: type=1400 audit(1761786301.415:1326): avc: denied { open } for pid=12039 comm="syz.1.1609" path="/342/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 572.151457][T11499] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 572.180410][ T30] audit: type=1400 audit(1761786301.495:1327): avc: denied { read write } for pid=12043 comm="syz.5.1612" dev="sockfs" ino=35448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 572.247016][ T30] audit: type=1400 audit(1761786301.935:1328): avc: denied { ioctl } for pid=12039 comm="syz.1.1609" path="/342/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 572.320173][T11499] usb 1-1: device descriptor read/64, error -71 [ 572.381673][ T30] audit: type=1326 audit(1761786302.165:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12050 comm="syz.3.1613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1049f8efc9 code=0x0 [ 572.560173][T11499] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 573.113530][ T30] audit: type=1400 audit(1761786302.195:1330): avc: denied { getopt } for pid=12054 comm="syz.5.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.145607][ T30] audit: type=1400 audit(1761786302.205:1331): avc: denied { getopt } for pid=12050 comm="syz.3.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 573.170211][T11499] usb 1-1: device descriptor read/64, error -71 [ 573.361257][T11499] usb usb1-port1: attempt power cycle [ 573.416325][ T30] audit: type=1326 audit(1761786303.185:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 574.002414][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 574.160224][ T1538] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 574.321804][ T1538] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.821934][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.859716][ T1538] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.869871][ T1538] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.883143][ T1538] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.892523][ T1538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.912178][ T1538] usb 6-1: config 0 descriptor?? [ 575.015387][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1623'. [ 575.408298][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 575.408332][ T30] audit: type=1326 audit(1761786305.105:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 575.683223][T12090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.700857][ T30] audit: type=1326 audit(1761786305.105:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 575.877410][ T30] audit: type=1326 audit(1761786305.115:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 575.900889][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.910213][ T30] audit: type=1326 audit(1761786305.115:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 575.933685][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.174857][T12096] fuse: Bad value for 'fd' [ 576.708937][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.718715][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.858052][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.878386][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.886802][ T30] audit: type=1326 audit(1761786305.115:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 576.929879][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.965911][ T30] audit: type=1326 audit(1761786305.115:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f299438d810 code=0x7ffc0000 [ 577.557987][ T30] audit: type=1326 audit(1761786305.115:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 577.582009][ T30] audit: type=1326 audit(1761786305.115:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 577.609169][ T30] audit: type=1400 audit(1761786305.625:1362): avc: denied { bind } for pid=12088 comm="syz.3.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 578.173566][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.183610][ T30] audit: type=1400 audit(1761786305.625:1363): avc: denied { accept } for pid=12088 comm="syz.3.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 579.171427][ T1538] usbhid 6-1:0.0: can't add hid device: -71 [ 579.178438][ T1538] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 579.204103][ T1538] usb 6-1: USB disconnect, device number 15 [ 580.846259][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 580.846272][ T30] audit: type=1400 audit(1761786310.015:1368): avc: denied { setopt } for pid=12123 comm="syz.0.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 581.163733][ T30] audit: type=1400 audit(1761786310.045:1369): avc: denied { listen } for pid=12123 comm="syz.0.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 581.190502][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.683014][ T30] audit: type=1400 audit(1761786310.695:1370): avc: denied { ioctl } for pid=12133 comm="syz.6.1636" path="socket:[36136]" dev="sockfs" ino=36136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 581.762169][ T30] audit: type=1400 audit(1761786310.995:1371): avc: denied { open } for pid=12132 comm="syz.0.1635" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 581.785811][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.901358][T12146] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 582.079913][T12149] fuse: Unknown parameter 'DªŸ¼*Þè [ 582.079913][T12149] ÖæufýàÆÚTOÕ®+®¹Ìt—ò¦Ÿ‡‚ɾIšâõçu>LåC{ÂC4Z¥V' [ 582.097641][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.164404][ T30] audit: type=1400 audit(1761786311.945:1372): avc: denied { create } for pid=12144 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 582.470755][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.258059][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.310844][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.103334][ T11] block nbd0: Possible stuck request ffff88802612e000: control (read@0,4096B). Runtime 390 seconds [ 587.200906][T12192] kernel profiling enabled (shift: 63) [ 587.206684][T12192] profiling shift: 63 too large [ 587.301817][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.629343][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.233423][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.243078][ T9170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.318748][T12204] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1651'. [ 588.803407][T12215] bridge4: entered promiscuous mode [ 588.808695][T12215] bridge4: entered allmulticast mode [ 589.248682][ T30] audit: type=1400 audit(1761786319.025:1373): avc: denied { ioctl } for pid=12211 comm="syz.0.1655" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 589.301267][T12217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1655'. [ 589.317868][T12217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1655'. [ 589.376706][T12217] netlink: 'syz.0.1655': attribute type 83 has an invalid length. [ 591.242708][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1660'. [ 591.644051][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.535240][ T30] audit: type=1400 audit(1761786322.095:1374): avc: denied { bind } for pid=12244 comm="syz.3.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 592.975208][ T30] audit: type=1326 audit(1761786322.695:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf338efc9 code=0x7ffc0000 [ 593.260724][ T30] audit: type=1326 audit(1761786322.695:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf338efc9 code=0x7ffc0000 [ 593.342668][T12267] netem: incorrect gi model size [ 593.347822][T12267] netem: change failed [ 593.353325][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.420346][T12267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=12267 comm=syz.6.1668 [ 593.433342][ T30] audit: type=1326 audit(1761786322.695:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcf338efc9 code=0x7ffc0000 [ 593.456678][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.568286][ T30] audit: type=1326 audit(1761786322.695:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf338efc9 code=0x7ffc0000 [ 593.593825][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.651118][ T30] audit: type=1326 audit(1761786322.695:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf338efc9 code=0x7ffc0000 [ 593.674619][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.713481][ T30] audit: type=1326 audit(1761786322.695:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcf338d810 code=0x7ffc0000 [ 593.950945][ T30] audit: type=1326 audit(1761786322.695:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf338efc9 code=0x7ffc0000 [ 593.974443][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.983386][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.010496][ T30] audit: type=1326 audit(1761786322.695:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12246 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf338efc9 code=0x7ffc0000 [ 595.084681][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.101156][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 595.101166][ T30] audit: type=1400 audit(1761786324.495:1385): avc: denied { bind } for pid=12279 comm="syz.3.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 595.156210][T11499] IPVS: starting estimator thread 0... [ 595.300503][T12284] IPVS: using max 37 ests per chain, 88800 per kthread [ 595.753293][ T30] audit: type=1400 audit(1761786325.525:1386): avc: denied { ioctl } for pid=12285 comm="syz.0.1674" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 596.129433][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.406014][ T30] audit: type=1400 audit(1761786327.185:1387): avc: denied { read } for pid=12308 comm="syz.3.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 597.581924][T12314] syzkaller0: entered promiscuous mode [ 597.587485][T12314] syzkaller0: entered allmulticast mode [ 598.143594][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.100895][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.740552][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.471494][T12344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.479132][T12344] IPv6: NLM_F_CREATE should be set when creating new route [ 600.486489][T12344] IPv6: NLM_F_CREATE should be set when creating new route [ 600.493721][T12344] IPv6: NLM_F_CREATE should be set when creating new route [ 601.866260][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.930379][ T30] audit: type=1400 audit(1761786330.885:1388): avc: denied { getopt } for pid=12336 comm="syz.6.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 602.153500][ T30] audit: type=1400 audit(1761786331.935:1389): avc: denied { ioctl } for pid=12349 comm="syz.3.1694" path="socket:[37117]" dev="sockfs" ino=37117 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 602.162299][T12356] comedi: No check for data length of config insn id 4 is implemented [ 602.186490][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 602.187666][T12356] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 602.221025][ T30] audit: type=1400 audit(1761786331.965:1390): avc: denied { create } for pid=12349 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 602.242435][T12356] comedi: Assuming n=47566 is correct [ 602.262012][ T30] audit: type=1400 audit(1761786331.985:1391): avc: denied { bind } for pid=12349 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 602.284793][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 602.315082][ T30] audit: type=1400 audit(1761786331.995:1392): avc: denied { write } for pid=12349 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 602.356789][ T30] audit: type=1400 audit(1761786332.065:1393): avc: denied { write } for pid=12349 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 602.380559][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 602.596704][ T30] audit: type=1400 audit(1761786332.335:1394): avc: denied { bind } for pid=12362 comm="syz.6.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 602.634976][ T30] audit: type=1400 audit(1761786332.345:1395): avc: denied { mount } for pid=12362 comm="syz.6.1696" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 602.678714][ T30] audit: type=1400 audit(1761786332.355:1396): avc: denied { write } for pid=12362 comm="syz.6.1696" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 602.682157][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.564244][ T24] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 603.576218][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.586296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.591187][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.604833][T11499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.616755][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.621797][ T24] usb 2-1: config 0 descriptor?? [ 604.134657][T12387] dummy0: entered allmulticast mode [ 604.149453][ T30] audit: type=1400 audit(1761786333.925:1397): avc: denied { bind } for pid=12378 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 604.227360][ T24] zeroplus 0003:0C12:0005.000F: item fetching failed at offset 0/3 [ 604.235822][ T24] zeroplus 0003:0C12:0005.000F: parse failed [ 604.243120][ T24] zeroplus 0003:0C12:0005.000F: probe with driver zeroplus failed with error -22 [ 604.434169][T12354] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1693'. [ 604.451580][T12351] ALSA: mixer_oss: invalid OSS volume '' [ 604.455472][T12391] cgroup: release_agent respecified [ 604.464778][ T5882] usb 2-1: USB disconnect, device number 30 [ 604.802965][T12378] dummy0: left allmulticast mode [ 604.860678][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.517208][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.565871][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.857649][ T5823] Bluetooth: hci4: Malformed Event: 0x02 [ 606.620869][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.220840][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 607.220850][ T30] audit: type=1400 audit(1761786337.005:1405): avc: denied { connect } for pid=12421 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 607.275126][ T30] audit: type=1400 audit(1761786337.035:1406): avc: denied { read } for pid=12421 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 607.481439][ T30] audit: type=1400 audit(1761786337.265:1407): avc: denied { create } for pid=12427 comm="syz.1.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 607.502681][ T30] audit: type=1400 audit(1761786337.265:1408): avc: denied { connect } for pid=12427 comm="syz.1.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 607.556831][ T30] audit: type=1400 audit(1761786337.265:1409): avc: denied { listen } for pid=12427 comm="syz.1.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 608.450309][T12438] fuse: Bad value for 'fd' [ 609.340653][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.349467][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.360346][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.391491][T12446] FAULT_INJECTION: forcing a failure. [ 609.391491][T12446] name failslab, interval 1, probability 0, space 0, times 0 [ 609.418531][ T30] audit: type=1400 audit(1761786339.195:1410): avc: denied { write } for pid=12443 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 609.426984][T12446] CPU: 0 UID: 0 PID: 12446 Comm: syz.0.1720 Not tainted syzkaller #0 PREEMPT(full) [ 609.427012][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 609.427024][T12446] Call Trace: [ 609.427030][T12446] [ 609.427037][T12446] dump_stack_lvl+0x16c/0x1f0 [ 609.427071][T12446] should_fail_ex+0x512/0x640 [ 609.427092][T12446] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 609.427125][T12446] should_failslab+0xc2/0x120 [ 609.427147][T12446] kmem_cache_alloc_node_noprof+0x78/0x770 [ 609.427177][T12446] ? __alloc_skb+0x2b2/0x380 [ 609.427205][T12446] ? __alloc_skb+0x2b2/0x380 [ 609.427225][T12446] ? __pfx_netlink_insert+0x10/0x10 [ 609.427249][T12446] __alloc_skb+0x2b2/0x380 [ 609.427271][T12446] ? __pfx___alloc_skb+0x10/0x10 [ 609.427294][T12446] ? netlink_autobind.isra.0+0x158/0x370 [ 609.427328][T12446] netlink_alloc_large_skb+0x69/0x140 [ 609.427357][T12446] netlink_sendmsg+0x698/0xdd0 [ 609.427388][T12446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.427431][T12446] ____sys_sendmsg+0xa98/0xc70 [ 609.427462][T12446] ? copy_msghdr_from_user+0x10a/0x160 [ 609.427486][T12446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.427528][T12446] ___sys_sendmsg+0x134/0x1d0 [ 609.427554][T12446] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.427576][T12446] ? __lock_acquire+0x622/0x1c90 [ 609.427639][T12446] __sys_sendmsg+0x16d/0x220 [ 609.427664][T12446] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.427706][T12446] do_syscall_64+0xcd/0xfa0 [ 609.427736][T12446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.427756][T12446] RIP: 0033:0x7f299438efc9 [ 609.427771][T12446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.427790][T12446] RSP: 002b:00007f299522f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.427808][T12446] RAX: ffffffffffffffda RBX: 00007f29945e5fa0 RCX: 00007f299438efc9 [ 609.427822][T12446] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 609.427834][T12446] RBP: 00007f299522f090 R08: 0000000000000000 R09: 0000000000000000 [ 609.427845][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.427857][T12446] R13: 00007f29945e6038 R14: 00007f29945e5fa0 R15: 00007ffc18729cb8 [ 609.427884][T12446] [ 609.790641][ T30] audit: type=1326 audit(1761786339.565:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 609.790677][ T30] audit: type=1326 audit(1761786339.565:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 609.790701][ T30] audit: type=1326 audit(1761786339.565:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 609.790724][ T30] audit: type=1326 audit(1761786339.565:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12441 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 610.662860][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.966062][ T5823] Bluetooth: hci3: Malformed Event: 0x02 [ 610.976431][T12444] tty tty30: ldisc open failed (-12), clearing slot 29 [ 611.272840][ T9170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.929671][T12482] binfmt_misc: register: failed to install interpreter file ./file0 [ 611.944401][T12484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 611.951049][T12484] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 611.960960][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 611.973775][T12484] vhci_hcd vhci_hcd.0: Device attached [ 612.027650][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 612.098477][T12489] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1726'. [ 612.237405][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 612.237421][ T30] audit: type=1400 audit(1761786342.015:1438): avc: denied { ioctl } for pid=12483 comm="syz.1.1730" path="socket:[37557]" dev="sockfs" ino=37557 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 612.352775][T11499] usb 36-1: SetAddress Request (2) to port 0 [ 612.359223][T11499] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 612.380689][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.242631][T12501] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1732'. [ 614.236679][T12485] vhci_hcd: connection reset by peer [ 614.273001][ T9176] vhci_hcd: stop threads [ 614.486580][ T30] audit: type=1400 audit(1761786344.205:1439): avc: denied { read } for pid=12499 comm="syz.3.1733" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 614.538190][ T9176] vhci_hcd: release socket [ 614.652576][ T9176] vhci_hcd: disconnect device [ 614.665866][ T30] audit: type=1400 audit(1761786344.205:1440): avc: denied { open } for pid=12499 comm="syz.3.1733" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 615.211130][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.211252][ T30] audit: type=1400 audit(1761786344.205:1441): avc: denied { ioctl } for pid=12499 comm="syz.3.1733" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 615.470962][T12521] netlink: 'syz.6.1737': attribute type 12 has an invalid length. [ 615.960707][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.457509][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.562196][T12530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12530 comm=syz.5.1738 [ 616.842771][ T30] audit: type=1400 audit(1761786346.595:1442): avc: denied { mount } for pid=12522 comm="syz.5.1738" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 617.027722][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.355445][T12549] tipc: Enabling of bearer rejected, failed to enable media [ 617.464241][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1744'. [ 617.561893][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1744'. [ 617.582210][T11499] usb 36-1: device descriptor read/8, error -110 [ 617.610806][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1744'. [ 617.654465][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1744'. [ 617.664166][ T11] block nbd0: Possible stuck request ffff88802612e000: control (read@0,4096B). Runtime 420 seconds [ 617.676895][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1744'. [ 618.110306][T12564] bridge4: entered promiscuous mode [ 618.115599][T12564] bridge4: entered allmulticast mode [ 618.373687][T11499] usb usb36-port1: attempt power cycle [ 618.863346][ T5823] Bluetooth: hci4: Malformed Event: 0x02 [ 619.385458][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.561188][T11499] usb usb36-port1: unable to enumerate USB device [ 619.986809][ T30] audit: type=1400 audit(1761786349.765:1443): avc: denied { write } for pid=12583 comm="syz.0.1751" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 620.220276][ T30] audit: type=1400 audit(1761786349.895:1444): avc: denied { execute_no_trans } for pid=12580 comm="syz.3.1750" path="/358/file0" dev="tmpfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 620.466791][T11499] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 620.504312][ T30] audit: type=1400 audit(1761786350.285:1445): avc: denied { ioctl } for pid=12589 comm="syz.1.1753" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 620.508401][T12590] syz.1.1753 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 620.620130][T11499] usb 6-1: Using ep0 maxpacket: 16 [ 620.632173][T11499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.656692][T11499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.817742][T11499] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 620.832407][T11499] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 620.845934][T12599] netlink: 'syz.1.1753': attribute type 21 has an invalid length. [ 620.854246][T12599] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 620.862150][T12599] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1753'. [ 620.993804][T11499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.133798][T11499] usb 6-1: config 0 descriptor?? [ 621.674593][T11499] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0010/input/input26 [ 621.894596][T11499] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 622.363067][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.473810][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.734731][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1756'. [ 623.745011][ T9170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.839209][ T5898] usb 6-1: reset high-speed USB device number 16 using dummy_hcd [ 624.052495][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 624.072329][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.078634][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.105584][T12627] netlink: 'syz.6.1761': attribute type 10 has an invalid length. [ 624.130542][T12627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.139570][T12627] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 624.172838][T12627] netlink: 'syz.6.1761': attribute type 10 has an invalid length. [ 624.180764][T12627] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1761'. [ 624.190582][T12627] batadv0: entered promiscuous mode [ 624.195795][T12627] batadv0: entered allmulticast mode [ 624.207296][T12627] bond0: (slave batadv0): Releasing backup interface [ 624.217374][T12627] bridge0: port 3(batadv0) entered blocking state [ 624.223945][T12627] bridge0: port 3(batadv0) entered disabled state [ 624.407882][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 624.508495][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 625.044844][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.053742][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 625.082908][ T9170] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 625.092431][ T9170] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 625.260136][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.324763][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.341311][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.350968][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.483420][T11499] usb 6-1: USB disconnect, device number 16 [ 625.500334][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.568241][ T9] usb 1-1: usb_control_msg returned -71 [ 625.586801][ T9] usbtmc 1-1:16.0: can't read capabilities [ 625.631253][ T9] usb 1-1: USB disconnect, device number 28 [ 625.908207][T12640] svc: failed to register nfsdv3 RPC service (errno 111). [ 625.917659][T12640] svc: failed to register nfsaclv3 RPC service (errno 111). [ 626.311137][ T30] audit: type=1326 audit(1761786356.085:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 626.379888][ T30] audit: type=1326 audit(1761786356.085:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 626.501016][ T30] audit: type=1326 audit(1761786356.085:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 626.563134][ T30] audit: type=1326 audit(1761786356.085:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 626.911965][T12656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1767'. [ 626.925096][T12656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1767'. [ 627.090661][ T30] audit: type=1326 audit(1761786356.095:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 627.114052][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.173396][ T30] audit: type=1326 audit(1761786356.125:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 627.196833][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.417485][T12659] 9pnet_fd: Insufficient options for proto=fd [ 627.459778][ T30] audit: type=1326 audit(1761786356.125:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 627.470866][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1769'. [ 627.483286][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.495298][ T30] audit: type=1326 audit(1761786356.125:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 627.559388][ T30] audit: type=1326 audit(1761786356.125:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 627.582820][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.770877][ T30] audit: type=1326 audit(1761786356.125:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 627.830658][ T1538] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 627.906843][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.060427][ T1538] usb 6-1: Using ep0 maxpacket: 32 [ 628.067484][ T1538] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 628.090225][ T1538] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 628.114511][ T1538] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 628.636204][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.644658][ T1538] usb 6-1: config 1 has no interface number 0 [ 628.651126][ T1538] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.662230][ T1538] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 628.684695][ T1538] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 628.757956][ T1538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.774485][ T1538] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 628.984762][ T1538] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 629.218058][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.805295][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.981361][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.062342][ T1538] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 630.363788][T12702] mkiss: ax0: crc mode is auto. [ 630.435252][T12695] netlink: 'syz.3.1778': attribute type 39 has an invalid length. [ 630.464228][ T24] usb 6-1: USB disconnect, device number 17 [ 630.507741][ T24] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 630.845412][T11499] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 630.981639][T12710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 630.989670][T12710] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 631.020467][T11499] usb 1-1: device descriptor read/64, error -71 [ 631.036828][T12710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 631.048927][T12710] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 631.380277][T11499] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 631.662089][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.683748][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.791959][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.941591][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 633.021051][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.136518][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 633.198597][T12731] bridge1: entered promiscuous mode [ 633.205880][T12731] bridge1: entered allmulticast mode [ 634.810488][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.818604][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.827667][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.883220][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.891944][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.906564][T12742] fuse: Unknown parameter '0x0000000000000005' [ 634.949529][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 634.949545][ T30] audit: type=1400 audit(1761786364.725:1475): avc: denied { getopt } for pid=12740 comm="syz.1.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 635.090167][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 635.180358][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 635.792079][ T30] audit: type=1400 audit(1761786365.575:1476): avc: denied { write } for pid=12760 comm="syz.3.1794" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 636.299060][ T1538] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 636.453987][ T1538] usb 1-1: Using ep0 maxpacket: 32 [ 637.066443][ T1538] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 637.087620][ T1538] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 637.129152][ T1538] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.338302][ T1538] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 637.366732][ T1538] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 637.420310][ T1538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.420313][T11499] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 637.420338][ T1538] usb 1-1: Product: syz [ 637.441483][ T1538] usb 1-1: Manufacturer: syz [ 637.446358][ T1538] usb 1-1: SerialNumber: syz [ 637.459792][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 637.473046][ T1538] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input27 [ 637.551786][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.612599][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.634070][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.647833][T12777] bridge5: entered promiscuous mode [ 637.653105][T12777] bridge5: entered allmulticast mode [ 637.722587][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 637.731598][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'. [ 637.970245][T11499] usb 4-1: Using ep0 maxpacket: 8 [ 638.036639][T11499] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 638.045954][T11499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.086890][T11499] usb 4-1: config 0 descriptor?? [ 638.257219][ T30] audit: type=1400 audit(1761786368.035:1477): avc: denied { mount } for pid=12779 comm="syz.1.1800" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 638.449102][ T30] audit: type=1400 audit(1761786368.225:1478): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 638.469265][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.517544][ T30] audit: type=1400 audit(1761786368.275:1479): avc: denied { name_connect } for pid=12782 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 638.740625][ T30] audit: type=1400 audit(1761786368.285:1480): avc: denied { listen } for pid=12782 comm="syz.5.1801" lport=43440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.261404][ T30] audit: type=1400 audit(1761786368.285:1481): avc: denied { accept } for pid=12782 comm="syz.5.1801" lport=43440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.261878][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.284449][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.381914][ T1538] imon:send_packet: packet tx failed (-71) [ 639.490170][ T1538] imon 1-1:155.0: panel buttons/knobs setup failed [ 639.512950][ T30] audit: type=1400 audit(1761786369.295:1482): avc: denied { setopt } for pid=12782 comm="syz.5.1801" lport=43440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 639.536609][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.552620][ T1538] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 639.589869][ T1538] (id 0x00) [ 639.857193][T12793] bridge10: entered promiscuous mode [ 639.862534][T12793] bridge10: entered allmulticast mode [ 640.060619][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.514762][ T30] audit: type=1326 audit(1761786369.365:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.1.1804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba00b8efc9 code=0x0 [ 640.537647][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.623237][ T1538] rc_core: IR keymap rc-imon-pad not found [ 640.631064][ T1538] Registered IR keymap rc-empty [ 640.635989][ T1538] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 640.652985][ T1538] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 640.663826][ T1538] imon:send_packet: packet tx failed (-71) [ 640.682922][T11499] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 640.703123][ T1538] imon 1-1:155.0: remote input dev register failed [ 640.713251][ T1538] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 641.057896][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.060388][T11499] asix 4-1:0.0: probe with driver asix failed with error -71 [ 641.156240][T11499] usb 4-1: USB disconnect, device number 33 [ 641.176355][ T1538] imon 1-1:155.0: unable to initialize intf0, err 0 [ 641.217671][ T1538] imon:imon_probe: failed to initialize context! [ 641.218590][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 641.262819][ T1538] imon 1-1:155.0: unable to register, err -19 [ 641.280295][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'. [ 641.441043][ T1538] usb 1-1: USB disconnect, device number 31 [ 641.708639][T12822] bridge10: entered promiscuous mode [ 641.713988][T12822] bridge10: entered allmulticast mode [ 642.172935][ T30] audit: type=1400 audit(1761786371.955:1484): avc: denied { ioctl } for pid=12825 comm="syz.1.1814" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 642.426682][T12838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1813'. [ 642.556767][ T30] audit: type=1326 audit(1761786372.335:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.6.1817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa08438efc9 code=0x0 [ 643.482208][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1817'. [ 643.482255][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1817'. [ 643.733014][T12850] tty tty3: ldisc open failed (-12), clearing slot 2 [ 643.905233][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.014550][ T30] audit: type=1326 audit(1761786373.795:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 644.038043][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.090993][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.123338][T12861] netem: incorrect gi model size [ 644.128687][T12861] netem: change failed [ 644.173649][T12861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=12861 comm=syz.3.1820 [ 644.190156][ T30] audit: type=1326 audit(1761786373.795:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 644.224558][ T30] audit: type=1326 audit(1761786373.795:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 644.490224][ T30] audit: type=1326 audit(1761786373.795:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 644.823045][ T30] audit: type=1326 audit(1761786373.795:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 644.847390][ T30] audit: type=1326 audit(1761786373.795:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 644.871720][ T30] audit: type=1326 audit(1761786373.895:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba00b8efc9 code=0x7ffc0000 [ 644.944434][T12875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.964092][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 644.993002][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 645.260704][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.881470][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 645.881498][ T30] audit: type=1400 audit(1761786375.655:1494): avc: denied { ioctl } for pid=12878 comm="syz.1.1827" path="/dev/ttyq7" dev="devtmpfs" ino=382 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 645.970417][ T30] audit: type=1400 audit(1761786375.715:1495): avc: denied { mount } for pid=12878 comm="syz.1.1827" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 645.994421][ T30] audit: type=1400 audit(1761786375.735:1496): avc: denied { search } for pid=12878 comm="syz.1.1827" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 646.016022][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.030780][ T30] audit: type=1400 audit(1761786375.805:1497): avc: denied { search } for pid=12878 comm="syz.1.1827" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 646.052497][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.120182][ T30] audit: type=1400 audit(1761786375.805:1498): avc: denied { search } for pid=12878 comm="syz.1.1827" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 646.143052][ T30] audit: type=1400 audit(1761786375.875:1499): avc: denied { search } for pid=12878 comm="syz.1.1827" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 646.168926][ T30] audit: type=1400 audit(1761786375.875:1500): avc: denied { search } for pid=12878 comm="syz.1.1827" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 646.200291][ T1538] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 646.458423][T12888] bridge2: entered promiscuous mode [ 646.463730][T12888] bridge2: entered allmulticast mode [ 646.530611][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.795748][T12894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1830'. [ 647.254680][ T1538] usb 1-1: Using ep0 maxpacket: 8 [ 647.262199][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.272451][ T1538] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 647.311614][ T1538] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 647.334361][ T1538] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.350508][ T1538] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.363574][ T1538] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.372684][ T1538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.697920][ T30] audit: type=1400 audit(1761786377.445:1501): avc: denied { getopt } for pid=12896 comm="syz.6.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 647.891505][ T11] block nbd0: Possible stuck request ffff88802612e000: control (read@0,4096B). Runtime 450 seconds [ 647.954197][ T1538] usb 1-1: GET_CAPABILITIES returned 0 [ 647.971018][ T1538] usbtmc 1-1:16.0: can't read capabilities [ 648.046372][T12900] trusted_key: encrypted_key: insufficient parameters specified [ 648.187191][ T1538] usb 1-1: USB disconnect, device number 32 [ 648.359844][T12906] openvswitch: netlink: Missing key (keys=40, expected=100) [ 649.926455][ T1538] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 650.185378][ T1538] usb 4-1: Using ep0 maxpacket: 8 [ 650.196367][ T1538] usb 4-1: unable to get BOS descriptor or descriptor too short [ 650.209616][ T1538] usb 4-1: string descriptor 0 read error: -22 [ 650.216289][ T1538] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 650.226052][ T1538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.301837][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.462651][ T1538] asix 4-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 650.941297][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.715282][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.876726][ T1538] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 652.989781][ T1538] asix 4-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 653.000494][ T1538] asix 4-1:7.0: probe with driver asix failed with error -71 [ 653.010562][ T1538] usb 4-1: USB disconnect, device number 34 [ 653.086634][ T30] audit: type=1400 audit(1761786382.865:1502): avc: denied { name_bind } for pid=12924 comm="syz.1.1840" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 653.177265][ T30] audit: type=1400 audit(1761786382.955:1503): avc: denied { read } for pid=12937 comm="syz.5.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 653.340327][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.633167][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.298048][ T30] audit: type=1400 audit(1761786384.075:1504): avc: denied { bind } for pid=12951 comm="syz.0.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 654.398790][T12955] IPVS: Error connecting to the multicast addr [ 655.521968][T12964] SELinux: Context system_u:object_r:dhcp_etc_t:s0 is not valid (left unmapped). [ 655.545866][ T30] audit: type=1400 audit(1761786385.305:1505): avc: denied { relabelfrom } for pid=12963 comm="syz.5.1850" name="PACKET" dev="sockfs" ino=38742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 655.772683][ T30] audit: type=1400 audit(1761786385.335:1506): avc: denied { relabelto } for pid=12963 comm="syz.5.1850" name="PACKET" dev="sockfs" ino=38742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:dhcp_etc_t:s0" [ 656.401379][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.702368][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.629251][T12993] netlink: 'syz.5.1859': attribute type 1 has an invalid length. [ 657.640374][T12994] netlink: 'syz.5.1859': attribute type 1 has an invalid length. [ 657.918765][T12994] bond1: entered promiscuous mode [ 657.936847][T12994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.540744][T13007] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1862'. [ 658.561915][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1862'. [ 658.623008][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.106936][ T5898] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 659.173218][ T30] audit: type=1326 audit(1761786388.955:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.340455][ T30] audit: type=1326 audit(1761786389.005:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.367565][ T30] audit: type=1326 audit(1761786389.005:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.420332][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.430109][ T5898] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.469374][ T5898] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 659.469937][ T30] audit: type=1326 audit(1761786389.025:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.514825][ T30] audit: type=1326 audit(1761786389.025:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.568958][ T5898] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 659.603981][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.686705][ T30] audit: type=1326 audit(1761786389.095:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.785102][T13013] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 659.790181][ T30] audit: type=1326 audit(1761786389.105:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.866443][ T30] audit: type=1326 audit(1761786389.105:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13010 comm="syz.0.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 659.873077][ T5898] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.962717][ T30] audit: type=1400 audit(1761786389.725:1515): avc: denied { audit_write } for pid=13020 comm="syz.6.1865" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 660.269310][T13027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.762676][ T5898] usb 6-1: USB disconnect, device number 18 [ 661.252068][ T30] audit: type=1400 audit(1761786391.025:1516): avc: denied { block_suspend } for pid=13029 comm="syz.5.1868" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.063569][T13048] ip6_vti0 speed is unknown, defaulting to 1000 [ 662.460417][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.509567][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.630157][ T1538] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 662.803437][ T1538] usb 2-1: Using ep0 maxpacket: 8 [ 662.862218][ T1538] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 663.040275][ T1538] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 663.080444][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 663.099706][ T1538] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 663.110251][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.134728][ T1538] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.148249][ T1538] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 663.157545][ T1538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.198106][T13073] netem: incorrect gi model size [ 663.203339][T13073] netem: change failed [ 663.576406][T13073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=13073 comm=syz.0.1878 [ 663.763778][ T1538] usb 2-1: usb_control_msg returned -71 [ 663.794624][ T1538] usbtmc 2-1:16.0: can't read capabilities [ 663.842069][ T1538] usb 2-1: USB disconnect, device number 31 [ 664.069062][T13077] bridge3: entered promiscuous mode [ 664.074321][T13077] bridge3: entered allmulticast mode [ 664.368991][T13082] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1880'. [ 664.445976][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.583715][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.615300][T13090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1884'. [ 667.780159][ T30] audit: type=1400 audit(1761786395.895:1517): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37110 daddr=10.128.1.249 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 667.806193][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.130008][T13102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.146695][T13102] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 668.170115][ T30] audit: type=1400 audit(1761786397.935:1518): avc: denied { write } for pid=13097 comm="syz.6.1886" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 668.222046][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.940309][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.040637][ T30] audit: type=1400 audit(1761786398.805:1519): avc: denied { ioctl } for pid=13100 comm="syz.5.1887" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 669.066075][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.237431][T13115] bond0: (slave syz_tun): Releasing backup interface [ 669.290144][ T30] audit: type=1326 audit(1761786399.055:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13104 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 669.319272][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 669.366264][ T30] audit: type=1326 audit(1761786399.055:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13104 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 669.413911][T13115] bridge_slave_0: left allmulticast mode [ 669.544258][T13115] bridge_slave_0: left promiscuous mode [ 669.555657][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.562881][ T30] audit: type=1326 audit(1761786399.055:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13104 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 669.586312][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.893343][T13115] bridge_slave_1: left allmulticast mode [ 669.899077][T13115] bridge_slave_1: left promiscuous mode [ 669.899853][ T30] audit: type=1326 audit(1761786399.055:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13104 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 669.940325][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.032568][ T30] audit: type=1326 audit(1761786399.055:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13104 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 670.235322][ T30] audit: type=1326 audit(1761786399.055:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13104 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 670.450533][ T30] audit: type=1326 audit(1761786399.055:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13104 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 670.484569][T13115] bond0: (slave bond_slave_0): Releasing backup interface [ 670.515113][T13115] bond0: (slave c@0Ù): Releasing backup interface [ 670.524748][T13115] team0: Port device team_slave_0 removed [ 670.542468][T13115] team0: Port device team_slave_1 removed [ 670.558601][T13115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.619677][T13115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.727782][T13118] team0: Mode changed to "loadbalance" [ 671.831994][T13141] fuse: Bad value for 'fd' [ 672.607780][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.616221][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.937853][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.986054][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.440048][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'. [ 674.555472][T13161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=13161 comm=syz.0.1899 [ 675.412397][T13159] netem: incorrect gi model size [ 675.470349][T13159] netem: change failed [ 675.707251][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.707554][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 676.707570][ T30] audit: type=1326 audit(1761786406.485:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 676.737286][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.896365][ T30] audit: type=1326 audit(1761786406.485:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 676.919932][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.637057][ T5898] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 677.800166][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 677.813752][ T5898] usb 2-1: config 2 has an invalid interface number: 1 but max is 0 [ 677.848626][ T5898] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 677.891174][ T5898] usb 2-1: config 2 has no interface number 0 [ 677.923003][ T5898] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 677.935459][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.973688][ T5898] usb 2-1: Product: syz [ 677.991401][ T5898] usb 2-1: Manufacturer: syz [ 678.010746][ T5898] usb 2-1: SerialNumber: syz [ 678.306399][T13190] fuse: Bad value for 'fd' [ 678.334949][ T9] usb 2-1: USB disconnect, device number 32 [ 678.724063][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.735053][ T11] block nbd0: Possible stuck request ffff88802612e000: control (read@0,4096B). Runtime 480 seconds [ 678.780667][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.754582][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.263190][T13211] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1911'. [ 681.046721][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 681.998125][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.610592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.342214][T13237] fuse: Bad value for 'fd' [ 683.772493][ T30] audit: type=1326 audit(1761786413.535:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 683.826648][ T30] audit: type=1326 audit(1761786413.535:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 684.064112][T13246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1920'. [ 684.517414][ T30] audit: type=1326 audit(1761786413.545:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 684.559830][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.644078][ T30] audit: type=1326 audit(1761786413.545:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 684.667549][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.774915][ T30] audit: type=1326 audit(1761786413.595:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 684.798437][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.943895][ T30] audit: type=1326 audit(1761786413.595:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13233 comm="syz.0.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 684.967359][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.973791][ T30] audit: type=1326 audit(1761786414.285:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08438efc9 code=0x7ffc0000 [ 685.000177][ T30] audit: type=1326 audit(1761786414.295:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa08438efc9 code=0x7ffc0000 [ 685.034774][ T30] audit: type=1326 audit(1761786414.295:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08438efc9 code=0x7ffc0000 [ 685.034827][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.070133][ T30] audit: type=1326 audit(1761786414.295:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa08438efc9 code=0x7ffc0000 [ 685.100443][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.800492][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.808621][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.112364][T13280] bridge5: entered promiscuous mode [ 687.117613][T13280] bridge5: entered allmulticast mode [ 687.860241][T13282] bridge6: entered promiscuous mode [ 687.865493][T13282] bridge6: entered allmulticast mode [ 688.060392][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.171755][T13289] fuse: Bad value for 'fd' [ 689.273634][T13299] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1936'. [ 689.987049][ T9170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.058896][T13310] bridge11: entered promiscuous mode [ 690.064650][T13310] bridge11: entered allmulticast mode [ 691.159513][T13319] bridge11: entered promiscuous mode [ 691.164928][T13319] bridge11: entered allmulticast mode [ 691.260498][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.891404][T13329] fuse: Bad value for 'fd' [ 692.320267][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.541684][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 692.541703][ T30] audit: type=1326 audit(1761813079.242:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 692.632259][T13335] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1948'. [ 692.741476][ T30] audit: type=1326 audit(1761813079.242:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 692.764987][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.806990][ T30] audit: type=1326 audit(1761813079.242:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 692.994218][ T30] audit: type=1326 audit(1761813079.242:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 693.017709][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.326090][ T30] audit: type=1326 audit(1761813079.242:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 693.349668][ C1] vkms_vblank_simulate: vblank timer overrun [ 693.434530][ T30] audit: type=1326 audit(1761813079.242:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 693.538769][ T30] audit: type=1326 audit(1761813079.242:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 693.569442][ T30] audit: type=1326 audit(1761813079.242:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 693.655269][T13348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.730096][ T30] audit: type=1326 audit(1761813079.242:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299438efc9 code=0x7ffc0000 [ 693.757779][ T30] audit: type=1326 audit(1761813079.242:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13332 comm="syz.0.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f299438d810 code=0x7ffc0000 [ 693.781244][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.168563][T13355] bridge12: entered promiscuous mode [ 694.279694][T13355] bridge12: entered allmulticast mode [ 694.300284][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.318575][T13358] netlink: 'syz.5.1955': attribute type 4 has an invalid length. [ 694.400130][T13358] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1955'. [ 695.071259][T13367] netem: incorrect gi model size [ 695.076269][T13367] netem: change failed [ 695.091146][T13367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60274 sclass=netlink_route_socket pid=13367 comm=syz.1.1957 [ 695.349766][T13376] fuse: Bad value for 'fd' [ 695.765532][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.890253][T11742] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 696.064196][T11742] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 696.098908][T11742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.109905][T11742] usb 4-1: Product: syz [ 696.115530][T11742] usb 4-1: Manufacturer: syz [ 696.120458][T11742] usb 4-1: SerialNumber: syz [ 696.142748][T11742] usb 4-1: config 0 descriptor?? [ 696.157303][T11742] hso 4-1:0.0: Not our interface [ 696.170499][T11742] usb-storage 4-1:0.0: USB Mass Storage device detected [ 696.458630][ T5891] usb 4-1: USB disconnect, device number 35 [ 697.363931][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.844391][T13411] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1969'. [ 698.673015][T13401] syz.3.1967 (13401): drop_caches: 2 [ 698.935850][T13424] bridge6: entered promiscuous mode [ 698.942540][T13424] bridge6: entered allmulticast mode [ 699.066420][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1977'. [ 699.103690][T13436] nbd: couldn't find a device at index 2147483646 [ 699.315037][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1977'. [ 699.561904][ T5898] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 699.580635][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.856901][ T5898] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 699.973057][ T5898] usb 2-1: config 1 has no interface number 0 [ 699.981290][ T5898] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 700.151826][ T5898] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 700.252069][ T5898] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 700.305069][ T5898] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.325149][ T5898] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 700.340223][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.350535][ T5898] usb 2-1: Product: syz [ 700.360365][ T5898] usb 2-1: Manufacturer: syz [ 700.365316][ T5898] usb 2-1: SerialNumber: syz [ 700.380303][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.393044][T13433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 700.415174][T13433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 700.791406][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.858685][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 700.858703][ T30] audit: type=1326 audit(1761813087.592:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 701.039796][T13433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 701.047884][T13433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 701.510263][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.809603][ T30] audit: type=1326 audit(1761813087.602:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 701.833225][ T30] audit: type=1326 audit(1761813087.602:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 701.837363][T13433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.856794][ T30] audit: type=1326 audit(1761813087.602:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 701.888627][ T30] audit: type=1326 audit(1761813087.602:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 701.912735][ T30] audit: type=1326 audit(1761813087.602:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 701.936246][ T30] audit: type=1326 audit(1761813087.602:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 701.959754][ T30] audit: type=1326 audit(1761813087.602:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1049f8d810 code=0x7ffc0000 [ 701.985411][T13433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.995538][ T30] audit: type=1326 audit(1761813087.602:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 702.159136][ T30] audit: type=1326 audit(1761813087.602:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13449 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 702.192706][T13459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.192984][T13459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.727275][ T5898] usb 2-1: Incompatible driver and firmware versions [ 702.737873][ T5898] usb 2-1: USB disconnect, device number 33 [ 702.783217][T13477] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 702.789754][T13477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 702.799249][T13477] vhci_hcd vhci_hcd.0: Device attached [ 702.815817][T13478] vhci_hcd: connection closed [ 702.816926][ T12] vhci_hcd: stop threads [ 702.827033][ T12] vhci_hcd: release socket [ 702.831843][ T12] vhci_hcd: disconnect device [ 703.413045][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'. [ 703.430552][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.907367][T13505] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1996'. [ 704.632277][T13512] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1999'. [ 705.479476][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.033161][ T9289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.810674][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.243861][T13524] FAULT_INJECTION: forcing a failure. [ 707.243861][T13524] name failslab, interval 1, probability 0, space 0, times 0 [ 707.290794][T13524] CPU: 0 UID: 0 PID: 13524 Comm: syz.5.2003 Not tainted syzkaller #0 PREEMPT(full) [ 707.290821][T13524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 707.290833][T13524] Call Trace: [ 707.290839][T13524] [ 707.290846][T13524] dump_stack_lvl+0x16c/0x1f0 [ 707.290881][T13524] should_fail_ex+0x512/0x640 [ 707.290904][T13524] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 707.290935][T13524] should_failslab+0xc2/0x120 [ 707.290958][T13524] kmem_cache_alloc_noprof+0x75/0x6e0 [ 707.290985][T13524] ? skb_clone+0x190/0x3f0 [ 707.291015][T13524] ? skb_clone+0x190/0x3f0 [ 707.291037][T13524] skb_clone+0x190/0x3f0 [ 707.291063][T13524] nfnetlink_rcv_batch+0x1cf/0x2350 [ 707.291085][T13524] ? kmem_cache_free+0x2d4/0x6c0 [ 707.291113][T13524] ? __lock_acquire+0x622/0x1c90 [ 707.291153][T13524] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 707.291194][T13524] ? avc_has_perm_noaudit+0x149/0x3b0 [ 707.291225][T13524] ? __asan_memset+0x23/0x50 [ 707.291253][T13524] ? __nla_validate_parse+0x600/0x2880 [ 707.291288][T13524] ? __pfx___nla_validate_parse+0x10/0x10 [ 707.291319][T13524] ? cap_capable+0xb3/0x250 [ 707.291354][T13524] ? __nla_parse+0x40/0x60 [ 707.291385][T13524] nfnetlink_rcv+0x3c1/0x430 [ 707.291406][T13524] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 707.291436][T13524] netlink_unicast+0x5aa/0x870 [ 707.291471][T13524] ? __pfx_netlink_unicast+0x10/0x10 [ 707.291510][T13524] netlink_sendmsg+0x8c8/0xdd0 [ 707.291542][T13524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.291581][T13524] ____sys_sendmsg+0xa98/0xc70 [ 707.291613][T13524] ? copy_msghdr_from_user+0x10a/0x160 [ 707.291638][T13524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.291682][T13524] ___sys_sendmsg+0x134/0x1d0 [ 707.291709][T13524] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.291731][T13524] ? __lock_acquire+0x622/0x1c90 [ 707.291793][T13524] __sys_sendmsg+0x16d/0x220 [ 707.291821][T13524] ? __pfx___sys_sendmsg+0x10/0x10 [ 707.291865][T13524] do_syscall_64+0xcd/0xfa0 [ 707.291895][T13524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.291914][T13524] RIP: 0033:0x7fdcf338efc9 [ 707.291930][T13524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.291949][T13524] RSP: 002b:00007fdcf421d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.291968][T13524] RAX: ffffffffffffffda RBX: 00007fdcf35e5fa0 RCX: 00007fdcf338efc9 [ 707.291981][T13524] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 707.291992][T13524] RBP: 00007fdcf421d090 R08: 0000000000000000 R09: 0000000000000000 [ 707.292004][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.292015][T13524] R13: 00007fdcf35e6038 R14: 00007fdcf35e5fa0 R15: 00007ffedcccae28 [ 707.292044][T13524] [ 707.810886][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2005'. [ 708.702551][T13553] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2010'. [ 709.181378][ T11] block nbd0: Possible stuck request ffff88802612e000: control (read@0,4096B). Runtime 510 seconds [ 710.528479][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.668905][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.681299][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 710.681314][ T30] audit: type=1400 audit(1761813097.462:1812): avc: denied { create } for pid=13563 comm="syz.1.2014" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 711.102352][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.148427][ T30] audit: type=1400 audit(1761813097.922:1813): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=2202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 711.212442][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 712.432400][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.751177][T13598] FAULT_INJECTION: forcing a failure. [ 712.751177][T13598] name failslab, interval 1, probability 0, space 0, times 0 [ 712.764369][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.0.2023 Not tainted syzkaller #0 PREEMPT(full) [ 712.764398][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 712.764410][T13598] Call Trace: [ 712.764417][T13598] [ 712.764425][T13598] dump_stack_lvl+0x16c/0x1f0 [ 712.764459][T13598] should_fail_ex+0x512/0x640 [ 712.764482][T13598] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 712.764506][T13598] should_failslab+0xc2/0x120 [ 712.764529][T13598] __kvmalloc_node_noprof+0x141/0x9c0 [ 712.764552][T13598] ? __do_sys_add_key+0x1fc/0x470 [ 712.764586][T13598] ? __do_sys_add_key+0x1fc/0x470 [ 712.764613][T13598] __do_sys_add_key+0x1fc/0x470 [ 712.764641][T13598] ? __pfx___do_sys_add_key+0x10/0x10 [ 712.764681][T13598] do_syscall_64+0xcd/0xfa0 [ 712.764712][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.764733][T13598] RIP: 0033:0x7f299438efc9 [ 712.764750][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.764769][T13598] RSP: 002b:00007f29951ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 712.764788][T13598] RAX: ffffffffffffffda RBX: 00007f29945e6180 RCX: 00007f299438efc9 [ 712.764802][T13598] RDX: 0000200000002ac0 RSI: 0000200000002a80 RDI: 0000200000002a40 [ 712.764815][T13598] RBP: 00007f29951ed090 R08: 0000000013cee3ea R09: 0000000000000000 [ 712.764828][T13598] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 712.764841][T13598] R13: 00007f29945e6218 R14: 00007f29945e6180 R15: 00007ffc18729cb8 [ 712.764871][T13598] [ 713.580357][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.712108][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2027'. [ 713.713316][T13610] veth0_macvtap: left promiscuous mode [ 713.749542][ T30] audit: type=1400 audit(1761813100.492:1814): avc: denied { setattr } for pid=13603 comm="syz.5.2027" path="socket:[41928]" dev="sockfs" ino=41928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 716.297842][T13633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 716.435019][ T9282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.641977][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.396030][T13640] Cannot find del_set index 4 as target [ 718.569229][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.661045][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.717305][ T30] audit: type=1400 audit(1761813106.492:1815): avc: denied { shutdown } for pid=13645 comm="syz.5.2037" laddr=fe80::e lport=35528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 719.870404][ T30] audit: type=1326 audit(1761813106.522:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 719.974463][ T30] audit: type=1326 audit(1761813106.522:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.046100][ T30] audit: type=1326 audit(1761813106.522:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.123700][ T30] audit: type=1326 audit(1761813106.522:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.156916][T13674] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2043'. [ 720.166158][ T30] audit: type=1326 audit(1761813106.522:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.273821][ T30] audit: type=1326 audit(1761813106.522:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.297896][ T30] audit: type=1326 audit(1761813106.522:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.322101][ T30] audit: type=1326 audit(1761813106.532:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.346479][ T30] audit: type=1326 audit(1761813106.532:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.3.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1049f8efc9 code=0x7ffc0000 [ 720.759298][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.980474][ T31] INFO: task udevd:5813 blocked for more than 143 seconds. [ 722.067732][ T31] Not tainted syzkaller #0 [ 722.077527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 722.087938][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.146682][ T31] task:udevd state:D stack:23616 pid:5813 tgid:5813 ppid:5182 task_flags:0x400140 flags:0x00080003 [ 722.159068][ T31] Call Trace: [ 722.163277][ T31] [ 722.166248][ T31] __schedule+0x1190/0x5de0 [ 722.171083][ T31] ? __lock_acquire+0x622/0x1c90 [ 722.176062][ T31] ? __pfx___schedule+0x10/0x10 [ 722.195507][ T31] ? find_held_lock+0x2b/0x80 [ 722.200579][ T31] ? schedule+0x2d7/0x3a0 [ 722.209125][ T31] schedule+0xe7/0x3a0 [ 722.227869][ T31] io_schedule+0xbf/0x130 [ 722.237879][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 722.261655][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 722.271061][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 722.276939][ T31] ? filemap_read_folio+0xe1/0x2a0 [ 722.283261][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 722.290225][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 722.295830][ T31] ? __filemap_get_folio+0x32b/0xc30 [ 722.303382][ T31] do_read_cache_folio+0x342/0x5c0 [ 722.309624][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 722.315340][ T31] read_part_sector+0xd4/0x370 [ 722.320870][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 722.329580][ T31] adfspart_check_POWERTEC+0x8a/0x710 [ 722.337260][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 722.344526][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 722.351651][ T31] bdev_disk_changed+0x723/0x1520 [ 722.356716][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 722.362565][ T31] blkdev_get_whole+0x187/0x290 [ 722.370421][ T31] bdev_open+0x2c7/0xe40 [ 722.374765][ T31] blkdev_open+0x34e/0x4f0 [ 722.379198][ T31] do_dentry_open+0x982/0x1530 [ 722.386016][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 722.391390][ T31] vfs_open+0x82/0x3f0 [ 722.395541][ T31] path_openat+0x1de4/0x2cb0 [ 722.400491][ T31] ? __pfx_path_openat+0x10/0x10 [ 722.405435][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 722.410455][ T31] do_filp_open+0x20b/0x470 [ 722.414981][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 722.420292][ T31] ? alloc_fd+0x471/0x7d0 [ 722.424651][ T31] do_sys_openat2+0x11b/0x1d0 [ 722.429325][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 722.430140][T11499] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 722.434780][ T31] ? __sys_recvmsg+0x189/0x220 [ 722.446838][ T31] ? __pfx___sys_recvmsg+0x10/0x10 [ 722.451983][ T31] __x64_sys_openat+0x174/0x210 [ 722.456840][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 722.462319][ T31] do_syscall_64+0xcd/0xfa0 [ 722.466837][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.472771][ T31] RIP: 0033:0x7f693a2a7407 [ 722.477181][ T31] RSP: 002b:00007ffd9305a250 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 722.485646][ T31] RAX: ffffffffffffffda RBX: 00007f693a93d880 RCX: 00007f693a2a7407 [ 722.494467][ T31] RDX: 00000000000a0800 RSI: 000055daf2392410 RDI: ffffffffffffff9c [ 722.502672][ T31] RBP: 000055daf238f2c0 R08: 0000000000000000 R09: 0000000000000000 [ 722.510736][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055daf25dd210 [ 722.518726][ T31] R13: 000055daf25ca8d0 R14: 0000000000000000 R15: 000055daf25dd210 [ 722.526773][ T31] [ 722.529897][ T31] [ 722.529897][ T31] Showing all locks held in the system: [ 722.538035][ T31] 1 lock held by rcu_tasks_trace/29: [ 722.543593][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 722.555397][ T31] 1 lock held by khungtaskd/31: [ 722.560305][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 722.570200][ T31] 2 locks held by getty/5568: [ 722.574867][ T31] #0: ffff8880363f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 722.584647][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 722.590068][T11499] usb 2-1: Using ep0 maxpacket: 32 [ 722.595455][ T31] 1 lock held by udevd/5813: [ 722.604484][ T31] #0: ffff888143b1f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 722.613853][ T31] 5 locks held by kworker/1:1/11499: [ 722.619125][ T31] #0: ffff88801b737d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 722.630815][ T31] #1: ffffc9000c9efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 722.644211][ T31] #2: ffff8880293d6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 722.653216][ T31] #3: ffff8880294c1518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 722.663190][ T31] #4: ffff888029394b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 722.672980][ T31] [ 722.675312][ T31] ============================================= [ 722.675312][ T31] [ 722.684131][ T31] NMI backtrace for cpu 1 [ 722.684146][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 722.684170][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 722.684184][ T31] Call Trace: [ 722.684191][ T31] [ 722.684199][ T31] dump_stack_lvl+0x116/0x1f0 [ 722.684232][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 722.684256][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 722.684293][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 722.684319][ T31] watchdog+0xf3f/0x1170 [ 722.684349][ T31] ? rcu_is_watching+0x12/0xc0 [ 722.684375][ T31] ? __pfx_watchdog+0x10/0x10 [ 722.684396][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 722.684427][ T31] ? __kthread_parkme+0x19e/0x250 [ 722.684456][ T31] ? __pfx_watchdog+0x10/0x10 [ 722.684480][ T31] kthread+0x3c5/0x780 [ 722.684500][ T31] ? __pfx_kthread+0x10/0x10 [ 722.684521][ T31] ? rcu_is_watching+0x12/0xc0 [ 722.684545][ T31] ? __pfx_kthread+0x10/0x10 [ 722.684565][ T31] ret_from_fork+0x675/0x7d0 [ 722.684582][ T31] ? __pfx_kthread+0x10/0x10 [ 722.684602][ T31] ret_from_fork_asm+0x1a/0x30 [ 722.684644][ T31] [ 722.684676][ T31] Sending NMI from CPU 1 to CPUs 0: [ 722.806036][ C0] NMI backtrace for cpu 0 [ 722.806050][ C0] CPU: 0 UID: 0 PID: 9176 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 722.806072][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 722.806084][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 722.806105][ C0] RIP: 0010:kasan_check_range+0x45/0x1b0 [ 722.806130][ C0] Code: 0f 82 d7 00 00 00 eb 0f cc cc cc 48 b8 00 00 00 00 00 00 00 ff eb 0a 48 b8 00 00 00 00 00 80 ff ff 48 39 c7 0f 82 b3 00 00 00 <4c> 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 [ 722.806148][ C0] RSP: 0018:ffffc9001b2576f8 EFLAGS: 00000206 [ 722.806161][ C0] RAX: ffff800000000000 RBX: ffff88805d2e4a88 RCX: ffffffff8ae35006 [ 722.806173][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff88805d2e4a88 [ 722.806185][ C0] RBP: 0000000000000010 R08: 0000000000000001 R09: 0000000000000006 [ 722.806193][ C0] R10: ffff88805d2e4a6e R11: ffff88805d2e4800 R12: 000000000000007f [ 722.806203][ C0] R13: 0000000000000028 R14: 0000000000000000 R15: ffffc9001b257ad0 [ 722.806211][ C0] FS: 0000000000000000(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000 [ 722.806227][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.806239][ C0] CR2: 0000000000000000 CR3: 000000000e182000 CR4: 00000000003526f0 [ 722.806250][ C0] DR0: 00000000000000fc DR1: 00000000000000d3 DR2: 0000000000000000 [ 722.806261][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 722.806272][ C0] Call Trace: [ 722.806278][ C0] [ 722.806286][ C0] __asan_memset+0x23/0x50 [ 722.806311][ C0] ieee80211_clear_tpe+0x1e6/0x290 [ 722.806334][ C0] ieee802_11_parse_elems_full+0x311/0x3780 [ 722.806366][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 722.806389][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 722.806418][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 722.806438][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 722.806462][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 722.806490][ C0] ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 722.806512][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 722.806539][ C0] ? __mod_timer+0x8ed/0xd30 [ 722.806560][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 722.806581][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 722.806609][ C0] ? rcu_is_watching+0x12/0xc0 [ 722.806637][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 722.806663][ C0] ieee80211_iface_work+0xe2e/0x1360 [ 722.806686][ C0] ? rcu_is_watching+0x12/0xc0 [ 722.806709][ C0] cfg80211_wiphy_work+0x2c7/0x580 [ 722.806728][ C0] process_one_work+0x9cf/0x1b70 [ 722.806751][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 722.806770][ C0] ? __pfx_process_one_work+0x10/0x10 [ 722.806792][ C0] ? assign_work+0x1a0/0x250 [ 722.806810][ C0] worker_thread+0x6c8/0xf10 [ 722.806834][ C0] ? __kthread_parkme+0x19e/0x250 [ 722.806857][ C0] ? __pfx_worker_thread+0x10/0x10 [ 722.806876][ C0] kthread+0x3c5/0x780 [ 722.806892][ C0] ? __pfx_kthread+0x10/0x10 [ 722.806910][ C0] ? rcu_is_watching+0x12/0xc0 [ 722.806930][ C0] ? __pfx_kthread+0x10/0x10 [ 722.806948][ C0] ret_from_fork+0x675/0x7d0 [ 722.806964][ C0] ? __pfx_kthread+0x10/0x10 [ 722.806980][ C0] ret_from_fork_asm+0x1a/0x30 [ 722.807015][ C0] [ 722.807567][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.173415][T11499] usb 2-1: unable to get BOS descriptor or descriptor too short [ 723.183453][T11499] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 723.191136][T11499] usb 2-1: can't read configurations, error -71 [ 723.900638][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.830357][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.340465][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.860260][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.660353][ T9279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.310317][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.900526][T11742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog