last executing test programs: 7m36.441324423s ago: executing program 3 (id=2786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x86b948d0fbda331e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 7m32.903492125s ago: executing program 3 (id=2793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={r3, 0x3, r1, 0x4, 0x80000}) 7m31.57296193s ago: executing program 3 (id=2796): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000880)={0x14, &(0x7f00000005c0)={0x20, 0xc, 0xae, {0xae, 0x30, "e2a85d94399776954da34bccfbb44a06b3f9795912d9bde3534c81a3bb3175549c2d287b6ca83c9a95ee392ae6a8cd90087653b9e966c7967e095b636bfb6634947daf5a514e3c1120354e0d9ca4679d57f348ff388ce50be1cad607751bb19fb15178f37a53385fc12d1775ed268fb550d70b212117ba9d515b43867205f0d9a7e7eed1810d35cdf13219d6c3fc2f9a76c394a7bc0863cb9765022e15048b88a879379e50909910d0bfd857"}}, &(0x7f0000000780)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "10a872c370280bc94274f379f3372c7494b30cb67619aad2bde629c80dd1e7d01f49c2e4d9475ec77daecd371a74cf29951a644618092c5348b418efcffc6133a5869da370ff578beeada86fa9a0f429cbb74faa2b73464d2432d1d6b3900d879cf487e8de5dc344da1281b65398d9013073d84b3d7ddc659aea4efa1adb45e954cee57ab8624e32c893be05e40a45d76d30727c2ddc26bdbf028cc2dca35674434f2f40266dd762efc0fb67e4e10092c53b7418bd2d533f19573006f01d52378eddecab5049c88dba2d58fc0d57749e54cf1ac5016b49e71e635e062553cd119cb453e200a01519f8d2c4645c631aa4015e9e"}}}, &(0x7f0000000b00)={0x44, &(0x7f00000008c0)={0x20, 0x12, 0x5c, "4f0328ab123a6eabc9e913d20bbfe87d30ece4d54347590ffb0019089ecf1c9c70aab3d0b04b41053f653199464099ac500ef15c806644f9665e06e619017d91ada0a9884a7ad7208cda6ffb3e75b8c4414581191ec7bf65e6c1a29d"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000009c0)={0x20, 0x81, 0x3, "147aa6"}, &(0x7f0000000a00)={0x20, 0x82, 0x3, "11f239"}, &(0x7f0000000a40)={0x20, 0x83, 0x2, "a206"}, &(0x7f0000000a80)={0x20, 0x84, 0x1, "8e"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "12ae85"}}) syz_usb_control_io$uac3(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x60, 0x31, 0x1a, {0x1a, 0x30, "0cc1a9d49af8293b7ae46abbea5adc3c6280d6310431bea4"}}, &(0x7f0000000080)={0x0, 0x3, 0x36, @string={0x36, 0x3, "fb1600c4f9d4275a6da74b6f7d33c7c480eea89a9b8dfc9a9ee15719e2e608c2830b8e240362cef43892bae24fa5bb630e9ffb7b"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x0, 0x18, 0x4, "84d267ca"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xbb}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000001c0)={0x20, 0x81, 0x2, "f333"}, &(0x7f0000000240)={0x20, 0x82, 0x1, "9a"}, &(0x7f0000000380)={0x20, 0x83, 0x2, 'p\a'}, &(0x7f00000003c0)={0x20, 0x84, 0x3, "f550f8"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "63863f"}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{0xff}, {0x18}, 0x0, 0x7}) 7m28.365978867s ago: executing program 3 (id=2808): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1015, 0x0, &(0x7f0000000440)="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"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000140)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2b5b09b, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc}) socket$netlink(0x10, 0x3, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmmsg(r2, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x262) 7m27.314482204s ago: executing program 3 (id=2814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c010) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x498479fc, 0x50, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1, 0x8000, 0x40, 0x8}}) sendto$packet(r5, &(0x7f0000000200)="6b1d712ea570a2cc2ccb980ee2ca7e70e7bc5ec3be5e70b913b9ac3ef9afd16235487f5ad3dbcfc19212df3f41adc46784a679fef9f4d9b403af15063351d55e65a3bf0da35246e782b1daf989482fce58f6f42de6073c1116505f0cc6cbb331cc5b06a291edcc864d79d8b32cf051ba018a7fc5c1a6d45148f74f60671a5ce2afa66b6ed52a9f1b6b36c01d2803bf", 0x8f, 0x4881, &(0x7f00000005c0)={0x11, 0xd, r6, 0x1, 0xff, 0x6, @broadcast}, 0x14) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002a80)={0x2, 0x16, 0x21, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x3, 0x5, 0x0, 0x6e6bb1, 0x704, {0x6, 0x0, 0xc1, 0x88, 0x0, 0x10001, 0x0, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x4c004) read$msr(r7, &(0x7f0000019100)=""/102358, 0x18fd6) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x252580, 0x0) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x600a, &(0x7f00000003c0)={'trans=unix,', {[{@version_u}, {@cache_loose}], [{@obj_role={'obj_role', 0x3d, ' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m'}}, {@hash}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '/dev/cpu/#/msr\x00'}}, {@appraise_type}]}}) 7m27.048071196s ago: executing program 3 (id=2817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) splice(r4, 0x0, r8, 0x0, 0x80, 0x4) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r10, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) 7m26.356401252s ago: executing program 32 (id=2817): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) splice(r4, 0x0, r8, 0x0, 0x80, 0x4) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r10, &(0x7f0000000040)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) 6m22.995575958s ago: executing program 5 (id=3024): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90fe000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 6m21.924299957s ago: executing program 5 (id=3029): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x80480, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r5, &(0x7f0000000500)=""/166, 0xa6) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='LLL', 0x3, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) 6m18.859817859s ago: executing program 5 (id=3033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x9, 0xc}, &(0x7f0000000280)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000800001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd805001e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b000944610000000000000000000000000000000000000000787f8f74000000", 0xd3, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001d00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000004780)={0x1240, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x6}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x1}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x10, 0x6, 0xd, 0xfff7, 0x100, 0x1, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x694c, 0x0, 0x9, 0xa, 0x9, 0xfb78, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff, 0xfffa, 0x8, 0x2, 0x76, 0x81, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0xc9180e8708fac705}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7fff, 0x73, 0x2, 0x6, 0x9, 0xe, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x7fff, 0x1, 0x2, 0xe, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x0, 0x1, 0x872, 0xf, 0x5, 0xcd87, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x8, 0x3b48, 0x0, 0x1ff, 0x100, 0x9, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x0, 0x6, 0x7, 0xfad7, 0x3, 0xea47]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0x2, 0x5, 0x401, 0x2, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x1, 0x4, 0x1, 0x1b, 0x9, 0x36, 0x48, 0x1, 0x12, 0x4, 0x4b, 0xb, 0x12, 0x2, 0x3, 0x30, 0x16, 0xc, 0x1, 0x60, 0x2, 0x4, 0x60]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffc, 0x101, 0xd, 0x1, 0x400, 0x5, 0xfffa]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xea, 0x88b, 0x5, 0xfffd, 0x9, 0x3, 0x1]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x81, 0x5, 0x1, 0x900, 0xfffb, 0xffff]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x0, 0x2, 0x400, 0x619, 0x2f1, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x0, 0x6, 0x800, 0x465, 0x7, 0x2, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa30, 0x81, 0x5, 0x0, 0x5, 0xde4, 0xe377, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2a7, 0x8, 0x4, 0xaa4, 0x100, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x3}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x3}, {0x7, 0x1}, {0x1, 0x4}, {0x6, 0xa}, {0x3, 0x5}, {0x7}, {0x4, 0x3}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x7}, {0x4, 0x5}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x8}, {0x5, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x6}, {0x7, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0x6}, {0x7, 0x4}, {0x4, 0x4}, {0x6, 0x2}, {0x3, 0x8}, {0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x6}, {0x5, 0x2}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x7, 0x0, 0x111, 0x1123, 0x7b, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7420, 0x5, 0x6, 0xad, 0x8a1, 0x0, 0x57, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xf, 0x60, 0x60, 0x1, 0x1b, 0xb, 0x3, 0x1f, 0xb, 0x9, 0x3, 0x9, 0x6, 0x25, 0x16, 0x24, 0x0, 0x60, 0x60, 0x36, 0x6c, 0x30, 0x48, 0x48, 0x6, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x39c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x400, 0x5, 0x0, 0x792d, 0x1ff, 0xff17, 0xf800]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0xc, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0xa}, {0x7, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x5}, {0x3, 0x3}, {0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x3, 0x7}, {0x5, 0x6}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x3}, {0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x5}, {0x6, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x7}, {0x5, 0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x3}, {0x4, 0x9}, {0x3, 0x4}, {0x7}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x6, 0x6}, {0x6, 0x8}, {0x1, 0x5}, {0x2, 0x9}, {0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x4}, {}, {0x6, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x7}, {0x4, 0x7}, {}]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0xa}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x3}, {0x1}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x4}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0x7, 0x7a, 0x0, 0x8000, 0xc65, 0x40]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0xb, 0x2, 0x1b, 0x60, 0x6, 0x2, 0x4, 0x6c, 0x24, 0x60, 0x18, 0x6a, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x9, 0x1726, 0xfffc, 0x1e86, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1, 0xad, 0x400, 0xac, 0x4, 0x9, 0x8ad]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb0, 0xb, 0x3, 0x3ff, 0x5, 0x1, 0x5bf]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x3}, {0x7, 0x3}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x7}, {0x6, 0x6}, {0x6, 0x5}, {0x2}, {}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x1}, {0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x10, 0x1, 0x1, 0x13, 0x7fff, 0x9, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x4}, {0x6, 0x9}, {0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x7}, {0x1, 0xa}, {0x2}, {0x5, 0x6}, {0x6, 0x4}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x6}, {0x2, 0x4}, {0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x2}, {0x6, 0x2}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8ab, 0x9, 0x8, 0x8, 0x6, 0x81, 0x500, 0xfff9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x4, 0x4}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0x8}, {0x5, 0x6}, {0x3}, {0x3, 0x6}, {0x6, 0x4}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0x8}, {0x5, 0x9}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x4, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x6, 0x1}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xffff, 0x18a, 0x1, 0x0, 0x3, 0x76]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x8e}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0x18, 0x6c, 0x6, 0x60, 0x30, 0x6, 0x36, 0x9, 0x36, 0x9]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x2}, {0x7, 0x4}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x3, 0x2}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x1}, {0x2, 0x8}, {0x1, 0xa}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {}, {0x7, 0x7}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x9e, 0x9, 0x0, 0x40, 0x5, 0x100, 0x5]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x5}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x8}, {0x5, 0x4}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x8}, {0x6}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x3}, {0x2, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x9}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x7}, {0x6, 0x5}, {0x5, 0x6}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {0x2, 0x8}, {0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x1}, {}, {0x4, 0xa}, {0x6, 0x4}, {0x0, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0x8}, {0x6, 0x8}, {0x2, 0x8}, {0x7, 0x6}, {0x6}, {0x6, 0xa}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x8}, {0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x1}, {0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x9}, {0x3}, {0x3, 0xa}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x7, 0x2}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x911, 0x7, 0x3ff, 0xff, 0x8000, 0x7d, 0x1, 0xd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xd3, 0x140, 0x2, 0x1, 0xffff, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0xff9, 0x7, 0xfc01, 0x9, 0x4, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x592, 0x2, 0x653, 0x8, 0xc235, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0x6, 0x80, 0x4, 0x6, 0xa, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x0, 0xb4ec, 0x7ff, 0x7, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x9}, {0x0, 0xa}, {}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x4, 0x6}, {}, {0x0, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x2, 0x4}, {0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0xa}, {0x7}, {0x2, 0x7}, {0x2, 0x7}, {0x2}, {0x3, 0x4}, {0x6, 0x7}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x8}, {0x2}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x1, 0x6}, {0x6, 0x3}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdbbd, 0x2, 0x7, 0x5, 0xe, 0x4, 0x389, 0x55]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x16, 0x6c, 0x6c, 0x4, 0x3c, 0x2, 0x3, 0x30, 0x24, 0x4, 0x6, 0x5, 0x6, 0x16, 0x30, 0x24, 0x4, 0x18, 0x5, 0x18, 0x10, 0x2e, 0x0, 0x3, 0x24, 0x6c]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x3ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x3, 0x6c, 0x0, 0x1, 0x5, 0x4, 0x7a, 0xb, 0x18, 0x48, 0x16, 0xc, 0x55, 0x36, 0xc, 0x9, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x8, 0x6, 0x2, 0x10, 0x1, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4c2d, 0x3, 0x9, 0x5, 0x84f3, 0x9, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xe, 0x6, 0x4, 0x5, 0x2, 0x40, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x9e6, 0x77a, 0x4, 0x1, 0x6, 0xf, 0x2]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x3, 0x2}, {0x1, 0x9}, {0x7, 0x3}, {0x7}, {0x6, 0x2}, {0x6, 0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x5}, {}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x2}, {0x2, 0x1c}, {0x4, 0x6}, {0x4}, {0x3, 0x7}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x2}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}, {0x4, 0x6}, {0x7, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x7}, {0x7, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x3}, {0x4, 0x4}, {0x6, 0x1}, {0x7}, {0x2, 0x5}, {0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x1d}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0xa}, {0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x2, 0x7}, {}, {0x3}, {0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x1}, {0x2}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x1}, {0x6, 0x6}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0x1}, {0x6}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0xa}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0x8}, {0x6}, {0x1, 0x9}, {0x5, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x5}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x3}, {0x6, 0x8}, {}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x3, 0x8}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x3d6, 0x7, 0x6, 0xffff, 0x7, 0xffc2]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x24, 0x3, 0x3, 0x3, 0x1b, 0x2, 0x1b, 0x24, 0x6, 0x2, 0x60, 0x30, 0x1, 0x4, 0x5, 0x1b, 0x2, 0x9, 0x36, 0x1, 0x10, 0x70]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x6}, {0x5, 0x6}, {0x5, 0xa}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x5}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x6}, {0x6, 0x9}, {0x5, 0xa}, {0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x9}, {0x3, 0x9}, {0x5, 0x6}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x0, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2d2, 0x4, 0x9, 0x8001, 0x1, 0x6, 0xfd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x4, 0x0, 0x2, 0x5, 0x2, 0x5]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4, 0xc98, 0x80, 0x800, 0x2, 0x6, 0x8001]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x2, 0x6}, {}, {0x6, 0x9}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x2, 0x5}, {0x4, 0x8}, {0x4, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x7, 0x5}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x7, 0x5, 0x14, 0x143, 0x7, 0x4, 0xb901]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x1b, 0x5, 0x6c, 0x1, 0x6c, 0x16, 0x4, 0x4, 0xc, 0x36, 0x1, 0x18, 0xb, 0x3, 0x1b, 0x12, 0xb, 0x4, 0x6c, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x3, 0x5, 0x5, 0x7, 0x9, 0xde]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xc, 0x40, 0xf3, 0xff09, 0x7, 0x8, 0xe1ac]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x7f, 0x0, 0x5, 0x2, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x808d, 0x0, 0x1, 0xfffd, 0x10, 0x4, 0xfff7, 0x24e0]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x7}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0x4}, {0x3}, {0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x7}, {0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {}, {0x6, 0xa}, {0x4, 0x1}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0xaaf, 0xe53, 0x5, 0x2, 0x7, 0x4]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x6}, {0x2, 0x4}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x2}, {0x4, 0x2}, {0x6, 0x5}, {0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x1}, {0x6, 0x4}, {0x5, 0x8}, {0x4, 0x8}, {0x3, 0x4}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {}, {0x1, 0x9}, {0x3, 0x4}, {0x4}, {0x1}, {0x0, 0x2}, {0x3, 0x4}, {0x6, 0x6}, {0x6, 0x8}, {0x3, 0x4}, {0x7, 0x7}, {0x7}, {0x2, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0xa}, {0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa1d, 0x6, 0x338a, 0xa1f, 0xd2, 0xdc9, 0x6, 0x1740]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x0, 0x1, 0x100, 0x1, 0x200, 0x5dc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x6, 0x4, 0x7ff, 0x6dab, 0x3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffb, 0xc96, 0x5, 0x3, 0x3, 0x7, 0xff]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x1}, {0x1}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x4, 0x7}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x8}, {0x6}, {0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x1, 0x3}, {0x7, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x4}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x4, 0x401, 0x80, 0x2, 0xeb9d, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1ff, 0x3ff, 0x5, 0xa, 0xb, 0xc7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x9, 0x6c, 0x1b, 0x9, 0x1b, 0x6, 0x16, 0x16, 0xc, 0x9, 0x4, 0x60, 0x16, 0xb, 0x6c, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x5}, {0x5, 0x7}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x2, 0x7}, {0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x1}, {0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x5}, {0x4, 0x5}, {0x3, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x2, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x7, 0x7}, {0x2, 0x7}, {0x5, 0xa}, {0x5, 0x4}, {0x2, 0x6}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1}, {0x3, 0x9}, {0x6, 0x4}, {0x5, 0x2}, {0x1}, {0x3, 0x2}, {0x4, 0x1}, {0x7, 0x1a}, {0x3, 0x1}, {0x2, 0x4}, {0x5, 0x1}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x4, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x1, 0x3, 0x4, 0x1ff, 0x3, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x10, 0x7be, 0x5, 0x8, 0x0, 0xfffa, 0xb84]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x12, 0x3, 0x1, 0x9, 0x4, 0x5, 0x1, 0x60, 0x36, 0x1b, 0x12]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0xa}, {0x3, 0x4}, {0x3, 0xa}, {0x1, 0x1}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x2, 0x4}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x7}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0xa}, {0x4, 0x5}, {0x5, 0x9}, {0x6, 0x4}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x3}, {0x7, 0x3}, {0x7}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x0, 0x8, 0xa, 0x5, 0xb4, 0xffff, 0xb]}}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x5, 0x2}, {0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0xa}, {0x5}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xffff, 0x101, 0xb, 0x0, 0x7, 0x1a, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x3}, {0x1, 0x3}, {0x4, 0x9}, {0x7, 0x2}, {}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0x3}, {0x5, 0x3}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x2}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x84, 0x100, 0x0, 0x9, 0xe, 0x8, 0x100, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xef, 0x4, 0x74b5, 0x3, 0xe8, 0x8000, 0x1, 0x3720]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x101, 0xa7a, 0xa, 0x9, 0x8c0, 0xf00a, 0x5]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x4}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x12, 0x48, 0x1, 0x48, 0x6, 0x60, 0xc, 0x3, 0x16, 0x6c, 0x24, 0xb, 0x1b, 0x36, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x43c9, 0x0, 0x9, 0x5, 0x8b, 0x40, 0x8f4d, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x6, 0x1, 0x9, 0x7ff, 0xe, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x2, 0x4, 0x6, 0x8, 0xb284, 0xe, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x7, 0x1879, 0x9, 0xbc, 0xfffd, 0x15e]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x9, 0x6, 0x6c38, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3ff, 0xa06e, 0x8001, 0x4, 0x0, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x384, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc53, 0x8, 0x1, 0x2, 0xfff, 0x2, 0x42]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x8}, {0x5, 0x9}, {0x7}, {0x4, 0x6}, {0x6, 0x4}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0x6}, {0x5, 0x2}, {0x2, 0xa}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x7}, {0x5, 0x3}, {0x4, 0x1}, {0x2, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x6, 0x4}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x7, 0x4}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x3}, {0x2}, {0x1, 0x8}, {0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x3}, {0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x1}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0xa}, {0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x36, 0x30, 0x16, 0x12, 0x30, 0x24, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x357, 0x7, 0x3, 0x9, 0x5, 0x8001, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xbeb5, 0x6, 0x100, 0x9, 0x4, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x0, 0x9, 0x3a, 0xc, 0x19, 0x0, 0x8000]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x7b, 0x3, 0x6c, 0x30, 0x1, 0x16, 0x48, 0x12, 0x6, 0x12, 0x36, 0x6, 0x0, 0x60, 0x18, 0x3, 0x61, 0x1b, 0x30, 0x9, 0x1, 0x0, 0x16, 0x48, 0x1b]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x3}, {0x6}, {}, {0x5, 0xa}, {0x0, 0x7}, {0x6, 0x3}, {0x5, 0x4}, {0x5, 0x7}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x2}, {0x1, 0x2}, {0x3, 0x5}, {0x4, 0xa}, {0x5}, {0x3, 0x3}, {0x7, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x53, 0x12, 0x1b, 0x2, 0x30, 0x6, 0x3, 0x3, 0x0, 0x9, 0x9, 0x30, 0x5, 0x4, 0x12, 0x9, 0x30, 0x6, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb1c, 0x805b, 0x4, 0x1, 0x5, 0x4, 0xa7d, 0xa5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x156, 0x400, 0x208, 0x8e2, 0x5, 0x3, 0x7f, 0xe9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x7f, 0x2, 0x6, 0x0, 0x1000, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x9, 0xd633, 0x0, 0x8, 0xff, 0x9]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8e9, 0x4, 0x401, 0x0, 0x0, 0x5, 0x8b4f, 0x3ff]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x9}, {0x2, 0x2}, {0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x5, 0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0xa}, {0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x3}, {0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x3, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x3, 0x4}, {0x3, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x6}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x7}, {0x3}, {0x3, 0x7}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0xa}, {0x5}, {0x3, 0x9}, {0x4, 0xa}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x3}, {0x2}, {0x5, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x1}, {0x3}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {}, {0x0, 0x9}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x7}, {0x2, 0x7}, {0x6}, {0x4, 0x7}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x2, 0x6}, {0x5, 0xa}, {}, {0x7, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0x4}, {0x0, 0x8}, {0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x4}, {0x3}, {0x4, 0x3}, {0x4, 0xa}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0xb, 0x1b, 0x60, 0xc, 0x2, 0x16, 0x3, 0x6c, 0x30, 0x5, 0x0, 0x2, 0x18, 0x4, 0x2, 0x36, 0x2, 0x18, 0x2f8f22cd40e34738, 0x60, 0x0, 0x24, 0x12, 0x18, 0x30]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x9, 0x1, 0x8001, 0x4, 0xf, 0x56]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x4}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x0, 0x8}, {0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x3}, {0x6, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x18, 0x5, 0xb, 0xc, 0x1b, 0x2, 0x9, 0x9, 0x24, 0x1b, 0x30, 0x2, 0x36, 0x4, 0xb, 0x22, 0x6c, 0x18, 0x50, 0x0, 0x30, 0x3, 0x60, 0xb, 0x3, 0x36, 0x9, 0x0, 0x7b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x48, 0x9, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x3}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0xa}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x9}, {0x4, 0x8}, {0x3, 0x5}, {0x1}, {0x2, 0x9}, {0x4, 0xa}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0x2}, {0x5, 0x4}, {0x7, 0x2}, {0x3, 0x8}, {0x4, 0x6}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x3}, {0x3, 0x5}, {0x6, 0x5}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xa, 0x6, 0x7, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x12, 0x0, 0x6, 0x12, 0x60, 0x16, 0xb, 0x16, 0x2, 0x3, 0xc, 0x60, 0x2, 0x30, 0x24, 0x1, 0x16, 0x4, 0x6c, 0xc, 0x48, 0x4, 0x6, 0x4, 0x12, 0x18, 0x2, 0x4]}]}]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x24004000}, 0x24000850) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x20, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x4, 0x2}]}, 0x20}}, 0x20048800) mq_open(&(0x7f0000000300)='#$B\x00', 0x1, 0x172, &(0x7f0000000340)={0x1, 0x5, 0x3, 0x10000}) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r9, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = fsopen(&(0x7f0000000000)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)='\xc5]\x00', 0x0) 6m17.577224507s ago: executing program 5 (id=3035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x0, 0x8b, 0xffff0001, 0x1, 0x1]}, &(0x7f0000000080)=0x54) r6 = fcntl$dupfd(r3, 0x0, r4) write$UHID_INPUT(r6, 0x0, 0x0) 6m16.220396612s ago: executing program 5 (id=3041): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xe68}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$loop(0x0, 0x10, 0x202a80) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}}) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) syz_emit_ethernet(0x56, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000020, &(0x7f0000000240)=@ax25={{0x3, @null, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621, 0x70bd26}, 0x10}}, 0x0) 6m14.768491088s ago: executing program 5 (id=3045): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1ff, 0x2, 0xc2, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x89b17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0xff79, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="1f0f29bd9ec3e4887c6643b00000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r8, &(0x7f0000000500)="4e195bbefd60de715b8e814712f1a7bc955c7919b37f927d42a32ca2cb5d6c24f87d612ef7600106cd271c6b976b3954cdb39a7963877f0130dde8b5061ac30c1aca7883d4a81dd243", 0x49, 0x4008045, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 6m14.306789208s ago: executing program 33 (id=3045): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1ff, 0x2, 0xc2, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x89b17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0xff79, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002780), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="1f0f29bd9ec3e4887c6643b00000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r8, &(0x7f0000000500)="4e195bbefd60de715b8e814712f1a7bc955c7919b37f927d42a32ca2cb5d6c24f87d612ef7600106cd271c6b976b3954cdb39a7963877f0130dde8b5061ac30c1aca7883d4a81dd243", 0x49, 0x4008045, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 4m51.142867914s ago: executing program 6 (id=3277): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 4m49.534900909s ago: executing program 6 (id=3281): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00005ec000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0x9}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500727520d5f569be863a854b840000000000007b119800000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aa581ff83dac4a637bb9b825c4009dbe5eee6a2e2e4b", 0x16}], 0x1}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x1, 0x2, 0xfd, 0x3, 0x9, 0xb}, &(0x7f0000000100)=0x20) 4m48.466114752s ago: executing program 6 (id=3283): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{0xff}, {0x18}, 0x0, 0x7}) 4m45.380633961s ago: executing program 6 (id=3294): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x20) fchmodat(r0, 0x0, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x8, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8c302, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x5, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b30641dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a9646e11568f143a4e34a917deb7ba193b3e7772fd29f3523952", "24431a050000000000000000000000000010e200"}}) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xffffff0a) (fail_nth: 1) 4m44.424817206s ago: executing program 6 (id=3298): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x404, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x20000000095, 0x7f, 0x100000001, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x64, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0xfffffffffffffffb, 0xb6, 0x8000000000000000, 0xa, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x3, 0x37c7, 0xc, 0xbb33, 0xfffffffffffffffe, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x8000000000000001, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x7ff, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x4, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x6, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0xa, 0x5, 0x40, 0x52a7, 0x9, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000810000"], &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000140)={0x143002, 0x1c6, 0x2b}, 0x18) mknodat(r0, &(0x7f0000000040)='./bus\x00', 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x200000ffc000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x50) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) 4m42.375931378s ago: executing program 6 (id=3302): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0", 0x1c}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x34}}, 0x10, 0x0, 0x38}, 0x20000080) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4m27.225289673s ago: executing program 34 (id=3302): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0", 0x1c}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x34}}, 0x10, 0x0, 0x38}, 0x20000080) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10.804876424s ago: executing program 1 (id=4066): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, 0x0, 0x48000, 0x100) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="01807addc200000200000000000081001900892f"], 0x0) 9.168863311s ago: executing program 4 (id=4068): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x1, 0x104) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000099447740970401c07a67010203010902120001440000000904"], 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x8100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) recvmmsg(r6, &(0x7f0000000240), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r6, @ANYRES16=r2, @ANYRESHEX, @ANYBLOB="19dd9c2bda680df0d6bad8fb81c4b43950884b251d146064674e32aba82e5f21b5731255962d4b70529aa320dcd4e4370033bac8f1b8671aff8773b257e5e7f361a3bd98f82502d67c87547313fd", @ANYRESHEX=r3, @ANYRES8=r2], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000004000b703000000000000850000000c000000b70000b0bc966000"/44], &(0x7f0000000980)='GPL\x00', 0x0, 0x2b, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.13851667s ago: executing program 1 (id=4069): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x1ca6, 0x47ae, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3f) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xe) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000480)={0x0, 0xca}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 8.14120333s ago: executing program 0 (id=4072): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002700)={0x34, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000180)={{r0}, 0x4, &(0x7f0000000100)=[0x6, 0x4, 0x3, 0x1000], 0x5, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000003c0)=0x5, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) clock_settime(0xfffffffb, &(0x7f0000000140)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000280)=""/141, 0x8d}], 0x2}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) 7.855629083s ago: executing program 7 (id=4073): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xff5d, &(0x7f0000000240)=0x7834bcc6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x104600, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = memfd_secret(0x80000) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr={0x36314d59, 0xfffffff7}}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f0000000340)=0x57, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x6, 0xfffffffd}, 0x58) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6092c01f00442f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa242065580000000000000021000086dd080088be43"], 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) 6.412925827s ago: executing program 4 (id=4074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001000000000000ecc80007000000", @ANYRES32=r0, @ANYBLOB="0000000008000900030400000a0002"], 0x30}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@prinfo={0x18, 0x84, 0x5, {0xf6dda1f581b7ecd6, 0xfffffffe}}], 0x18, 0x4080}, 0x0) 5.940981504s ago: executing program 7 (id=4075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x440, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@local, 0x4e1e, 0x3, 0x4e21, 0x0, 0x565e196a2b5cf539, 0x20, 0x20, 0x33}, {0x6, 0x1, 0x400006, 0xe0d, 0xffff, 0x8, 0xfffffffd, 0x7}, {0x80000000, 0x8000000000000001, 0x1ff, 0x6}, 0x1000, 0x6e6bbd, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x1, 0x1, 0x8, 0x9d, 0x9, 0xc1}}, 0xe8) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f000001a440)=""/102400, 0x19000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x10008, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 5.873240015s ago: executing program 2 (id=4076): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x8000, 0x41a940) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000280)={0x4, {"09000000d3f9c7e6eefae0000000e800", "3dfab043b5e9f9770000000018a800", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x1}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {0x0}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}], 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x4, 0x8000000000, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x401, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) 5.823293053s ago: executing program 4 (id=4077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x24, 0x3, 0xa, 0x8, 0x7fff, 0x81}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019400)=@newtaction={0xcc, 0x30, 0x1, 0x0, 0xe4, {}, [{0xb8, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x158c, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xfffffffd, 0x2, 0x80000001, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.489413427s ago: executing program 2 (id=4078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0xe000000}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x18, 0x4, @local}, {0xfffffffffffffd78, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 5.004504051s ago: executing program 0 (id=4079): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0xfffffffffffffff6}, 0x20) 4.841478091s ago: executing program 2 (id=4080): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0xfffffffffffffffd, 0x180, 0x2, 0x14, 0xf0, 0x0, 0x7fffffffffffe, 0x5, 0x7, 0x4, 0x0, 0x45, 0xffffffffffffffff, 0x7fff], 0xfec00000, 0x1c4213}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.701497378s ago: executing program 4 (id=4081): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.691077848s ago: executing program 7 (id=4082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 4.583172041s ago: executing program 0 (id=4083): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r1, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x3f420f0000000000, 0x0, 0x4004851}, 0x4004001) 4.292655993s ago: executing program 7 (id=4084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xcd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000046a310ef5ac33500000061194c000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x0) close(0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002700)}, 0x0) 4.283239277s ago: executing program 0 (id=4085): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x400000, 0x0, 0x600, 0x1, 0x0, r0, 0x0}]) 4.115247452s ago: executing program 2 (id=4086): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) 3.445268703s ago: executing program 0 (id=4088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x648a00, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000390423bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="81b8000000000000280012800b000100697036746e6c0000180002801400030020010000ce8900000000000000000002"], 0x48}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x16) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800000069000b00000000000000000000000000000000006c7382596e7158c32360605427c30d07edb500370dbdee5a37ab3bf3b52ad58a4e4a3993b829a29ce31bef6e6875556309c7abb867fc8389e4dc158a899a62"], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0xe, 0xffffffff, 0xb49, 0x6, 0x8, 0x41, 0x6}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x5) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 3.136496341s ago: executing program 7 (id=4089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) close(0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002e00010000000000000000001800008008000000", @ANYRES64=r0, @ANYRESOCT=r2], 0x28}], 0x10000000000001a5, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x100000000001) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) clock_gettime(0x0, 0x0) sendto$inet(r3, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept$inet(r3, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x40c0) r5 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 2.411030409s ago: executing program 0 (id=4090): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x3, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={&(0x7f00000002c0), 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000700)=[@rights={{0xc}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x160) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @rand_addr=0x64010102, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x3, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010086bd7000fedbdf2506000000140008007866726d300000000000000000000000bdf1915e1159b7927d3d8df0e60a93f19f31fef22922d42a02810a00000000000000caf76cbc91d7ff8571d6f5c954f45884a1466d6084b2328b539cc3f815266525abbaf1bc741b6706c6fe7a1c417a313ad610a8067dc8c4ebe26516ebb4553e0292107979db102cd08cc05607e649b06c159a555298530100db1c2dcf80b08d71eac756ac40123110db1f4395a3a7e636b060034f6e7634f9ddc4ac3356b34f97c035b5dcaeb01a6f3ee31cbc5f822b093343b9"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket(0x400000000010, 0x3, 0x0) 2.192966799s ago: executing program 1 (id=4091): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x1f000000, 0x0, 0x5, 0x2, 0x200, &(0x7f0000000880)="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"}) 1.989724574s ago: executing program 7 (id=4092): r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_FIOSETOWN(r0, 0x8901, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100022b2f6510d313cb2610c1feac2a5002e1d91401200600010904740a01ff0101be09058d02b62675511c2647c3252f87f115bc3bac5002e5a873ab2f74e6d45741d94d7683c693fabce682b2011eb137b4ce53c41f3a04e2f610eff4eb76453d056a0000000000010001ad087f9cc89d149b64760ab7a92a56691e91a7000000000000"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x27f2}}, './file0\x00'}) getdents(r1, &(0x7f0000000040)=""/152, 0x98) 1.839170811s ago: executing program 2 (id=4093): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x74, @ipv4={'\x00', '\xff\xff', @local}, 0xf}], 0x1c) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x7ffd) 1.816712994s ago: executing program 1 (id=4094): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x11) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r5}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.361355617s ago: executing program 4 (id=4095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x64, 0x0, 0x1}, 0x28) prlimit64(r0, 0x3, &(0x7f0000000140)={0x8, 0x57}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000040)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/243, 0xf3}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/200, 0xc8}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/4109, 0x100d}], 0x6, &(0x7f0000000300)=""/49, 0x31}, 0x101}], 0x1, 0x40002063, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000340)) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) (async) setpriority(0x2, 0x0, 0x8) (async) socket(0xa, 0x3, 0x7) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/237) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, 0xffffffffffffffff, 0x0) 1.050834523s ago: executing program 2 (id=4096): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000003100)='net/ip6_mr_cache\x00') read$FUSE(r1, &(0x7f0000012f40)={0x2020}, 0x2040) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001900)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb5, 0x6, "bf9108404d999924c0eb5716bf3698004cf04f801e712f54fd92a700cf6789e54b892cdd684312642e7c3c9ce4ed7876aec663a531a14286a2361cc5e62e5488ff5327b523e0d8a6dfea70bc09809ed0335c3a9cf77761f5b9c3fcd342b047533b5b4fbfaf3eb9d34f98cc6299fa9f22d63f0a90c8fa002180707e5da1dd54d8bddc51f90f8b5331f7f10f0126b13136ea9899ee8c1f663d5a96441f880b6358a811369db2d01c400f8f12f7a5dc0fb37a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x13c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xf7, 0x8, "b5ddbd9957bcbe39b00e515807131dec6574c78e1a7d41314d0b0d391f028f16986bd5b5a7d975f55cb260c4e7a1ce651770fbc2f3306bf53549a78ff92c25dea3fc9f9f66873f308006056afd4bb15cc991c0f51a12efbd75e7e095e8082e8c91eebc4dec425cf9d393d4a864a705b2c39d0b5bcb157bd97e5eac0ba7f2184a725da18c120318973b1b59d295eaf491c780b3f4a632dcc3ff7a5e9e5adf194a811289047983bd6c915292f1514e39dc91ef92772dbd126143514b39df904fe9eca67ab7f2aeaa0fdc0bab5cb9e18da1cdaf17fd72ede4881231e39fd007bad1735b33a70b72fb8c9bf0d9f29facd35b7602ac"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x26c}, 0x1, 0x0, 0x0, 0x801}, 0x20040804) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') getdents64(r6, &(0x7f0000000400)=""/35, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 271.027228ms ago: executing program 4 (id=4097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x1ca6, 0x47ae, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3f) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xe) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000480)={0x0, 0xca}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=4098): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) socket(0x28, 0x5, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="141400000000"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20004800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x89200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) kernel console output (not intermixed with test programs): tclass=blk_file permissive=1 [ 1235.616630][T16798] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1235.679256][ T30] audit: type=1400 audit(1775734805.273:65327): avc: denied { ioctl } for pid=18101 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1235.733870][T20526] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1235.776946][ T30] audit: type=1400 audit(1775734805.343:65328): avc: denied { ioctl } for pid=20518 comm="syz.7.3724" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1235.836414][ T30] audit: type=1400 audit(1775734805.363:65329): avc: denied { read write } for pid=18448 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1235.839338][T16798] usb 8-1: config 84 has an invalid interface number: 116 but max is 0 [ 1235.946701][T16798] usb 8-1: config 84 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.962765][T16798] usb 8-1: config 84 has no interface number 0 [ 1235.969553][T16798] usb 8-1: config 84 interface 116 has no altsetting 0 [ 1235.972304][ T30] audit: type=1400 audit(1775734805.403:65330): avc: denied { ioctl } for pid=20518 comm="syz.7.3724" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1235.980989][T20520] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1236.008901][T20520] audit: audit_lost=5285 audit_rate_limit=0 audit_backlog_limit=64 [ 1236.027323][T20533] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1236.041290][T20533] audit: audit_lost=5286 audit_rate_limit=0 audit_backlog_limit=64 [ 1236.057743][T16798] usb 8-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice= a.66 [ 1236.099921][T20534] syzkaller0: entered promiscuous mode [ 1236.105385][T20534] syzkaller0: entered allmulticast mode [ 1236.124513][T16798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.134264][T16798] usb 8-1: Product: syz [ 1236.144083][T16798] usb 8-1: Manufacturer: syz [ 1236.154273][T16798] usb 8-1: SerialNumber: syz [ 1236.162558][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.169269][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.175585][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.181905][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.188216][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.194514][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.200823][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.207133][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.213445][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.219754][T20534] tc action pedit 'at' offset -255 out of bounds [ 1236.226067][T20534] TC_ACT_REPEAT abuse ? [ 1236.743722][T16798] uvcvideo 8-1:84.116: probe with driver uvcvideo failed with error -22 [ 1236.808721][T16798] usb 8-1: USB disconnect, device number 5 [ 1237.176670][T17842] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 1237.354057][T17842] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1237.381576][T17842] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1237.436281][T17842] usb 1-1: config 0 has no interface number 0 [ 1237.525902][T17842] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1237.565980][T17842] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1237.591679][T17842] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1237.636418][T17842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.715426][T17842] usb 1-1: config 0 descriptor?? [ 1238.668564][T17842] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input86 [ 1238.740467][T17842] input: failed to attach handler kbd to device input86, error: -5 [ 1238.935647][T16798] usb 1-1: USB disconnect, device number 105 [ 1239.384730][T20578] binder: 20577:20578 ioctl c018620c 200000000180 returned -22 [ 1239.956589][T16798] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1240.198389][T16798] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1240.226519][T16798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.256525][T16798] usb 3-1: Product: syz [ 1240.260745][T16798] usb 3-1: Manufacturer: syz [ 1240.265330][T16798] usb 3-1: SerialNumber: syz [ 1240.408661][ T30] kauditd_printk_skb: 872 callbacks suppressed [ 1240.408677][ T30] audit: type=1400 audit(1775734810.253:66160): avc: denied { create } for pid=20593 comm="syz.1.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1240.457287][ T30] audit: type=1400 audit(1775734810.283:66161): avc: denied { create } for pid=20596 comm="syz.0.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1240.487753][ T30] audit: type=1400 audit(1775734810.293:66162): avc: denied { write } for pid=20593 comm="syz.1.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1240.533393][ T30] audit: type=1400 audit(1775734810.293:66163): avc: denied { read write } for pid=20593 comm="syz.1.3746" name="vsock" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.580076][ T30] audit: type=1400 audit(1775734810.293:66164): avc: denied { ioctl open } for pid=20593 comm="syz.1.3746" path="/dev/vsock" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.638901][ T30] audit: type=1400 audit(1775734810.333:66165): avc: denied { read write } for pid=20589 comm="syz.4.3744" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.691511][ T30] audit: type=1400 audit(1775734810.333:66166): avc: denied { read write open } for pid=20589 comm="syz.4.3744" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.723021][ T30] audit: type=1400 audit(1775734810.333:66167): avc: denied { ioctl } for pid=20589 comm="syz.4.3744" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.756804][ T5876] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1240.776194][T16798] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1240.789685][ T30] audit: type=1400 audit(1775734810.333:66168): avc: denied { ioctl } for pid=20589 comm="syz.4.3744" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.842821][T16798] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1240.862740][ T30] audit: type=1400 audit(1775734810.333:66169): avc: denied { ioctl } for pid=20589 comm="syz.4.3744" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1240.912983][T20605] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1240.940214][ T5876] usb 5-1: not running at top speed; connect to a high speed hub [ 1240.958438][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.971114][ T5876] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1241.062634][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1241.078628][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.097253][ T5876] usb 5-1: Manufacturer: Й [ 1241.113027][ T5876] usb 5-1: SerialNumber: ኚ劑Ⳗ뚯盘ᮠ端埿傰簠﷯餾ⱂ鐞ᢒ쓤聣粟嚝륑҄ᙔ⠤።隬徃᝕楚ྀ᷎㒬ｉ琾㌃䆰讦쓴ꢴ뿺ꮾ⏾⤽矖ꦢ漭㡴ⷚꓞन [ 1242.419497][T20590] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1242.620204][ T5876] usb 5-1: USB disconnect, device number 111 [ 1243.451542][T16798] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1243.507012][T16798] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1243.541211][T16798] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1243.567116][T16798] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1243.588095][T16798] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1243.610620][T16798] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1243.718618][T16798] usb 3-1: USB disconnect, device number 113 [ 1244.282267][T20647] CIFS: VFS: Malformed UNC in devname [ 1244.453438][T20648] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3760'. [ 1244.645004][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1244.658642][T20654] sp0: Synchronizing with TNC [ 1244.659689][T20656] batadv0: Device is already in use. [ 1245.024319][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1245.427533][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 1245.427550][ T30] audit: type=1400 audit(1775734815.273:66526): avc: denied { sys_module } for pid=20664 comm="syz.7.3765" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1245.536656][T20677] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1245.877726][ T30] audit: type=1400 audit(1775734815.273:66527): avc: denied { module_request } for pid=20664 comm="syz.7.3765" kmod="wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1245.902784][ T30] audit: type=1400 audit(1775734815.363:66528): avc: denied { create } for pid=20668 comm="syz.0.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1245.923849][ T30] audit: type=1400 audit(1775734815.423:66529): avc: denied { prog_load } for pid=20668 comm="syz.0.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1245.948225][ T30] audit: type=1400 audit(1775734815.423:66530): avc: denied { bpf } for pid=20668 comm="syz.0.3766" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1246.039723][ T30] audit: type=1400 audit(1775734815.433:66531): avc: denied { create } for pid=20668 comm="syz.0.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1246.146944][ T30] audit: type=1400 audit(1775734815.443:66532): avc: denied { create } for pid=20668 comm="syz.0.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1246.284327][ T30] audit: type=1400 audit(1775734815.453:66533): avc: denied { write } for pid=20668 comm="syz.0.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1246.428982][ T30] audit: type=1400 audit(1775734815.483:66534): avc: denied { read } for pid=20668 comm="syz.0.3766" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1246.520381][ T30] audit: type=1400 audit(1775734815.483:66535): avc: denied { read open } for pid=20668 comm="syz.0.3766" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1248.790845][T20709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1249.763871][T20717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.482242][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1250.482260][ T30] audit: type=1400 audit(1775734819.453:66702): avc: denied { read } for pid=20713 comm="syz.1.3774" dev="nsfs" ino=4026534006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1250.859868][ T30] audit: type=1400 audit(1775734819.463:66703): avc: denied { read open } for pid=20713 comm="syz.1.3774" path="net:[4026534006]" dev="nsfs" ino=4026534006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1250.896562][ T30] audit: type=1400 audit(1775734819.473:66704): avc: denied { create } for pid=20713 comm="syz.1.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1250.977229][ T30] audit: type=1400 audit(1775734819.533:66705): avc: denied { read } for pid=20713 comm="syz.1.3774" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.059943][ T30] audit: type=1400 audit(1775734819.533:66706): avc: denied { read open } for pid=20713 comm="syz.1.3774" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.160388][ T30] audit: type=1400 audit(1775734819.563:66707): avc: denied { ioctl } for pid=20713 comm="syz.1.3774" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.256721][ T5876] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1251.517091][ T30] audit: type=1400 audit(1775734819.573:66708): avc: denied { ioctl } for pid=20713 comm="syz.1.3774" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.542012][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 1251.582384][ T30] audit: type=1400 audit(1775734819.583:66709): avc: denied { ioctl } for pid=20713 comm="syz.1.3774" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.614719][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1251.645029][ T5876] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1251.656519][ T5876] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.678756][ T30] audit: type=1400 audit(1775734819.603:66710): avc: denied { ioctl } for pid=20713 comm="syz.1.3774" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1251.707906][ T5876] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1251.718797][T20736] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1251.740896][ T5876] usb 1-1: config 128 has no interface number 0 [ 1251.748068][ T5876] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1252.609290][ T5876] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1252.636728][ T5876] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1252.651349][ T5876] usb 1-1: string descriptor 0 read error: -71 [ 1252.674187][ T5876] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1252.689789][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.731013][ T5876] usb 1-1: can't set config #128, error -71 [ 1252.763459][ T5876] usb 1-1: USB disconnect, device number 106 [ 1252.826508][T12235] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1252.996796][T12235] usb 3-1: Using ep0 maxpacket: 16 [ 1253.099992][T12235] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1253.116831][T12235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1253.544788][T12235] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1253.565509][T12235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.582810][T12235] usb 3-1: Product: syz [ 1253.595150][T12235] usb 3-1: Manufacturer: syz [ 1253.649390][T12235] usb 3-1: SerialNumber: syz [ 1253.836942][T12235] usb 3-1: config 0 descriptor?? [ 1253.854360][T12235] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1253.883440][T12235] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1254.323422][T20763] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1254.329961][T20763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1254.343245][T20763] vhci_hcd vhci_hcd.0: Device attached [ 1254.358691][T20764] vhci_hcd: connection closed [ 1254.358952][ T36] vhci_hcd vhci_hcd.7: stop threads [ 1254.376702][ T36] vhci_hcd vhci_hcd.7: release socket [ 1254.386921][ T36] vhci_hcd vhci_hcd.7: disconnect device [ 1254.400739][T20770] dlm: no locking on control device [ 1254.455128][T12235] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1254.463085][T12235] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1255.532965][ T30] kauditd_printk_skb: 319 callbacks suppressed [ 1255.532981][ T30] audit: type=1400 audit(1775734825.373:67010): avc: denied { read } for pid=20789 comm="syz.1.3796" dev="nsfs" ino=4026532812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1255.625325][ T30] audit: type=1400 audit(1775734825.413:67011): avc: denied { read open } for pid=20789 comm="syz.1.3796" path="ipc:[4026532812]" dev="nsfs" ino=4026532812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1255.805928][ T30] audit: type=1400 audit(1775734825.553:67012): avc: denied { ioctl } for pid=20780 comm="syz.0.3794" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1255.858514][T20790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1255.904531][ T30] audit: type=1400 audit(1775734825.563:67013): avc: denied { prog_load } for pid=20789 comm="syz.1.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1256.020505][ T30] audit: type=1400 audit(1775734825.573:67014): avc: denied { bpf } for pid=20789 comm="syz.1.3796" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1256.132845][ T30] audit: type=1400 audit(1775734825.573:67015): avc: denied { create } for pid=20789 comm="syz.1.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1256.235235][ T30] audit: type=1400 audit(1775734825.593:67016): avc: denied { name_bind } for pid=20789 comm="syz.1.3796" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1256.246270][T12235] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1256.344174][ T30] audit: type=1400 audit(1775734825.603:67017): avc: denied { read } for pid=20789 comm="syz.1.3796" dev="nsfs" ino=4026534006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1256.527469][ T30] audit: type=1400 audit(1775734825.603:67018): avc: denied { read open } for pid=20789 comm="syz.1.3796" path="net:[4026534006]" dev="nsfs" ino=4026534006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1256.673256][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1256.680474][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1256.687163][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1256.693802][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1256.701244][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1256.738044][T12235] usb 3-1: USB disconnect, device number 114 [ 1256.752610][ T30] audit: type=1400 audit(1775734825.603:67019): avc: denied { create } for pid=20789 comm="syz.1.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1256.838462][T20803] loop2: detected capacity change from 0 to 7 [ 1256.849583][T20803] Dev loop2: unable to read RDB block 7 [ 1256.855191][T20803] loop2: AHDI p1 p2 p3 [ 1256.907047][T20803] loop2: partition table partially beyond EOD, truncated [ 1256.927815][T20803] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1256.976811][T20803] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1257.136991][ T5934] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1257.352593][ T5934] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1257.384685][ T5934] usb 8-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1257.416954][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.513655][ T5934] usb 8-1: config 0 descriptor?? [ 1257.534078][T20814] FAT-fs (nbd4): unable to read boot sector [ 1257.646182][T20807] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1257.957029][T12235] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1259.302831][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.320320][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.770172][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.804991][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.815583][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.822500][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.829404][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.836284][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.843484][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.850386][ T5934] wacom 0003:056A:5000.0014: unknown main item tag 0x0 [ 1259.864970][ T5934] usb 8-1: USB disconnect, device number 6 [ 1260.055057][T20831] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1261.219372][ T30] kauditd_printk_skb: 169 callbacks suppressed [ 1261.219388][ T30] audit: type=1400 audit(1775734830.143:67189): avc: denied { execmem } for pid=20836 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1261.256648][T12235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1261.267204][T19985] Bluetooth: hci4: link tx timeout [ 1261.273491][T19985] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1261.279612][T12235] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1261.304805][T12235] usb 3-1: can't read configurations, error -71 [ 1261.331858][ T30] audit: type=1400 audit(1775734830.443:67190): avc: denied { read } for pid=20836 comm="syz.4.3807" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1261.384461][ T30] audit: type=1400 audit(1775734830.443:67191): avc: denied { read open } for pid=20836 comm="syz.4.3807" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1261.476971][T12237] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1261.486527][ T30] audit: type=1400 audit(1775734830.603:67192): avc: denied { mac_admin } for pid=20836 comm="syz.4.3807" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1261.560690][ T30] audit: type=1400 audit(1775734830.633:67193): avc: denied { read write } for pid=20836 comm="syz.4.3807" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1261.616052][T20846] netlink: 'syz.1.3809': attribute type 16 has an invalid length. [ 1261.630608][ T30] audit: type=1400 audit(1775734830.643:67194): avc: denied { read write open } for pid=20836 comm="syz.4.3807" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1261.666538][T12237] usb 5-1: Using ep0 maxpacket: 16 [ 1261.674474][ T30] audit: type=1400 audit(1775734830.643:67195): avc: denied { ioctl } for pid=20836 comm="syz.4.3807" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1261.709707][T20843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1261.737290][T12237] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1261.776850][ T30] audit: type=1400 audit(1775734830.653:67196): avc: denied { ioctl } for pid=20836 comm="syz.4.3807" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1261.876575][T12237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1261.898848][ T30] audit: type=1400 audit(1775734830.663:67197): avc: denied { ioctl } for pid=20836 comm="syz.4.3807" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1261.960236][ T30] audit: type=1400 audit(1775734830.673:67198): avc: denied { ioctl } for pid=20836 comm="syz.4.3807" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1262.022869][T12237] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1262.075222][T12237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.156468][T12237] usb 5-1: Product: syz [ 1262.167651][T12237] usb 5-1: Manufacturer: syz [ 1262.172313][T12237] usb 5-1: SerialNumber: syz [ 1262.346156][T12237] usb 5-1: config 0 descriptor?? [ 1263.111662][T12237] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1263.121382][T12237] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1263.357159][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 1263.645133][T12237] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1263.667183][T12237] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1264.279979][T12237] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1264.317142][T12237] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1264.356508][T12237] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1264.394358][T12237] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1264.433876][T12237] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1264.451338][T12237] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1264.504663][T12237] usb 5-1: USB disconnect, device number 112 [ 1264.583201][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1264.668040][T20874] team_slave_0 (unregistering): left allmulticast mode [ 1264.707046][T20874] team0: Port device team_slave_0 removed [ 1264.961773][T20878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.970954][T20878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.991630][T20878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.008638][T20878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.094442][T20878] bridge0: port 3(batadv0) entered disabled state [ 1265.150127][T20886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.311455][ T30] kauditd_printk_skb: 609 callbacks suppressed [ 1266.311470][ T30] audit: type=1400 audit(1775734836.153:67736): avc: denied { checkpoint_restore } for pid=20895 comm="syz.0.3823" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1266.390057][ T30] audit: type=1400 audit(1775734836.193:67737): avc: denied { allowed } for pid=20895 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1266.422560][ T30] audit: type=1400 audit(1775734836.193:67738): avc: denied { create } for pid=20895 comm="syz.0.3823" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1266.451674][ T30] audit: type=1400 audit(1775734836.193:67739): avc: denied { map_create } for pid=20895 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1266.637615][ T30] audit: type=1400 audit(1775734836.203:67740): avc: denied { map_create } for pid=20895 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1266.773168][ T30] audit: type=1400 audit(1775734836.263:67741): avc: denied { search } for pid=20903 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.856488][T12237] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1266.892219][ T30] audit: type=1400 audit(1775734836.263:67742): avc: denied { search } for pid=20903 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.958436][T17842] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1267.036541][ T30] audit: type=1400 audit(1775734836.313:67743): avc: denied { search } for pid=20903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1267.068514][T12237] usb 2-1: Using ep0 maxpacket: 16 [ 1267.083511][T20905] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1267.090203][T20905] audit: audit_lost=5332 audit_rate_limit=0 audit_backlog_limit=64 [ 1267.098143][T12237] usb 2-1: config index 0 descriptor too short (expected 29555, got 27) [ 1267.112303][T12237] usb 2-1: config 109 has too many interfaces: 95, using maximum allowed: 32 [ 1267.129570][T12237] usb 2-1: config 109 has an invalid descriptor of length 114, skipping remainder of the config [ 1267.142243][T17842] usb 3-1: Using ep0 maxpacket: 8 [ 1267.153255][T17842] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1267.169797][T12237] usb 2-1: config 109 has 0 interfaces, different from the descriptor's value: 95 [ 1267.179538][T17842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1267.229792][T12237] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1267.245351][T17842] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1267.269595][T12237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.289394][T17842] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1267.314088][T12237] usb 2-1: Product: syz [ 1267.326488][T12237] usb 2-1: Manufacturer: syz [ 1267.335472][T17842] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1267.345825][T12237] usb 2-1: SerialNumber: syz [ 1267.403828][T17842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.689525][T17842] usb 3-1: GET_CAPABILITIES returned 0 [ 1268.128323][T17842] usbtmc 3-1:16.0: can't read capabilities [ 1268.431136][T17842] usb 3-1: USB disconnect, device number 117 [ 1269.276689][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 1269.428602][T12237] usb 2-1: USB disconnect, device number 87 [ 1269.653776][T20941] hugetlbfs: Bad value for 'nr_inodes' [ 1270.869548][T20944] mkiss: ax0: crc mode is auto. [ 1271.325414][ T30] kauditd_printk_skb: 276 callbacks suppressed [ 1271.325430][ T30] audit: type=1400 audit(1775734841.163:68019): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1271.464349][ T30] audit: type=1400 audit(1775734841.203:68020): avc: denied { read write } for pid=18959 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.627624][ T30] audit: type=1400 audit(1775734841.203:68021): avc: denied { read write open } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.783850][ T30] audit: type=1400 audit(1775734841.203:68022): avc: denied { ioctl } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.957382][T20966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.041780][T18959] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1272.042450][T20970] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1272.075946][ T30] audit: type=1400 audit(1775734841.213:68023): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1272.097588][T20971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1272.122986][T18448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1272.138190][T20971] audit: audit_lost=5333 audit_rate_limit=0 audit_backlog_limit=64 [ 1272.728944][T20977] overlay: Bad value for 'metacopy' [ 1272.969879][T20978] kernel read not supported for file /bus (pid: 20978 comm: syz.7.3840) [ 1273.335968][T20983] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1274.376556][T12250] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1274.536545][T12250] usb 3-1: Using ep0 maxpacket: 8 [ 1274.601221][T12250] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 1274.636576][T12250] usb 3-1: config 0 has no interface number 0 [ 1274.642696][T12250] usb 3-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1274.696063][T12250] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 1274.736827][T12250] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 1274.914991][T12250] usb 3-1: config 0 interface 137 has no altsetting 0 [ 1274.934283][T12250] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 1274.944436][T12250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.958991][T12250] usb 3-1: Product: syz [ 1274.963156][T12250] usb 3-1: Manufacturer: syz [ 1274.977191][T12250] usb 3-1: SerialNumber: syz [ 1275.412716][T12250] usb 3-1: config 0 descriptor?? [ 1275.433611][T21001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1275.475081][T12250] xbox_remote_probe: Unexpected endpoint_in [ 1276.373428][ T30] kauditd_printk_skb: 705 callbacks suppressed [ 1276.373466][ T30] audit: type=1400 audit(1775734846.203:68629): avc: denied { getattr } for pid=21022 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.ipv4ll" dev="tmpfs" ino=9891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1276.617844][ T30] audit: type=1400 audit(1775734846.213:68630): avc: denied { search } for pid=21022 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.668426][ T30] audit: type=1400 audit(1775734846.213:68631): avc: denied { search } for pid=21022 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.797307][ T30] audit: type=1400 audit(1775734846.213:68632): avc: denied { search } for pid=21022 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.890418][T12250] usb 3-1: USB disconnect, device number 118 [ 1276.946533][ T30] audit: type=1400 audit(1775734846.213:68633): avc: denied { search } for pid=21022 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.055738][ T30] audit: type=1400 audit(1775734846.213:68634): avc: denied { remove_name search } for pid=21022 comm="rm" name="resolv.conf.lapb6.ipv4ll" dev="tmpfs" ino=9891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.222596][T11150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1277.237685][T11150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1277.256156][ T30] audit: type=1400 audit(1775734846.213:68635): avc: denied { unlink } for pid=21022 comm="rm" name="resolv.conf.lapb6.ipv4ll" dev="tmpfs" ino=9891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1278.266569][T11150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1278.426225][T18959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1278.436626][T11150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1278.450195][ T30] audit: type=1400 audit(1775734846.223:68636): avc: denied { write } for pid=21000 comm="syz.2.3846" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1278.452628][T21047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1278.747099][ T5934] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1279.174767][ T5934] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1279.206721][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.296060][ T5934] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1279.363227][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.672928][ T5934] usb 2-1: usb_control_msg returned -32 [ 1279.730375][ T5934] usbtmc 2-1:16.0: can't read capabilities [ 1279.799571][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.837209][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.606756][T12250] libceph: connect (1)[c::]:6789 error -22 [ 1280.621675][T12250] libceph: mon0 (1)[c::]:6789 connect error [ 1280.806080][T21061] ceph: No mds server is up or the cluster is laggy [ 1281.072881][T21088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1281.377258][ T30] kauditd_printk_skb: 616 callbacks suppressed [ 1281.377276][ T30] audit: type=1400 audit(1775734851.223:69078): avc: denied { perfmon } for pid=21081 comm="syz.7.3864" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1281.508309][ T30] audit: type=1400 audit(1775734851.223:69079): avc: denied { prog_load } for pid=21091 comm="syz.2.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1281.575054][ T30] audit: type=1400 audit(1775734851.223:69080): avc: denied { bpf } for pid=21091 comm="syz.2.3866" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1281.910620][ T30] audit: type=1400 audit(1775734851.233:69081): avc: denied { prog_load } for pid=21091 comm="syz.2.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1281.973193][T18448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1281.998689][ T30] audit: type=1400 audit(1775734851.243:69082): avc: denied { bpf } for pid=21091 comm="syz.2.3866" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1282.036470][T18448] audit: audit_lost=5427 audit_rate_limit=0 audit_backlog_limit=64 [ 1282.075761][T18448] audit: backlog limit exceeded [ 1282.096805][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1282.118897][T18448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1282.141354][ T30] audit: type=1400 audit(1775734851.243:69083): avc: denied { create } for pid=21081 comm="syz.7.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1282.181326][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1282.536380][T21106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1283.044409][T21121] sctp: [Deprecated]: syz.7.3870 (pid 21121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1283.044409][T21121] Use struct sctp_sack_info instead [ 1283.177271][T21118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.222030][T21118] team0: Port device batadv0 added [ 1283.615318][T12237] usb 2-1: USB disconnect, device number 88 [ 1284.093447][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3872'. [ 1284.725201][T12237] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1284.762187][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3875'. [ 1285.346702][T12237] usb 3-1: Using ep0 maxpacket: 32 [ 1285.391900][T12237] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1285.429002][T12237] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1285.485788][T12237] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1285.496036][T12237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.504095][T12237] usb 3-1: Product: syz [ 1285.547649][T12237] usb 3-1: Manufacturer: syz [ 1285.552273][T12237] usb 3-1: SerialNumber: syz [ 1285.852550][T12237] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1285.878317][T12237] usb 3-1: unit 255 not found! [ 1286.061333][T21155] trusted_key: syz.7.3875 sent an empty control message without MSG_MORE. [ 1286.097861][T12237] usb 3-1: disable ehci-hcd to run US-144 [ 1286.150310][T12237] usb 3-1: disable ehci-hcd to run US-144 [ 1286.267639][T12237] usb 3-1: USB disconnect, device number 119 [ 1286.746334][ T30] kauditd_printk_skb: 579 callbacks suppressed [ 1286.746353][ T30] audit: type=1400 audit(1775734856.253:69661): avc: denied { mounton } for pid=21157 comm="syz.4.3877" path="/124/file0" dev="tmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1287.082074][ T30] audit: type=1400 audit(1775734856.313:69662): avc: denied { unlink } for pid=21157 comm="syz.4.3877" name="#50" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1287.219310][ T30] audit: type=1400 audit(1775734856.403:69663): avc: denied { mount } for pid=21157 comm="syz.4.3877" name="/" dev="overlay" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1287.430716][ T30] audit: type=1400 audit(1775734856.623:69664): avc: denied { write } for pid=21157 comm="syz.4.3877" path="socket:[79603]" dev="sockfs" ino=79603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1287.542630][T17839] udevd[17839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1288.082321][ T30] audit: type=1400 audit(1775734856.673:69665): avc: denied { map_create } for pid=21161 comm="syz.1.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1288.151676][T21179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1288.186794][T21173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1288.194430][T21173] audit: audit_lost=5429 audit_rate_limit=0 audit_backlog_limit=64 [ 1288.206190][T21179] audit: audit_lost=5430 audit_rate_limit=0 audit_backlog_limit=64 [ 1288.235417][T21173] audit: backlog limit exceeded [ 1288.566510][T12237] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1288.761452][T12237] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1288.787635][T12237] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.831534][T12237] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1288.916497][T12237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.006664][T12250] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1289.099500][T21186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1289.463233][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1289.472381][T21191] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 1289.749292][T12250] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.770658][T12237] usb 3-1: usb_control_msg returned -32 [ 1289.778139][T12237] usbtmc 3-1:16.0: can't read capabilities [ 1289.787237][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.800303][T12250] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1289.820108][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.838834][T12250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1289.870945][T12250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1289.893130][T12250] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1290.081386][T12250] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1290.119533][T12250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1290.164263][T12250] usb 5-1: Product: syz [ 1290.181616][T12250] usb 5-1: Manufacturer: syz [ 1290.196455][T12250] usb 5-1: SerialNumber: syz [ 1290.311801][T12250] usb 5-1: config 0 descriptor?? [ 1290.660609][T12250] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1290.696850][T12250] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1290.856531][T12237] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1290.945843][T12250] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1290.966978][T12250] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1291.077438][T19985] Bluetooth: hci0: ISO packet for unknown connection handle 114 [ 1291.101552][T12237] usb 1-1: config 0 has no interfaces? [ 1291.116811][T12237] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1291.138696][T12237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.184537][T12250] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1291.268056][T12237] usb 1-1: config 0 descriptor?? [ 1291.366179][T12237] usb 3-1: USB disconnect, device number 120 [ 1291.787004][ T30] kauditd_printk_skb: 499 callbacks suppressed [ 1291.787023][ T30] audit: type=1400 audit(1775734861.593:70137): avc: denied { execmem } for pid=21210 comm="syz.2.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1291.852674][T12250] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1291.912559][T12250] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1291.970782][T12250] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1292.025340][T12250] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1292.122911][ T30] audit: type=1400 audit(1775734861.943:70138): avc: denied { map_create } for pid=21210 comm="syz.2.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1292.426219][T21199] xt_ecn: cannot match TCP bits for non-tcp packets [ 1292.519269][ T30] audit: type=1400 audit(1775734861.943:70139): avc: denied { map_create } for pid=21210 comm="syz.2.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1292.715661][ T30] audit: type=1400 audit(1775734861.943:70140): avc: denied { map_read map_write } for pid=21210 comm="syz.2.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1292.757330][T21197] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3887'. [ 1292.774768][T12237] usb 1-1: USB disconnect, device number 107 [ 1292.817484][T21166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1292.837249][T21166] audit: audit_lost=5440 audit_rate_limit=0 audit_backlog_limit=64 [ 1292.848265][ T30] audit: type=1400 audit(1775734861.963:70141): avc: denied { create } for pid=21195 comm="syz.0.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1292.887307][T21216] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1292.893797][T21216] audit: audit_lost=5441 audit_rate_limit=0 audit_backlog_limit=64 [ 1292.914833][T21166] audit: backlog limit exceeded [ 1293.094916][T12249] usb 5-1: USB disconnect, device number 113 [ 1293.279651][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1293.955188][T12249] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1294.441771][T12249] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.476684][T12249] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1294.497943][T12250] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1294.529389][T12249] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1294.613799][T12249] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1294.646753][T12249] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1294.664165][T12249] usb 8-1: Product: syz [ 1294.692650][T12250] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1294.704540][T12249] usb 8-1: SerialNumber: syz [ 1294.748159][T12250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1294.759162][T21243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1294.777401][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1294.799019][T21232] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1294.854396][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1294.919534][T12250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1294.960586][T12250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1295.015419][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1295.076449][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1295.137392][T12250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1295.176357][T12250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1295.228436][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1295.280294][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1296.475790][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3899'. [ 1296.496822][T12250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1296.512341][T12250] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1296.532598][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1296.578778][T12250] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1296.619110][T12250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1296.726505][T12235] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1296.763808][T12250] usb 2-1: unable to read config index 4 descriptor/start: -71 [ 1296.797037][T12250] usb 2-1: can't read configurations, error -71 [ 1296.797070][ T30] kauditd_printk_skb: 430 callbacks suppressed [ 1296.797082][ T30] audit: type=1400 audit(1775734866.633:70571): avc: denied { search } for pid=21247 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.923049][T21247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.956929][T21232] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.964184][T21232] audit: audit_lost=5442 audit_rate_limit=0 audit_backlog_limit=64 [ 1296.974522][T12235] usb 3-1: Using ep0 maxpacket: 16 [ 1296.995608][T21247] audit: audit_lost=5443 audit_rate_limit=0 audit_backlog_limit=64 [ 1297.016874][ T30] audit: type=1400 audit(1775734866.633:70572): avc: denied { search } for pid=21247 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.018568][T21232] audit: backlog limit exceeded [ 1297.042526][T21254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1297.051746][T21254] audit: audit_lost=5444 audit_rate_limit=0 audit_backlog_limit=64 [ 1297.059780][T21254] audit: backlog limit exceeded [ 1297.070168][T12235] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1297.118050][T12235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1297.177876][T12235] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1297.189576][T12235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.211741][T12249] cdc_ncm 8-1:1.0: bind() failure [ 1297.219285][T12235] usb 3-1: Product: syz [ 1297.222564][T12249] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1297.228846][T12235] usb 3-1: Manufacturer: syz [ 1297.235891][T12235] usb 3-1: SerialNumber: syz [ 1297.270921][T12249] cdc_ncm 8-1:1.1: bind() failure [ 1297.296854][T12235] usb 3-1: config 0 descriptor?? [ 1297.339171][T12235] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1297.372529][T12235] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1297.602984][T21232] can0: slcan on ttyS3. [ 1297.707703][T21231] can0 (unregistered): slcan off ttyS3. [ 1297.737135][ T5876] usb 8-1: USB disconnect, device number 7 [ 1298.001594][T12235] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1298.013221][T12235] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1298.966914][T12235] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1299.056340][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1299.072214][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1299.079852][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1299.086570][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1299.093386][T12235] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1299.104658][T12235] usb 3-1: USB disconnect, device number 121 [ 1299.961807][T21287] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1300.311930][T21296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3908'. [ 1300.629154][ T5876] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1300.845716][ T5876] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 246, changing to 11 [ 1300.882313][T21304] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1300.907477][ T5876] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1300.970611][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=021f, bcdDevice= 0.40 [ 1300.973426][T21304] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1301.023546][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.073744][ T5876] usb 2-1: Product: 驺宂䬡ꙵ狻鎿婉㾞쮺㠍嵐⇩탪ἔ∮꓉갎〖귅㲖鞼눔莈옱쎔ፁ貞貅婑쀳鱽茪㏚㺫帢➯鮥ᢱ촦檷櫝芐섨⥦鱫櫭퍐ꏤ獄䊶஄⮖些鯸盱릓侬Ⅲ莖꬈滯Ⳡ渆䔂Ḹﯶ馆駯ꐈᘛ빧㬀｣旗帇筶䉁Ⳛ蓣㣽Ḫ퐙욞쩨䬇♒㪼딳㣀쑅鎃ﺥ튟ⷂ⃹뢺ㅥ̴ [ 1301.080508][T21304] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3910'. [ 1301.275816][ T5876] usb 2-1: Manufacturer: ဇ [ 1301.310212][ T5876] usb 2-1: SerialNumber: Я [ 1301.621296][T21316] netlink: 'syz.2.3907': attribute type 1 has an invalid length. [ 1301.782625][T21319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3907'. [ 1301.806587][ T30] kauditd_printk_skb: 979 callbacks suppressed [ 1301.806601][ T30] audit: type=1400 audit(1775734871.643:71452): avc: denied { search } for pid=21320 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1301.838392][T21316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1302.032354][T21289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1302.051414][T21320] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1302.058168][T21289] audit: audit_lost=5478 audit_rate_limit=0 audit_backlog_limit=64 [ 1302.066055][T21289] audit: backlog limit exceeded [ 1302.069317][T21296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1302.136406][T21323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1302.143043][T21323] audit: audit_lost=5479 audit_rate_limit=0 audit_backlog_limit=64 [ 1302.151135][T21323] audit: backlog limit exceeded [ 1302.157127][T21323] CIFS mount error: No usable UNC path provided in device string! [ 1302.157127][T21323] [ 1302.167760][T21323] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1302.187964][T21323] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1302.488973][T21325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.548900][T21325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.690134][T21296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.780037][T21296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.924408][ T5876] usbhid 2-1:1.0: can't add hid device: -71 [ 1302.975401][ T5876] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1303.048348][ T5876] usb 2-1: USB disconnect, device number 91 [ 1303.086512][T12249] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1303.286948][T12249] usb 3-1: Using ep0 maxpacket: 32 [ 1303.376121][T12249] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1303.521772][T12249] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1303.585858][T12249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.748084][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3914'. [ 1303.944811][T12249] usb 3-1: Product: syz [ 1303.958149][T12249] usb 3-1: Manufacturer: syz [ 1303.962747][T12249] usb 3-1: SerialNumber: syz [ 1304.109203][T12249] usb 3-1: config 0 descriptor?? [ 1304.208214][T21336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21336 comm=syz.7.3915 [ 1304.524891][T21348] sctp: [Deprecated]: syz.0.3917 (pid 21348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1304.524891][T21348] Use struct sctp_sack_info instead [ 1304.678490][T12249] usb 3-1: USB disconnect, device number 122 [ 1305.177399][T21346] orangefs_mount: mount request failed with -4 [ 1305.194454][T21352] loop6: detected capacity change from 0 to 2640 [ 1305.257315][T21352] buffer_io_error: 11 callbacks suppressed [ 1305.257330][T21352] Buffer I/O error on dev loop6, logical block 0, async page read [ 1305.342061][T21352] Buffer I/O error on dev loop6, logical block 0, async page read [ 1305.402700][T21352] Buffer I/O error on dev loop6, logical block 0, async page read [ 1305.476505][T21352] Buffer I/O error on dev loop6, logical block 0, async page read [ 1305.554441][T21352] Buffer I/O error on dev loop6, logical block 0, async page read [ 1305.601010][T21355] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1305.646685][T21355] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1305.655111][T21352] loop6: unable to read partition table [ 1305.684353][T21352] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1305.698771][T21355] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1305.736684][T12235] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1305.757597][T21355] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1305.801089][T21355] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 1305.971292][T12235] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 1306.020214][T12235] usb 8-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 1306.066646][T12235] usb 8-1: config 0 has no interface number 0 [ 1306.103012][T12235] usb 8-1: too many endpoints for config 0 interface 120 altsetting 0: 71, using maximum allowed: 30 [ 1306.185032][T12235] usb 8-1: config 0 interface 120 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 1306.244146][T12235] usb 8-1: config 0 interface 120 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 71 [ 1306.294220][T12235] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1306.345812][T12235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.391332][T12235] usb 8-1: config 0 descriptor?? [ 1306.842105][ T30] kauditd_printk_skb: 1162 callbacks suppressed [ 1306.842129][ T30] audit: type=1400 audit(1775734876.683:72534): avc: denied { search } for pid=21371 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.975883][ T30] audit: type=1400 audit(1775734876.713:72535): avc: denied { search } for pid=21371 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.040528][T21377] netlink: 'syz.4.3925': attribute type 10 has an invalid length. [ 1307.082545][T21377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1307.122896][T21377] macvlan1: entered promiscuous mode [ 1307.136667][ T30] audit: type=1400 audit(1775734876.713:72536): avc: denied { search } for pid=21371 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.140305][T21377] batman_adv: batadv0: Adding interface: macvlan1 [ 1307.193064][T21377] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.232551][T21375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.247778][T21372] netlink: 'syz.7.3919': attribute type 21 has an invalid length. [ 1307.297112][T21377] batman_adv: batadv0: Interface activated: macvlan1 [ 1307.309256][T21372] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3919'. [ 1307.398813][ T30] audit: type=1400 audit(1775734876.743:72537): avc: denied { search } for pid=21312 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.398861][ T30] audit: type=1400 audit(1775734876.843:72538): avc: denied { ioctl } for pid=21351 comm="syz.2.3918" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1307.398901][ T30] audit: type=1400 audit(1775734876.853:72539): avc: denied { create } for pid=21351 comm="syz.2.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1307.398937][ T30] audit: type=1400 audit(1775734876.853:72540): avc: denied { write } for pid=21351 comm="syz.2.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1307.398971][ T30] audit: type=1400 audit(1775734876.853:72541): avc: denied { read } for pid=21351 comm="syz.2.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1307.399006][ T30] audit: type=1400 audit(1775734876.853:72542): avc: denied { read } for pid=21351 comm="syz.2.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1307.399040][ T30] audit: type=1400 audit(1775734876.863:72543): avc: denied { ioctl } for pid=21351 comm="syz.2.3918" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1309.316507][T12249] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1309.547655][T12235] usb 8-1: string descriptor 0 read error: -71 [ 1310.012641][T12237] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1310.081315][T12235] usb 8-1: USB disconnect, device number 8 [ 1310.093734][T12249] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1310.114458][T12249] usb 3-1: config 0 has no interface number 0 [ 1310.146637][T12249] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1310.171755][T12249] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.184043][T12249] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1310.246513][T12249] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1310.267123][T12249] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1310.296445][T12249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.327561][T12237] usb 2-1: Using ep0 maxpacket: 16 [ 1310.347252][T12249] usb 3-1: config 0 descriptor?? [ 1310.363268][T12237] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1310.391750][T12237] usb 2-1: config 159 has an invalid interface number: 195 but max is 0 [ 1310.434056][T12237] usb 2-1: config 159 has no interface number 0 [ 1310.448899][T12237] usb 2-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1310.500154][T12237] usb 2-1: config 159 interface 195 has no altsetting 0 [ 1310.587419][T12237] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 1310.644323][T12237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.680610][T12237] usb 2-1: Product: syz [ 1310.703651][T12237] usb 2-1: Manufacturer: syz [ 1310.723242][T12237] usb 2-1: SerialNumber: syz [ 1311.182088][T21398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.227904][T21398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.290660][T12249] hid (null): invalid report_count 252767622 [ 1311.305512][T21403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.332795][T21403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.499088][T12249] uclogic 0003:145F:0212.0015: pen parameters not found [ 1311.520599][T12249] uclogic 0003:145F:0212.0015: interface is invalid, ignoring [ 1311.542291][T21407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.724405][T21434] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1311.869886][ T30] kauditd_printk_skb: 637 callbacks suppressed [ 1311.869903][ T30] audit: type=1400 audit(1775734881.713:73181): avc: denied { mounton } for pid=21435 comm="syz.0.3939" path="/180" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1311.923143][T21398] usb usb7: usbfs: process 21398 (syz.2.3930) did not claim interface 0 before use [ 1311.933729][ T30] audit: type=1400 audit(1775734881.753:73182): avc: denied { write } for pid=21397 comm="syz.2.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1311.956905][ T30] audit: type=1400 audit(1775734881.753:73183): avc: denied { bind } for pid=21397 comm="syz.2.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1311.979782][ T30] audit: type=1400 audit(1775734881.763:73184): avc: denied { setopt } for pid=21397 comm="syz.2.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1312.001544][T12250] usb 3-1: USB disconnect, device number 123 [ 1312.034336][ T30] audit: type=1400 audit(1775734881.763:73185): avc: denied { accept } for pid=21397 comm="syz.2.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1312.061108][ T30] audit: type=1400 audit(1775734881.763:73186): avc: denied { write } for pid=21397 comm="syz.2.3930" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1312.270148][ T30] audit: type=1400 audit(1775734881.763:73187): avc: denied { write } for pid=21397 comm="syz.2.3930" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1312.407888][T21439] nfs4: Unknown parameter 'no' [ 1312.419255][ T30] audit: type=1400 audit(1775734881.793:73188): avc: denied { read append } for pid=21397 comm="syz.2.3930" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1312.473410][ T30] audit: type=1400 audit(1775734881.793:73189): avc: denied { read open } for pid=21397 comm="syz.2.3930" path="/dev/comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1312.551332][ T30] audit: type=1400 audit(1775734881.803:73190): avc: denied { create } for pid=21430 comm="syz.7.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1312.717094][T12237] udl 2-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 1312.817231][T12237] [drm:udl_init] *ERROR* Selecting channel failed [ 1312.903695][T12237] [drm] Initialized udl 0.0.1 for 2-1:159.195 on minor 2 [ 1313.058200][T21454] tmpfs: Bad value for 'mpol' [ 1313.362406][T12237] [drm] Initialized udl on minor 2 [ 1313.434891][T12237] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1313.513001][T12237] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 1313.605005][T12235] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1313.628255][T12237] usb 2-1: USB disconnect, device number 92 [ 1313.653871][T12235] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 1313.757153][T17839] udevd[17839]: setting owner of /dev/bus/usb/002/092 to uid=0, gid=0 failed: No such file or directory [ 1314.086570][ T5876] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1314.265739][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 1314.290957][ T5876] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1314.310112][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1314.326701][ T5876] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1314.503177][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1314.512408][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.523264][ T5876] usb 3-1: Product: syz [ 1314.529483][ T5876] usb 3-1: Manufacturer: syz [ 1315.508234][ T5876] usb 3-1: SerialNumber: syz [ 1315.835958][ T5876] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1315.857229][ T5876] cdc_ncm 3-1:1.0: bind() failure [ 1316.399326][T21480] FAULT_INJECTION: forcing a failure. [ 1316.399326][T21480] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.412910][T21480] CPU: 0 UID: 0 PID: 21480 Comm: syz.4.3949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.412937][T21480] Tainted: [L]=SOFTLOCKUP [ 1316.412943][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1316.412954][T21480] Call Trace: [ 1316.412960][T21480] [ 1316.412968][T21480] dump_stack_lvl+0x100/0x190 [ 1316.413000][T21480] should_fail_ex.cold+0x5/0xa [ 1316.413024][T21480] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1316.413052][T21480] should_failslab+0xc2/0x120 [ 1316.413071][T21480] __kmalloc_noprof+0xe0/0x850 [ 1316.413103][T21480] tomoyo_realpath_from_path+0xb6/0x690 [ 1316.413141][T21480] tomoyo_path_number_perm+0x23c/0x580 [ 1316.413162][T21480] ? tomoyo_path_number_perm+0x22e/0x580 [ 1316.413187][T21480] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1316.413239][T21480] ? find_held_lock+0x2b/0x80 [ 1316.413262][T21480] ? __fget_files+0x215/0x3d0 [ 1316.413281][T21480] ? hook_file_ioctl_common+0x146/0x410 [ 1316.413306][T21480] ? __fget_files+0x21f/0x3d0 [ 1316.413330][T21480] security_file_ioctl+0xd3/0x230 [ 1316.413358][T21480] __x64_sys_ioctl+0xb7/0x210 [ 1316.413387][T21480] do_syscall_64+0x106/0xf80 [ 1316.413405][T21480] ? clear_bhb_loop+0x40/0x90 [ 1316.413429][T21480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.413447][T21480] RIP: 0033:0x7fd12439c819 [ 1316.413463][T21480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.413479][T21480] RSP: 002b:00007fd125246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1316.413496][T21480] RAX: ffffffffffffffda RBX: 00007fd124615fa0 RCX: 00007fd12439c819 [ 1316.413507][T21480] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000009 [ 1316.413518][T21480] RBP: 00007fd125246090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.413529][T21480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.413539][T21480] R13: 00007fd124616038 R14: 00007fd124615fa0 R15: 00007ffe4df58fd8 [ 1316.413565][T21480] [ 1316.413654][T21480] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1317.072352][ T5876] usb 3-1: USB disconnect, device number 124 [ 1317.106460][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 1317.106475][ T30] audit: type=1400 audit(1775734886.943:73429): avc: denied { read write } for pid=18101 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1317.196797][ T30] audit: type=1400 audit(1775734886.983:73430): avc: denied { read write open } for pid=18101 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1317.246691][ T30] audit: type=1400 audit(1775734886.983:73431): avc: denied { ioctl } for pid=18101 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1317.434388][ T30] audit: type=1400 audit(1775734887.273:73432): avc: denied { read } for pid=21487 comm="syz.2.3951" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1317.490657][T21490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.518776][ T30] audit: type=1400 audit(1775734887.273:73433): avc: denied { read open } for pid=21487 comm="syz.2.3951" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1317.615650][ T30] audit: type=1400 audit(1775734887.273:73434): avc: denied { write } for pid=21487 comm="syz.2.3951" name="ip6_mr_cache" dev="proc" ino=4026532932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1317.741954][ T30] audit: type=1400 audit(1775734887.273:73435): avc: denied { write } for pid=21487 comm="syz.2.3951" path="/proc/538/net/ip6_mr_cache" dev="proc" ino=4026532932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1317.836735][ T30] audit: type=1400 audit(1775734887.303:73436): avc: denied { read } for pid=21487 comm="syz.2.3951" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1317.871466][ T30] audit: type=1400 audit(1775734887.313:73437): avc: denied { read open } for pid=21487 comm="syz.2.3951" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1317.897926][ T30] audit: type=1400 audit(1775734887.323:73438): avc: denied { ioctl } for pid=21487 comm="syz.2.3951" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1318.123689][T21500] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1318.938181][T21507] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1319.606545][T17842] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1319.926945][T17842] usb 3-1: Using ep0 maxpacket: 8 [ 1320.024147][T17842] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1320.063687][T17842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.097050][T17842] usb 3-1: Product: syz [ 1320.104127][T17842] usb 3-1: Manufacturer: syz [ 1320.166446][T17842] usb 3-1: SerialNumber: syz [ 1320.185050][T17842] usb 3-1: config 0 descriptor?? [ 1320.208777][T17842] gspca_main: se401-2.14.0 probing 047d:5003 [ 1320.815510][T17842] gspca_se401: Frame size: 0x514 bayer [ 1320.821242][T17842] gspca_se401: Frame size: 784x7 bayer [ 1320.826733][T17842] gspca_se401: Frame size: 2312x0 bayer [ 1321.029296][T17842] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 1321.071792][T21538] futex_wake_op: syz.0.3963 tries to shift op by 144; fix this program [ 1321.100625][T21536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.429570][T21545] vxfs: unable to read disk superblock at 1 [ 1321.435829][T21545] vxfs: unable to read disk superblock at 8 [ 1321.441813][T21545] vxfs: can't find superblock. [ 1321.817141][T17842] usb 3-1: USB disconnect, device number 125 [ 1322.135034][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 1322.135048][ T30] audit: type=1400 audit(1775734891.973:73713): avc: denied { write } for pid=21535 comm="syz.0.3963" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1322.355579][ T30] audit: type=1400 audit(1775734892.023:73714): avc: denied { write open } for pid=21535 comm="syz.0.3963" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1322.502133][ T30] audit: type=1400 audit(1775734892.023:73715): avc: denied { ioctl } for pid=21535 comm="syz.0.3963" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=927 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1322.559024][T21552] IPv4: Oversized IP packet from 127.202.26.0 [ 1322.610490][ T30] audit: type=1400 audit(1775734892.093:73716): avc: denied { read write } for pid=18101 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1322.668823][ T30] audit: type=1400 audit(1775734892.093:73717): avc: denied { read write open } for pid=18101 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1322.768896][T21556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.874197][ T30] audit: type=1400 audit(1775734892.093:73718): avc: denied { ioctl } for pid=18101 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1322.956906][T21562] kvm: pic: non byte write [ 1323.050363][ T30] audit: type=1400 audit(1775734892.143:73719): avc: denied { read } for pid=21532 comm="syz.4.3962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1323.151776][ T30] audit: type=1400 audit(1775734892.263:73720): avc: denied { read write } for pid=16074 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1323.235894][ T30] audit: type=1400 audit(1775734892.263:73721): avc: denied { read write open } for pid=16074 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1323.338874][ T30] audit: type=1400 audit(1775734892.263:73722): avc: denied { ioctl } for pid=16074 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1324.017651][ T5876] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1324.032411][T21581] veth3: entered promiscuous mode [ 1324.049281][T21581] veth3: entered allmulticast mode [ 1324.195693][ T5876] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.229182][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.256456][ T5876] usb 5-1: Product: syz [ 1324.266497][T12249] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1324.276722][ T5876] usb 5-1: Manufacturer: syz [ 1324.281334][ T5876] usb 5-1: SerialNumber: syz [ 1324.421209][ T5876] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1324.499382][T16798] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1324.694704][T12249] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.736586][T12249] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.764897][T12249] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1324.805059][T12249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.848180][T12249] usb 8-1: config 0 descriptor?? [ 1325.719234][T12250] usb 5-1: USB disconnect, device number 114 [ 1325.766911][T16798] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1325.797403][T16798] ath9k_htc: Failed to initialize the device [ 1325.804642][T12249] hid_parser_main: 468 callbacks suppressed [ 1325.804653][T12249] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 1325.846506][T12250] usb 5-1: ath9k_htc: USB layer deinitialized [ 1325.907489][T12249] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1326.083182][T12249] cp2112 0003:10C4:EA90.0016: error requesting version [ 1326.103921][T21596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.165510][T21596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.288381][T12249] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -32 [ 1326.521543][T12235] usb 8-1: USB disconnect, device number 9 [ 1326.758894][T21607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3981'. [ 1327.411412][ T30] kauditd_printk_skb: 1337 callbacks suppressed [ 1327.411428][ T30] audit: type=1400 audit(1775734897.253:74082): avc: denied { read write } for pid=16074 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1327.576474][ T30] audit: type=1400 audit(1775734897.253:74083): avc: denied { read write open } for pid=16074 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1327.666487][ T30] audit: type=1400 audit(1775734897.263:74084): avc: denied { ioctl } for pid=16074 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1327.737149][ T30] audit: type=1400 audit(1775734897.303:74085): avc: denied { read write } for pid=18959 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1327.768395][ T30] audit: type=1400 audit(1775734897.313:74086): avc: denied { read write open } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1327.829044][T21617] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3984'. [ 1327.850424][T21614] netlink: 'syz.1.3983': attribute type 1 has an invalid length. [ 1327.865210][T21617] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3984'. [ 1327.894691][ T30] audit: type=1400 audit(1775734897.313:74087): avc: denied { ioctl } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1328.016876][ T30] audit: type=1400 audit(1775734897.393:74088): avc: denied { read write } for pid=18448 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1328.057776][T21620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1328.087994][T21620] audit: audit_lost=5834 audit_rate_limit=0 audit_backlog_limit=64 [ 1328.110101][T21622] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1328.126485][T12249] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1328.367501][T12249] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1328.420143][T12249] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.466492][T12249] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1328.515902][T12249] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1328.549271][T12249] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1328.632714][T12249] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1328.676614][T12249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.710088][T12249] usb 1-1: Product: syz [ 1328.714261][T12249] usb 1-1: Manufacturer: syz [ 1328.758394][T12249] usb 1-1: SerialNumber: syz [ 1329.410936][T21628] 9p: Could not find request transport: kd9L + [ 1329.431524][T21620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.473056][T21620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.134033][T21639] syzkaller0: entered promiscuous mode [ 1330.140178][T21639] syzkaller0: entered allmulticast mode [ 1330.163718][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'. [ 1330.341248][T21651] netlink: 'syz.7.3993': attribute type 1 has an invalid length. [ 1330.349388][T21651] netlink: 2108 bytes leftover after parsing attributes in process `syz.7.3993'. [ 1330.523509][T21654] netlink: 'syz.1.3994': attribute type 32 has an invalid length. [ 1330.835023][T21651] dns_resolver: Unsupported content type (152) [ 1331.266621][T21658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3992'. [ 1331.298747][T21658] bridge1: entered promiscuous mode [ 1331.304029][T21658] bridge1: entered allmulticast mode [ 1331.320104][T21658] team0: Port device bridge1 added [ 1331.861464][T12249] usb 1-1: USB disconnect, device number 108 [ 1331.863758][T21665] 9p: Bad value for 'rfdno' [ 1332.011844][T21670] No such timeout policy "syz1" [ 1332.061021][T21672] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1332.086199][T17730] udevd[17730]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.208080][T12237] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1332.420517][ T30] kauditd_printk_skb: 292 callbacks suppressed [ 1332.420532][ T30] audit: type=1400 audit(1775734902.263:74378): avc: denied { bpf } for pid=21660 comm="syz.4.3997" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1332.510069][T12237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.587786][T12237] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1332.683544][T12237] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1332.714741][ T30] audit: type=1400 audit(1775734902.293:74379): avc: denied { prog_run } for pid=21660 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1332.739426][T12237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.755622][T12237] usb 2-1: Product: syz [ 1332.776502][T12237] usb 2-1: Manufacturer: syz [ 1332.781139][ T30] audit: type=1400 audit(1775734902.313:74380): avc: denied { read } for pid=21660 comm="syz.4.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1332.808133][T12237] usb 2-1: SerialNumber: syz [ 1332.985378][ T30] audit: type=1400 audit(1775734902.323:74381): avc: denied { ioctl } for pid=21661 comm="syz.1.3996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1333.114845][T21688] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4001'. [ 1333.406647][ T30] audit: type=1400 audit(1775734902.333:74382): avc: denied { ioctl } for pid=21661 comm="syz.1.3996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1333.440631][ T30] audit: type=1400 audit(1775734902.333:74383): avc: denied { create } for pid=21675 comm="syz.0.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1333.463748][T21665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.463822][ T30] audit: type=1400 audit(1775734902.343:74384): avc: denied { ioctl } for pid=21661 comm="syz.1.3996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1333.557821][T21665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.638663][T12237] usb 2-1: 0:1 : does not exist [ 1333.685201][T12237] usb 2-1: unit 4 not found! [ 1333.690069][ T30] audit: type=1400 audit(1775734902.353:74385): avc: denied { ioctl } for pid=21661 comm="syz.1.3996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1333.849360][T12237] usb 2-1: USB disconnect, device number 93 [ 1333.895781][ T30] audit: type=1400 audit(1775734902.353:74386): avc: denied { ioctl } for pid=21661 comm="syz.1.3996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1334.020032][ T30] audit: type=1400 audit(1775734902.363:74387): avc: denied { ioctl } for pid=21661 comm="syz.1.3996" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1334.176642][T17839] udevd[17839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.940128][T21701] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1335.278996][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1335.512626][T21711] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4006'. [ 1337.199766][T21727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1337.448343][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 1337.448360][ T30] audit: type=1400 audit(1775734907.293:74550): avc: denied { read } for pid=21719 comm="syz.1.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1337.529181][ T30] audit: type=1400 audit(1775734907.333:74551): avc: denied { read } for pid=21719 comm="syz.1.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1337.561313][T21737] netlink: 'syz.2.4014': attribute type 10 has an invalid length. [ 1337.596762][T21737] team0: Failed to send options change via netlink (err -105) [ 1337.618591][T21737] team0: Port device dummy0 added [ 1337.633442][T21741] netlink: 'syz.2.4014': attribute type 10 has an invalid length. [ 1337.649819][ T30] audit: type=1400 audit(1775734907.333:74552): avc: denied { create } for pid=21719 comm="syz.1.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1337.688012][T21741] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1337.751615][T21741] team0: Port device dummy0 removed [ 1337.765662][ T30] audit: type=1400 audit(1775734907.353:74554): avc: denied { read } for pid=21719 comm="syz.1.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1337.795707][T21741] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1337.856318][ T30] audit: type=1400 audit(1775734907.353:74553): avc: denied { bpf } for pid=21719 comm="syz.1.4011" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1337.970730][ T30] audit: type=1400 audit(1775734907.353:74555): avc: denied { prog_run } for pid=21719 comm="syz.1.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1338.081703][ T30] audit: type=1400 audit(1775734907.353:74556): avc: denied { prog_load } for pid=21735 comm="syz.2.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1338.137264][ T30] audit: type=1400 audit(1775734907.353:74557): avc: denied { bpf } for pid=21735 comm="syz.2.4014" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1338.168266][T21751] fuse: Unknown parameter 'grou00000000000000000000' [ 1338.215772][ T30] audit: type=1400 audit(1775734907.353:74558): avc: denied { perfmon } for pid=21735 comm="syz.2.4014" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1338.345884][ T30] audit: type=1400 audit(1775734907.353:74559): avc: denied { prog_load } for pid=21735 comm="syz.2.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1340.277561][T21779] lo: entered promiscuous mode [ 1340.299462][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 1340.327989][T21779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1340.583919][T21786] netlink: 'syz.0.4026': attribute type 2 has an invalid length. [ 1340.770572][T12237] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1340.966787][T12237] usb 5-1: Using ep0 maxpacket: 32 [ 1341.199228][T21785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.221060][T21785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.250121][T12237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1341.275140][T12237] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1341.286726][T16798] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1341.307535][T12237] usb 5-1: can't read configurations, error -71 [ 1341.468955][T16798] usb 8-1: Using ep0 maxpacket: 16 [ 1341.481877][T16798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.493910][T16798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.506248][T16798] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1341.519882][T16798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.542855][T16798] usb 8-1: config 0 descriptor?? [ 1342.147511][T12250] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1342.315520][T12250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1342.337732][T12250] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1342.349559][T16798] ntrig 0003:1B96:0008.0017: unknown main item tag 0x0 [ 1342.376751][T16798] ntrig 0003:1B96:0008.0017: unknown main item tag 0x0 [ 1342.383694][T12250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1342.405494][T16798] ntrig 0003:1B96:0008.0017: unknown main item tag 0x0 [ 1342.416916][T12250] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1342.426784][T16798] ntrig 0003:1B96:0008.0017: unknown main item tag 0x0 [ 1342.433699][T16798] ntrig 0003:1B96:0008.0017: unknown main item tag 0x0 [ 1342.440706][T12250] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1342.450066][T16798] ntrig 0003:1B96:0008.0017: unknown main item tag 0x0 [ 1342.457048][T12250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.465077][T16798] ntrig 0003:1B96:0008.0017: unknown main item tag 0x0 [ 1342.481267][T12250] usb 2-1: config 0 descriptor?? [ 1342.490728][T16798] ntrig 0003:1B96:0008.0017: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.7-1/input0 [ 1342.493832][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 1342.493844][ T30] audit: type=1400 audit(1775734912.333:74874): avc: denied { create } for pid=21813 comm="syz.0.4035" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1342.553976][ T30] audit: type=1400 audit(1775734912.353:74875): avc: denied { ioctl } for pid=21797 comm="syz.1.4032" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.556227][T16798] ntrig 0003:1B96:0008.0017: Firmware version: 6.2.27.63.0 (8bec f87f) [ 1342.579365][ T30] audit: type=1400 audit(1775734912.353:74876): avc: denied { ioctl } for pid=21797 comm="syz.1.4032" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.579408][ T30] audit: type=1400 audit(1775734912.353:74877): avc: denied { ioctl } for pid=21797 comm="syz.1.4032" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.579447][ T30] audit: type=1400 audit(1775734912.353:74878): avc: denied { ioctl } for pid=21797 comm="syz.1.4032" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.579485][ T30] audit: type=1400 audit(1775734912.353:74879): avc: denied { ioctl } for pid=21797 comm="syz.1.4032" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.579525][ T30] audit: type=1400 audit(1775734912.393:74880): avc: denied { ioctl } for pid=21777 comm="syz.7.4025" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.579565][ T30] audit: type=1400 audit(1775734912.393:74881): avc: denied { ioctl } for pid=21777 comm="syz.7.4025" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.836187][ T30] audit: type=1400 audit(1775734912.593:74882): avc: denied { ioctl } for pid=21797 comm="syz.1.4032" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1343.140384][T12250] hdpvr 2-1:0.0: firmware version 0x0 dated [ 1343.156440][T12250] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1343.157277][ T30] audit: type=1400 audit(1775734912.593:74883): avc: denied { ioctl } for pid=21797 comm="syz.1.4032" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1343.236765][T16798] usb 8-1: USB disconnect, device number 10 [ 1343.376691][T12237] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1343.438544][T21820] fido_id[21820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1343.546795][T12237] usb 1-1: Using ep0 maxpacket: 16 [ 1343.578352][T12237] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1343.593501][T21803] ceph: No mds server is up or the cluster is laggy [ 1343.601080][T21807] ceph: No mds server is up or the cluster is laggy [ 1343.696769][T12237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1343.952916][T12237] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1344.075162][T12237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.130528][T12237] usb 1-1: Product: syz [ 1344.151397][T12237] usb 1-1: Manufacturer: syz [ 1344.156009][T12237] usb 1-1: SerialNumber: syz [ 1344.206790][T12237] usb 1-1: config 0 descriptor?? [ 1344.261365][T12237] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1344.310907][T12237] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1344.879517][T12250] hdpvr 2-1:0.0: Could not setup controls [ 1344.885573][T12250] hdpvr 2-1:0.0: registering videodev failed [ 1344.970965][T12250] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 1345.050482][T12250] usb 2-1: USB disconnect, device number 94 [ 1345.211699][T12237] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1345.227997][T12237] em28xx 1-1:0.0: Config register raw data: 0x56 [ 1345.430563][T12237] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1345.486508][T12237] em28xx 1-1:0.0: No AC97 audio processor [ 1345.635613][T21848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4041'. [ 1345.888857][T21857] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4041'. [ 1346.166507][T12250] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1346.336471][T12250] usb 5-1: device descriptor read/64, error -71 [ 1346.451589][T16798] usb 1-1: USB disconnect, device number 109 [ 1346.521905][T16798] em28xx 1-1:0.0: Disconnecting em28xx [ 1346.577373][T16798] em28xx 1-1:0.0: Freeing device [ 1346.625289][T12250] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1346.806700][T12250] usb 5-1: device descriptor read/64, error -71 [ 1346.894832][T21869] kvm: kvm [21866]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1346.916890][T21869] kvm: kvm [21866]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1346.957194][T12250] usb usb5-port1: attempt power cycle [ 1347.346704][T12250] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1347.543908][ T30] kauditd_printk_skb: 240 callbacks suppressed [ 1347.543921][ T30] audit: type=1400 audit(1775734917.353:75125): avc: denied { bind } for pid=21871 comm="syz.2.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1347.626810][T12237] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1347.655849][ T30] audit: type=1400 audit(1775734917.373:75126): avc: denied { write } for pid=21871 comm="syz.2.4048" path="socket:[82720]" dev="sockfs" ino=82720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1347.700485][T12250] usb 5-1: device descriptor read/8, error -71 [ 1347.704861][ T30] audit: type=1400 audit(1775734917.373:75127): avc: denied { write } for pid=21871 comm="syz.2.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1347.738282][ T30] audit: type=1400 audit(1775734917.413:75128): avc: denied { ioctl } for pid=21872 comm="syz.1.4047" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1347.767622][ T30] audit: type=1400 audit(1775734917.413:75129): avc: denied { ioctl } for pid=21872 comm="syz.1.4047" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1347.839987][T12237] usb 2-1: config 1 has an invalid interface number: 188 but max is 0 [ 1347.854672][T12237] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.883863][T12237] usb 2-1: config 1 has no interface number 0 [ 1347.901842][ T30] audit: type=1400 audit(1775734917.233:75122): avc: denied { read write open } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1347.927656][T12237] usb 2-1: config 1 interface 188 has no altsetting 0 [ 1347.945532][ T30] audit: type=1400 audit(1775734917.443:75130): avc: denied { ioctl } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1347.979197][T12237] usb 2-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 1347.993501][T12237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.023583][ T30] audit: type=1400 audit(1775734917.443:75131): avc: denied { ioctl } for pid=21871 comm="syz.2.4048" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1348.048937][T12237] usb 2-1: Product: syz [ 1348.053099][T12237] usb 2-1: Manufacturer: syz [ 1348.066455][T12237] usb 2-1: SerialNumber: syz [ 1348.072353][ T30] audit: type=1400 audit(1775734917.453:75132): avc: denied { read write } for pid=21871 comm="syz.2.4048" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1348.072379][T12250] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1348.146775][ T30] audit: type=1400 audit(1775734917.453:75133): avc: denied { read write open } for pid=21871 comm="syz.2.4048" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1348.211902][T12250] usb 5-1: device descriptor read/8, error -71 [ 1348.222054][T21887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.245594][T21891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4052'. [ 1348.426558][T12250] usb usb5-port1: unable to enumerate USB device [ 1348.678450][T16798] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1349.158357][T16798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.186483][T16798] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.204748][T16798] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1349.246073][T16798] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.264918][T16798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.761816][T16798] usb 8-1: config 0 descriptor?? [ 1349.908174][T21902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1350.343031][T16798] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1350.795772][T21888] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4053'. [ 1351.648970][ C1] plantronics 0003:047F:FFFF.0018: usb_submit_urb(ctrl) failed: -1 [ 1351.748045][T21924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4058'. [ 1351.775163][T21924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4058'. [ 1351.786624][T17842] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 1352.068206][T17842] usb 8-1: device descriptor read/64, error -32 [ 1352.456563][T17842] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 1352.600312][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 1352.600365][ T30] audit: type=1400 audit(1775734922.443:75335): avc: denied { create } for pid=21932 comm="syz.4.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1352.668245][ T30] audit: type=1400 audit(1775734922.473:75336): avc: denied { write } for pid=21932 comm="syz.4.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1352.688440][T17842] usb 8-1: device descriptor read/64, error -32 [ 1352.716319][ T30] audit: type=1400 audit(1775734922.493:75337): avc: denied { read write } for pid=18959 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.857247][ T30] audit: type=1400 audit(1775734922.493:75338): avc: denied { read write open } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.916807][ T30] audit: type=1400 audit(1775734922.493:75339): avc: denied { ioctl } for pid=18959 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.956457][T17842] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 1353.003358][ T30] audit: type=1400 audit(1775734922.613:75340): avc: denied { read write } for pid=18448 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1353.036536][T17842] usb 8-1: device descriptor read/8, error -32 [ 1353.096488][ T30] audit: type=1400 audit(1775734922.613:75341): avc: denied { read write open } for pid=18448 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1353.210723][ T30] audit: type=1400 audit(1775734922.623:75342): avc: denied { ioctl } for pid=18448 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1353.645880][T17842] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 1353.668441][T17842] usb 8-1: device descriptor read/8, error -32 [ 1353.753055][ T30] audit: type=1400 audit(1775734922.703:75343): avc: denied { read write } for pid=21934 comm="syz.7.4062" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1353.799072][T17842] raw-gadget.2 gadget.7: failed to queue suspend event [ 1354.066453][ T30] audit: type=1400 audit(1775734922.703:75344): avc: denied { read write open } for pid=21934 comm="syz.7.4062" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1354.091497][T12235] usb 8-1: USB disconnect, device number 11 [ 1354.215762][T12235] raw-gadget.2 gadget.7: failed to queue reset event [ 1354.376508][T12235] raw-gadget.2 gadget.7: failed to queue resume event [ 1354.420555][ T5934] usb 2-1: USB disconnect, device number 95 [ 1354.436460][T12235] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1354.447757][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1354.463549][T12235] raw-gadget.2 gadget.7: failed to queue reset event [ 1354.557364][T12235] raw-gadget.2 gadget.7: failed to queue resume event [ 1354.626563][T12235] usb 8-1: device descriptor read/64, error -32 [ 1354.736626][T12235] raw-gadget.2 gadget.7: failed to queue suspend event [ 1354.800508][T12235] raw-gadget.2 gadget.7: failed to queue reset event [ 1354.803848][T21949] fuse: Unknown parameter 'group_i00000000000000000000' [ 1354.897284][T12235] raw-gadget.2 gadget.7: failed to queue resume event [ 1355.022706][T21952] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1356.051676][T21918] raw-gadget.2 gadget.7: failed to queue suspend event [ 1356.066520][T21918] raw-gadget.2 gadget.7: failed to queue disconnect event [ 1356.203068][T12235] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1356.262824][T21956] FAULT_INJECTION: forcing a failure. [ 1356.262824][T21956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.361019][T21956] CPU: 0 UID: 0 PID: 21956 Comm: syz.7.4067 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.361049][T21956] Tainted: [L]=SOFTLOCKUP [ 1356.361055][T21956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1356.361065][T21956] Call Trace: [ 1356.361071][T21956] [ 1356.361078][T21956] dump_stack_lvl+0x100/0x190 [ 1356.361112][T21956] should_fail_ex.cold+0x5/0xa [ 1356.361137][T21956] _copy_from_user+0x2e/0xd0 [ 1356.361159][T21956] ____sys_sendmsg+0x1d1/0xb70 [ 1356.361182][T21956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1356.361214][T21956] ___sys_sendmsg+0x190/0x1e0 [ 1356.361236][T21956] ? __pfx____sys_sendmsg+0x10/0x10 [ 1356.361288][T21956] __sys_sendmsg+0x170/0x220 [ 1356.361314][T21956] ? __pfx___sys_sendmsg+0x10/0x10 [ 1356.361356][T21956] do_syscall_64+0x106/0xf80 [ 1356.361373][T21956] ? clear_bhb_loop+0x40/0x90 [ 1356.361394][T21956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.361411][T21956] RIP: 0033:0x7fca2039c819 [ 1356.361426][T21956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.361441][T21956] RSP: 002b:00007fca211f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.361468][T21956] RAX: ffffffffffffffda RBX: 00007fca20615fa0 RCX: 00007fca2039c819 [ 1356.361479][T21956] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1356.361489][T21956] RBP: 00007fca211f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.361500][T21956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.361509][T21956] R13: 00007fca20616038 R14: 00007fca20615fa0 R15: 00007ffe03f12bf8 [ 1356.361533][T21956] [ 1356.686504][T16798] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1357.155540][T16798] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 1357.190733][T16798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.218929][T16798] usb 5-1: Product: syz [ 1357.242927][T16798] usb 5-1: Manufacturer: syz [ 1357.253622][T16798] usb 5-1: SerialNumber: syz [ 1357.295978][T16798] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1357.648441][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 1357.648458][ T30] audit: type=1400 audit(1775734927.493:75512): avc: denied { ioctl } for pid=21973 comm="syz.0.4072" path="socket:[83282]" dev="sockfs" ino=83282 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1357.860733][ T30] audit: type=1400 audit(1775734927.553:75513): avc: denied { create } for pid=21975 comm="syz.7.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1357.911598][T16798] gspca_spca501: reg write: error -71 [ 1358.013622][T12250] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1358.021411][T16798] spca501 5-1:68.0: Reg write failed for 0x02,0xa048,0x00 [ 1358.051422][T16798] spca501 5-1:68.0: probe with driver spca501 failed with error -22 [ 1358.091789][ T30] audit: type=1400 audit(1775734927.553:75514): avc: denied { create } for pid=21975 comm="syz.7.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1358.103655][T21979] can0: slcan on ttyS3. [ 1358.173892][T16798] usb 5-1: USB disconnect, device number 121 [ 1358.236643][T12250] usb 1-1: Using ep0 maxpacket: 32 [ 1358.245994][ T30] audit: type=1400 audit(1775734927.553:75515): avc: denied { write } for pid=21973 comm="syz.0.4072" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1358.275991][T12250] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.352362][T12250] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1358.432394][ T30] audit: type=1400 audit(1775734927.563:75516): avc: denied { write open } for pid=21973 comm="syz.0.4072" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1358.535827][T12250] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1358.598668][ T30] audit: type=1400 audit(1775734927.563:75517): avc: denied { create } for pid=21973 comm="syz.0.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1358.728057][T12250] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1358.766422][T12250] usb 1-1: Product: syz [ 1358.778241][T12250] usb 1-1: Manufacturer: syz [ 1358.826423][T12250] usb 1-1: SerialNumber: syz [ 1358.844344][T21977] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1358.851952][T21977] audit: audit_lost=5836 audit_rate_limit=0 audit_backlog_limit=64 [ 1358.851984][T21975] can0 (unregistered): slcan off ttyS3. [ 1358.860129][T21977] audit: backlog limit exceeded [ 1358.872116][T12250] appletouch 1-1:1.0: Could not find int-in endpoint [ 1358.896199][ T5472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1358.950448][T12250] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 1358.989023][T12250] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1360.337211][T17842] usb 1-1: USB disconnect, device number 110 [ 1361.060301][T22005] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 1361.086888][T22005] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1361.176486][T17842] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1361.332666][T22015] netlink: 'syz.7.4084': attribute type 21 has an invalid length. [ 1361.336470][T17842] usb 5-1: device descriptor read/64, error -71 [ 1361.340562][T22015] IPv6: NLM_F_CREATE should be specified when creating new route [ 1362.007530][T17842] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1362.157040][T17842] usb 5-1: device descriptor read/64, error -71 [ 1362.218403][T22030] kAFS: unable to lookup cell '' [ 1362.267670][T17842] usb usb5-port1: attempt power cycle [ 1362.600419][T22037] CIFS mount error: No usable UNC path provided in device string! [ 1362.600419][T22037] [ 1362.610523][T22037] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1362.710139][ T30] kauditd_printk_skb: 512 callbacks suppressed [ 1362.710156][ T30] audit: type=1400 audit(1775734932.533:76028): avc: denied { write } for pid=22033 comm="syz.7.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1362.746606][T17842] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1362.782906][T17842] usb 5-1: device descriptor read/8, error -71 [ 1362.789517][ T30] audit: type=1400 audit(1775734932.533:76029): avc: denied { connect } for pid=22033 comm="syz.7.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1362.832959][ T30] audit: type=1400 audit(1775734932.543:76030): avc: denied { name_connect } for pid=22033 comm="syz.7.4089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1362.892280][ T30] audit: type=1400 audit(1775734932.583:76031): avc: denied { ioctl } for pid=22001 comm="syz.4.4081" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1362.951129][ T30] audit: type=1400 audit(1775734932.603:76032): avc: denied { search } for pid=21983 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1363.006012][ T30] audit: type=1400 audit(1775734932.603:76033): avc: denied { search } for pid=21983 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1363.048250][ T30] audit: type=1400 audit(1775734932.603:76034): avc: denied { search } for pid=21983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1363.066510][T17842] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1363.108684][ T30] audit: type=1400 audit(1775734932.603:76035): avc: denied { search } for pid=21983 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1363.120508][T17842] usb 5-1: device descriptor read/8, error -71 [ 1363.194281][ T30] audit: type=1400 audit(1775734932.603:76036): avc: denied { search } for pid=21983 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1363.252910][ T30] audit: type=1400 audit(1775734932.603:76037): avc: denied { search } for pid=21983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1363.277816][T17842] usb usb5-port1: unable to enumerate USB device [ 1363.686865][T12235] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1363.856595][T12235] usb 8-1: Using ep0 maxpacket: 16 [ 1363.871722][T12235] usb 8-1: too many configurations: 80, using maximum allowed: 8 [ 1363.921444][T12235] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1363.948006][T12235] usb 8-1: can't read configurations, error -61 [ 1364.186495][T12235] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1364.378602][T12235] usb 8-1: Using ep0 maxpacket: 16 [ 1364.453611][T12235] usb 8-1: too many configurations: 80, using maximum allowed: 8 [ 1364.548545][T12235] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1364.598300][T12235] usb 8-1: can't read configurations, error -61 [ 1364.609253][T12235] usb usb8-port1: attempt power cycle [ 1364.947618][T22066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.976854][T12235] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1365.017683][T12235] usb 8-1: Using ep0 maxpacket: 16 [ 1365.037245][T12235] usb 8-1: too many configurations: 80, using maximum allowed: 8 [ 1365.065841][T22051] overlayfs: failed to resolve './file1': -2 [ 1365.088747][T12235] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1365.110448][T12235] usb 8-1: can't read configurations, error -61 [ 1365.261485][T12235] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1365.288137][T12235] usb 8-1: Using ep0 maxpacket: 16 [ 1365.311681][T12235] usb 8-1: too many configurations: 80, using maximum allowed: 8 [ 1365.380805][T12235] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1365.408043][T12235] usb 8-1: can't read configurations, error -61 [ 1365.435982][T12235] usb usb8-port1: unable to enumerate USB device [ 1365.917136][ C1] ------------[ cut here ]------------ [ 1365.923105][ C1] ODEBUG: free active (active state 0) object: ffff888026bd7490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1365.935986][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: sed/22079 [ 1365.945557][ C1] Modules linked in: [ 1365.949751][ C1] CPU: 1 UID: 0 PID: 22079 Comm: sed Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.960089][ C1] Tainted: [L]=SOFTLOCKUP [ 1365.964400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1365.974462][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1365.980288][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 0a e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1365.999905][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1366.005969][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1366.013947][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44d50 [ 1366.021925][ C1] RBP: 0000000000000001 R08: ffff888026bd7490 R09: ffffffff8bb2bba0 [ 1366.029906][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1366.037881][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cf1b0 R15: ffffc90000a08b38 [ 1366.045845][ C1] FS: 0000000000000000(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 1366.054781][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1366.061375][ C1] CR2: 00007fb0ac2cca10 CR3: 0000000079898000 CR4: 00000000003526f0 [ 1366.069360][ C1] Call Trace: [ 1366.072632][ C1] [ 1366.075465][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1366.081123][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1366.086961][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1366.092525][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1366.098615][ C1] ? mark_held_locks+0x40/0x70 [ 1366.103375][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1366.108769][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1366.113982][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1366.119115][ C1] kfree+0x38f/0x6b0 [ 1366.123025][ C1] rose_timer_expiry+0x53f/0x630 [ 1366.127986][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1366.133451][ C1] call_timer_fn+0x19a/0x670 [ 1366.138062][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1366.143181][ C1] ? __run_timers+0x747/0xb30 [ 1366.147876][ C1] ? rcu_is_watching+0x12/0xc0 [ 1366.152646][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1366.158115][ C1] __run_timers+0x757/0xb30 [ 1366.162630][ C1] ? __pfx___run_timers+0x10/0x10 [ 1366.167681][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1366.172718][ C1] run_timer_base+0x114/0x190 [ 1366.177416][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1366.182625][ C1] run_timer_softirq+0x1a/0x50 [ 1366.187407][ C1] handle_softirqs+0x1eb/0x9e0 [ 1366.192177][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1366.197482][ C1] __irq_exit_rcu+0xef/0x150 [ 1366.202073][ C1] irq_exit_rcu+0x9/0x30 [ 1366.206317][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1366.211993][ C1] [ 1366.214928][ C1] [ 1366.217882][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1366.223874][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1366.230320][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 e8 50 f6 48 89 df e8 3e 38 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 59 41 f6 65 8b 05 5e 4e 7a 08 85 c0 74 16 5b [ 1366.249945][ C1] RSP: 0018:ffffc9000d17f980 EFLAGS: 00000246 [ 1366.256014][ C1] RAX: 0000000000000006 RBX: ffffffff9b364d28 RCX: 0000000000000000 [ 1366.263992][ C1] RDX: 0000000000000000 RSI: ffffffff8de7af65 RDI: ffffffff8c1b1ea0 [ 1366.271972][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 1366.279952][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1366.287927][ C1] R13: 0000000000000200 R14: 0000000000000286 R15: 00000000000001f0 [ 1366.295906][ C1] avc_alloc_node+0x3f5/0x670 [ 1366.300600][ C1] ? avc_alloc_node+0xe0/0x670 [ 1366.305363][ C1] avc_compute_av+0x101/0x820 [ 1366.310055][ C1] avc_perm_nonode+0xb1/0x180 [ 1366.314731][ C1] ? __pfx_avc_perm_nonode+0x10/0x10 [ 1366.320033][ C1] ? find_held_lock+0x2b/0x80 [ 1366.324718][ C1] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 1366.330100][ C1] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 1366.335478][ C1] avc_has_perm_noaudit+0x2d4/0x3b0 [ 1366.340689][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1366.346067][ C1] avc_has_perm+0xbd/0x1e0 [ 1366.350497][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 1366.355528][ C1] inode_has_perm+0x166/0x1d0 [ 1366.360219][ C1] selinux_inode_getattr+0x26e/0x510 [ 1366.365503][ C1] ? __pfx_selinux_inode_getattr+0x10/0x10 [ 1366.371322][ C1] ? vfs_read+0x486/0xb30 [ 1366.375652][ C1] security_inode_getattr+0x138/0x280 [ 1366.381042][ C1] vfs_fstat+0x4b/0xe0 [ 1366.385112][ C1] __do_sys_newfstat+0x8b/0x110 [ 1366.389976][ C1] ? __pfx___do_sys_newfstat+0x10/0x10 [ 1366.395449][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1366.400228][ C1] do_syscall_64+0x106/0xf80 [ 1366.404820][ C1] ? clear_bhb_loop+0x40/0x90 [ 1366.409509][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.415397][ C1] RIP: 0033:0x7fb0ac5f8e87 [ 1366.419830][ C1] Code: 00 00 00 b8 15 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 28 44 01 00 b8 ff ff ff ff c3 66 90 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 08 44 01 00 b8 ff ff ff ff [ 1366.439455][ C1] RSP: 002b:00007ffc48e01558 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 1366.447889][ C1] RAX: ffffffffffffffda RBX: 00007fb0ac5ceab0 RCX: 00007fb0ac5f8e87 [ 1366.455860][ C1] RDX: 0000000000000003 RSI: 00007ffc48e015f0 RDI: 0000000000000003 [ 1366.463840][ C1] RBP: 00007ffc48e016b0 R08: 00007fb0ac2d0690 R09: 00007fb0ac5ceab0 [ 1366.471826][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.479813][ C1] R13: 0000000000000000 R14: 00007ffc48e01750 R15: 0000000000000000 [ 1366.487818][ C1] [ 1366.490839][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1366.498115][ C1] CPU: 1 UID: 0 PID: 22079 Comm: sed Tainted: G L syzkaller #0 PREEMPT(full) [ 1366.508439][ C1] Tainted: [L]=SOFTLOCKUP [ 1366.512753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1366.522800][ C1] Call Trace: [ 1366.526079][ C1] [ 1366.528916][ C1] dump_stack_lvl+0x100/0x190 [ 1366.533603][ C1] vpanic+0x552/0x970 [ 1366.537585][ C1] ? __pfx_vpanic+0x10/0x10 [ 1366.542095][ C1] panic+0xd1/0xe0 [ 1366.545815][ C1] ? __pfx_panic+0x10/0x10 [ 1366.550238][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1366.555350][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1366.560726][ C1] ? debug_print_object+0x18e/0x2a0 [ 1366.565933][ C1] __warn.cold+0x191/0x348 [ 1366.570351][ C1] __report_bug+0x296/0x3d0 [ 1366.574859][ C1] ? debug_print_object+0x18e/0x2a0 [ 1366.580059][ C1] ? __pfx___report_bug+0x10/0x10 [ 1366.585067][ C1] ? lock_acquire+0x1cf/0x380 [ 1366.589722][ C1] ? mark_held_locks+0x40/0x70 [ 1366.594467][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1366.600271][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1366.605451][ C1] report_bug_entry+0xe1/0x290 [ 1366.610197][ C1] ? debug_print_object+0x19b/0x2a0 [ 1366.615378][ C1] handle_bug+0x1cd/0x2a0 [ 1366.619689][ C1] exc_invalid_op+0x17/0x50 [ 1366.624179][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1366.629012][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1366.634822][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 0a e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1366.654406][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1366.660457][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1366.668404][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44d50 [ 1366.676349][ C1] RBP: 0000000000000001 R08: ffff888026bd7490 R09: ffffffff8bb2bba0 [ 1366.684292][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1366.692237][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cf1b0 R15: ffffc90000a08b38 [ 1366.700185][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1366.705815][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1366.711454][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1366.717271][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1366.722836][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1366.728916][ C1] ? mark_held_locks+0x40/0x70 [ 1366.733680][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1366.739061][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1366.744271][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1366.749384][ C1] kfree+0x38f/0x6b0 [ 1366.753292][ C1] rose_timer_expiry+0x53f/0x630 [ 1366.758245][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1366.763705][ C1] call_timer_fn+0x19a/0x670 [ 1366.768305][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1366.773416][ C1] ? __run_timers+0x747/0xb30 [ 1366.778087][ C1] ? rcu_is_watching+0x12/0xc0 [ 1366.782854][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1366.788312][ C1] __run_timers+0x757/0xb30 [ 1366.792817][ C1] ? __pfx___run_timers+0x10/0x10 [ 1366.797841][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1366.802847][ C1] run_timer_base+0x114/0x190 [ 1366.807519][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1366.812726][ C1] run_timer_softirq+0x1a/0x50 [ 1366.817484][ C1] handle_softirqs+0x1eb/0x9e0 [ 1366.822238][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1366.827525][ C1] __irq_exit_rcu+0xef/0x150 [ 1366.832123][ C1] irq_exit_rcu+0x9/0x30 [ 1366.836353][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1366.841975][ C1] [ 1366.844911][ C1] [ 1366.847828][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1366.853784][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1366.860188][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 e8 50 f6 48 89 df e8 3e 38 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 59 41 f6 65 8b 05 5e 4e 7a 08 85 c0 74 16 5b [ 1366.879784][ C1] RSP: 0018:ffffc9000d17f980 EFLAGS: 00000246 [ 1366.885834][ C1] RAX: 0000000000000006 RBX: ffffffff9b364d28 RCX: 0000000000000000 [ 1366.893781][ C1] RDX: 0000000000000000 RSI: ffffffff8de7af65 RDI: ffffffff8c1b1ea0 [ 1366.901737][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 1366.909698][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1366.917651][ C1] R13: 0000000000000200 R14: 0000000000000286 R15: 00000000000001f0 [ 1366.925603][ C1] avc_alloc_node+0x3f5/0x670 [ 1366.930260][ C1] ? avc_alloc_node+0xe0/0x670 [ 1366.935019][ C1] avc_compute_av+0x101/0x820 [ 1366.939692][ C1] avc_perm_nonode+0xb1/0x180 [ 1366.944363][ C1] ? __pfx_avc_perm_nonode+0x10/0x10 [ 1366.949648][ C1] ? find_held_lock+0x2b/0x80 [ 1366.954321][ C1] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 1366.959692][ C1] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 1366.965064][ C1] avc_has_perm_noaudit+0x2d4/0x3b0 [ 1366.970258][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1366.975618][ C1] avc_has_perm+0xbd/0x1e0 [ 1366.980021][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 1366.985052][ C1] inode_has_perm+0x166/0x1d0 [ 1366.989711][ C1] selinux_inode_getattr+0x26e/0x510 [ 1366.994971][ C1] ? __pfx_selinux_inode_getattr+0x10/0x10 [ 1367.000761][ C1] ? vfs_read+0x486/0xb30 [ 1367.005078][ C1] security_inode_getattr+0x138/0x280 [ 1367.010452][ C1] vfs_fstat+0x4b/0xe0 [ 1367.014516][ C1] __do_sys_newfstat+0x8b/0x110 [ 1367.019347][ C1] ? __pfx___do_sys_newfstat+0x10/0x10 [ 1367.024817][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1367.029569][ C1] do_syscall_64+0x106/0xf80 [ 1367.034137][ C1] ? clear_bhb_loop+0x40/0x90 [ 1367.038799][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.044669][ C1] RIP: 0033:0x7fb0ac5f8e87 [ 1367.049073][ C1] Code: 00 00 00 b8 15 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 28 44 01 00 b8 ff ff ff ff c3 66 90 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 08 44 01 00 b8 ff ff ff ff [ 1367.068671][ C1] RSP: 002b:00007ffc48e01558 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 1367.077065][ C1] RAX: ffffffffffffffda RBX: 00007fb0ac5ceab0 RCX: 00007fb0ac5f8e87 [ 1367.085029][ C1] RDX: 0000000000000003 RSI: 00007ffc48e015f0 RDI: 0000000000000003 [ 1367.092977][ C1] RBP: 00007ffc48e016b0 R08: 00007fb0ac2d0690 R09: 00007fb0ac5ceab0 [ 1367.100926][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.108892][ C1] R13: 0000000000000000 R14: 00007ffc48e01750 R15: 0000000000000000 [ 1367.116873][ C1] [ 1367.120151][ C1] Kernel Offset: disabled [ 1367.124464][ C1] Rebooting in 86400 seconds..