last executing test programs: 32m34.624043048s ago: executing program 32 (id=139): syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1100, 0x5cc}, &(0x7f0000000300), &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) chdir(&(0x7f0000000140)='./file1\x00') openat$sysfs(0xffffffffffffff9c, 0x0, 0x88102, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 27m0.015173817s ago: executing program 33 (id=1099): r0 = syz_open_dev$sg(&(0x7f0000000240), 0x2, 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3c7e5899894fe3d350dedcad07ad000000000000000001000000000000000241000000000013"], 0x2c}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003140), 0x800) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x500) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = getpid() syz_pidfd_open(r6, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000100)={0x0}) eventfd(0x38eadf01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) unshare(0x20000480) pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xfffffffd, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffffc, 0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 21m39.490801811s ago: executing program 34 (id=2245): socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="1b0000001a005f0400f9", 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c000000100003042dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001000008a600004400128009000100766c436e000000003400028006000100010000002800038000200100ff7f0000001000000c000100ff000000010000000c000100ff7f00000000000008000500", @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x1, 0x0, 0x0, 0xdff, 0x38, 0x0, 0x8, 0x4}) 20m33.572682319s ago: executing program 5 (id=2506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xe, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xb, &(0x7f0000000180)={0x4}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000340)={0x80}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x8020000) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r11, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) sendmmsg$inet6(r11, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="7c000a1000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002fd800500010000000000080007400000000018000d8006000100640101000c000380060002004e2300"], 0x7c}}, 0x0) 20m32.442941142s ago: executing program 5 (id=2508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x20002, 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x20002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, &(0x7f0000000880)={0x5, 0x7, 0x2, 0x7, 0x6, 0xc, 0x4, 0x1, 0x4, 0x7, 0x10, "1287c9b430e6d3cef51d7212f580b2d858f5c1d25e8b508758677f17fe3e1080"}) r5 = syz_io_uring_setup(0x5cf0, &(0x7f0000000780)={0x0, 0x9880, 0x1, 0x3, 0x21f}, &(0x7f0000000400), &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x43, 0x80300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x12, r7, 0xd0678000) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000200), 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, 0x0, 0x0) 20m31.879780928s ago: executing program 5 (id=2514): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000003740)={0xb8, 0x0, r6, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r7, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x4}, 0x6) sendmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x340}}, {{0x0, 0x0, &(0x7f0000003140)}}], 0x2, 0xc0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) 20m30.895017224s ago: executing program 5 (id=2519): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@noextend}]}}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000480), 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB='noswap,grpquota_block_hardlimit=g5k,nr_blocks=4257,huge=never,smackfsdef=wfdno,fscontext=unconfined_u,euid=', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f6d6561730a72652c61707072616973652c66736e616d653d942c00"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) sendmsg$sock(r4, &(0x7f0000000240)={&(0x7f0000000080)=@un=@file={0x1, './file0/../file0\x00'}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)="a226bddbb97938e1c5cd02b31d5889d41de2631ba5ff834469a941019a704a51737c90c9793965bca69c581718fe53f3a6632378a3e79c4dcf8db48e68f2c83ce10c078aeda36b8e9fec2294e1579244389674cc4a2ccd9e13b9caf4aa926d3a4042c8a58dde", 0x66}], 0x1}, 0x40000) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) setxattr(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00', &(0x7f0000000680)='\x00', 0x1, 0x6) write$binfmt_script(r4, &(0x7f0000000780)={'#! ', './file0', [{0x20, 'noextend'}], 0xa, "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"}, 0x1014) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r7, r8, 0x0, 0x2000000e3aa6ea) close(r6) 20m29.358788861s ago: executing program 5 (id=2523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x2, r0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 20m28.808815073s ago: executing program 5 (id=2527): syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], @ndisc_rs}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r1, 0x1, 0x30}, &(0x7f00000002c0)=0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000c3000000040000000200000030400000", @ANYRES32=r3, @ANYBLOB="09000000000000000000000000000018c26ee708", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0100000002000000000000000c00"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20m28.410773085s ago: executing program 35 (id=2527): syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], @ndisc_rs}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r1, 0x1, 0x30}, &(0x7f00000002c0)=0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000c3000000040000000200000030400000", @ANYRES32=r3, @ANYBLOB="09000000000000000000000000000018c26ee708", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0100000002000000000000000c00"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18m51.906579851s ago: executing program 4 (id=2863): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x0, 0x100b, 0x0, @discrete={0x10}}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x22000, 0x0) io_setup(0x9, &(0x7f0000000100)) sendmmsg$unix(r4, &(0x7f0000009b80)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000480)="9ba3abf9e0e6da49c81f2cf235b0700b351ee07d3e04b89aa740a6c96d64af325446b6751d521fc5323f71852386f172d26f5ab6fa6c5f0b0b7c8b92fc4652f0e714eac9bce0510a4c8a8b0e0a6b688e44b492d55311b66c6a1225b890a3813b3a2a18d28bf3d23f7924b90e8ea5e851c7e9a85bcabc3a9980691d34df07c9d3f9359ab4756ce8d48a88f171526df670fe93848ca6356f7eb927", 0x9a}, {&(0x7f0000000540)="030dd8b5c9e6bbf00d59722282e5fb0981eb95eec420e39eae3c26eccd465a5e59c22db392ffd429ac86f299c7eac57c87f61b45e253dda08ee06b8b1025406d4d3326ae1494a9905c03edfb6b2b99e700f2e1001e144ddb340c3f47eebaf6356b306193222787bb0eee061ae5ac365b43e5de0b91e807fe9db532f3d6aaacee5c38a06561f1bb917369125fcff2129f045d942b55b6b0334680939908a12fe78a0f086b7ec2d1bd1592b1ce97675012c35fd453862469100fb11fa3089994d7dddebb8b452cd452d7deee30b9b7777185339199ed278aed14e279", 0xdb}, {&(0x7f0000000640)="9bae0a3e6306906c15aa2c9f036b34c8f43cb9239a5ff4654c0cec9a19e11aed31fa1ca564d45650c1d0bd3b0cfd203bf6371dcf249b77a2cf75dd1cc832b238487caeb05d88c6b6183c23ac144ebf04f4e4321720b01c6a6bd5efa4cbba6c4743fd5e9eb3d131ddf67d428440fa03fcf094a8d45816891ae2b12122e3b9d22eee463144843a7966df2da7ef485096aa540bf2b889393ce8b0255e74d17d351f6bb1fabd0760e374a206dcf08c8befaf1338bc7b316f173306a7022a0f25cc621defbd", 0xc3}, {&(0x7f0000000740)="7dcc2a23b968e90148a345dbe06af6e3b546e2feaf4a4221dacc85319002648ded2d650fda7d15ced55cdf4b4cfb31db50786c46d7fb65e0a28c26d22780a0f1a4f9a4167f1128cb78c7", 0x4a}, {&(0x7f00000007c0)="c71eb411dcf7a0b8370b6cf9797d86110d3551cb5e7872c47c3e9b1d541849cda7983713cf747ade4ce0f54ee8259f92e78b5f35f80beca9bd249206ab6de330241c465c513e0aad75190abfbe977970d84d8f2fd691434cdcaa05bd78a2b82a0f4da49bab4d71b93c94772089d7f3a2808a22fd440aef0b", 0x78}], 0x5, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r5, r1, r2, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}], 0x58, 0x4044080}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="aa6b20f8aadb33fc3760e0cb1f574012b4879151ba3e29876a8430dba49345bab4e1e213647283a284d3d4d64a809c6051d532d3dcd50561fc82db7dfeef1efe6e83cbf7531a1e4d1ea13810532fc552eadeff928f6dc4339d115d25604efc5d573a508efde785790a5329613dbba8a19f77b5ad66721dce6d119126908ab2f9e1c0ab79c82ef854600003934c55b1ddabf72148db88", 0x96}, {&(0x7f0000000a80)="fa932ab30f9be7cfef3490205071f5f8978516f379f0b94ff3a915371035e1e26eff3c483c06394de15278127f3a1fa21d3226c25bf4d4784722c9a3f1b142670f54cbd4803d7b4770a1aeb557f56498c64e", 0x52}, {&(0x7f0000000bc0)="93011f927544817d35ee55dd7026d02e39744cafa78fb74a1e09ddbe96d24ae2d97271731a7e8ce425534cc6ef760b468e638889381dfb97da3edec43ef984e340531cb0bddebc000b13ee97fc0b426a5b99762f7b75c69205164744e8354c7b35b4f45cfa3d4eba257891dd3fe1efe70e14bb7dffeab5c0d10717edea25935f8ec77eafbc554da86041be4e4856e3234866b06705f20ebc15558380f74757c7fa0742ad37b61031bee96be22224b1662df922799ddad579de9c0b2d11a40d73fc650e951d92bdaa59e4d1214b790302f625b4dc73a52a50524337e178f66163818bcee19022e6899f52e17e8c", 0xed}, {&(0x7f0000000b00)="89f2dc833f75d499ac9bd86da6d04e", 0xf}], 0x4, &(0x7f0000000d40)=[@rights={{0x28, 0x1, 0x1, [r3, r0, r3, r4, r0, r5]}}, @rights={{0x34, 0x1, 0x1, [r5, r1, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r4]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r5, r1]}}], 0x88, 0x8c0}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000000e80)="7c0fb0ebbf97b5b55e6e4fff76e441ea65aca7741cb5e30d55e142c269dccd154f542cfcfe08", 0x26}, {&(0x7f0000000ec0)="a4b0f69a6c596f16471af00bbe24da42c9538b3c593b89e794ed18679b03613ba2764c81aa15c605d9cf7453e4d2634a239461a45ee543ef727592a1330597ee06b493dc2d508b3dbf75e5d7ad9399cd84a0de56bc733c692f3d846a680aeaa518763f7be6cfce74f1eb7ff801ef8d1e78d3d663535f005bd76a87ae886b55cda37e52a866ad39040fe27049fbd5d59291bf89a62ecb4441860dc7bfe0489b8e53a03ee1350235cd350b1760", 0xac}, {&(0x7f0000000fc0)="0de58225f565814fc7d348a05c561858a0f790aade59b00004fd9e84c173e5cd7aef0a9d11776a51456296dccbce910fde0adb929d2ecce3c2856e13a45f60da4968a8a644ce301d44144ddba0f90a2c1305c5c49dcac84498e47fac0f1a7992bef04b01addc600e989d96eeca7c7297e804a607a3567b7d8cd93e1f765190dd0c7c91efbc394e04259ccc5b477fcb3fc34ab93c3cef54b76c2b4ee8900c9dfc55a6aeef270e6e9d9330021d0b170fb38565d411f7edb83836abc9e1af75e9ee47e4ea49c34443f8e5f56ecdc409de983736c4b9801bb65c8c9815b0cca979343f082a1e786b339b82", 0xe9}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="43b8abecdb653cf09612d9d2bdde093bb68c9a6e095d43588288cf5eac6e41954744db6810f3307df6cb43368f1f61f641ce0784241f08df93010d0c89574103bb72d029a6e4f5f4952a38ddff4195bb3893846d48b18a805c0bd81d8ff170ca0d0b83174ae5ef966112a541bfc1ca2267bfc701478740916d1d323d1b375952a0cbf86024d9", 0x86}], 0x5, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r5, r2, r0, 0xffffffffffffffff]}}], 0x68, 0x850}}, {{&(0x7f0000002380)=@file={0x0, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000002400)="5439a2bf2db8259b1c2be5d7ef2d9227350e62396a079d912f4ef8b9a46f7d92a3eae9d0148521f2d00223226ad33324d0cb316be2a52d76a202aefa1112678b6c8dfb908a97691d46f012b089f095ca386ae798831cdbb5078f8d188a0d8f1f8ef629a6245ad1ddc8aaa028dbf6874c58eef09bc4f730279ebd88e1ca294666c73bb39dbd169d4a852066137f2c33268c29d8166c687ceb8fc8669f6487b5d9d50b3d4e24b1e0a149e2e4e2e2c477678bbaacaf3f85a5b64d69b1b80cbb07279e19b2990b1f8216596ff3f2f634c450bbc5f64f8bd5a34f19ecd5", 0xdb}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="c16c34dbacc8e107a3a9c69c77c91ed0b6a1d6f311d1aaaba7ab40839e9f536bc4dbbaed74ed15efca6e985c", 0x2c}, {&(0x7f0000003540)="0cc9cf15e61256bf4ef888382bef9dabaea2f6883ec44b647e2df5baf2e8da068cb35a47b25d7d9ecdb69f771ff19228b96d44df2645e2312ead261c1a0c7f4cc5dae22584bfd6ecc266c2022a8e92526a19b25d07112210d561a119c97f502cacf263e0d32e76932997fe5e96dd210ffc457399f2a657459e8838db96a301facc8beb73483bcf1d658caf86f5fa94f0bf2237eacfd920caf6d93a91704c9c0b162449eea13c02ed10255a39d3b1670b564f", 0xb2}, {&(0x7f0000003600)="e626f2e9c262dee45c3428b4d33b6a9e7da377e87c3549b832eb6b1b656e2a", 0x1f}, {&(0x7f0000003640)="4751913ad92fbfc4526e04c8c57078a1a58121978a72e6e69fce84e69f74161110f408786c1a7115afe169c5cf5141473c8ef7d1d15a373346e753c6196b70cf13ff163c3804926354b5497bf6b48c89deef5bc424ea05832991a8f3f072aaadae6f6b3c163b6ca0915cf0e1a8f9cc6f0f339a1486e5d393c350abc239352e323acbadac25d34e2fbd8c43adc244099e9b90e75b8673f60fb4aa84c8bfc4e1f738ec0a", 0xa3}, {&(0x7f0000003700)="4e8821594da98f9ceb05e79c4e844c3a2e4c68dc4421af80d32b60a87251c2f195af6b12d80b6436d5e130569a27c6b89146aa111916f35ef1be96d80373a6a379b1f4e63392a59c9d3613ee957801e09f6bf882a74efde6b8dc0bd22be62dc9afe02d0a090c40df076ae1e28f30e1c79c37", 0x72}], 0x7, &(0x7f0000003980)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000039c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003a40)="aa11f1446266a60e8145a7", 0xb}, {&(0x7f0000008280)="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", 0x1000}, {&(0x7f0000003a80)="a6881d8828c131e468fd86ca459ff8ddcc883f81167382163e130b062c02f0c0abf0f6f2bd07f9b70b4ebe5b145ddf10f3cf0f8f3116eb6ccec834c05f84faf0a532d3023f6c0ee9", 0x48}], 0x3, &(0x7f0000003cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x58, 0x20044050}}, {{&(0x7f0000009280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009500)=[{&(0x7f00000093c0)="df017c1eeacb82ab424b48e2a761226c3e90896abdf6aad45b2af4f411be783267439ba55bde3053e44327b3a525fe155a5a59a7fb704d5309795b6a17d59ba4c865bb344c55abf9ad", 0x49}, {&(0x7f0000009440)="49b8a92ea43f232a4ca5dc1a8b4fa93d4fc271fd27fd8b28ea6161510986a016d5553abf12f35403180c85b043a79ba1c9af5f679a4055f1a1d933e64271ab3d31081e2b0919a275c45dddd08c98a47835d6c35e88c5e78b4dfddf6676b47080ae5e691afe0082bb0a090986998bd5c5855427301e804a55a8b1220596730ef2583dddab13a50955b014c83c16c64c32", 0x90}], 0x2, &(0x7f0000009640)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90, 0x8001}}, {{&(0x7f0000009700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009ac0)=[{&(0x7f0000009780)="c46041aa37be7247c68ea87726fd7ff860c4af360b5582c37b9d6153527bd988123806a16075a593ee1b", 0x2a}, {&(0x7f00000097c0)="87af60af4b53c98e76f24066f8e866623325c97e0a784c2d55c39622a74d2cf9dadaa8a45af3", 0x26}, {&(0x7f0000009800)="675697183043471c635cb9dbea657ecc3a2da3a55a4f20c56a5f3c4024884ab8090a03854e3ab93bbec2c9cb7eae2226120516f959ca651a164e3ffbef5aa114b1b5970c194ea81628bfc75bccade160ee1d2fb6ee8ed63d9f2a302507d8", 0x5e}, {&(0x7f0000009880)="ed290956b242010922a88283ec5a7bd2aa1d1e5b4756fc7ad216dd614de972684b03c64238d23fa9465b7a1cd50219d4690b202b1fd96f2bc51fc18c12773ac30986de6b98dd9a4e0b0da911dc09f29bd7bd6d42166c2ffe7e7a6d9e916da8bb9a4451b692d8884f897e00db848c451494b7d0a17960d72c1c2faed9d050bfdd3fd4440cbf5c5a6ef1d15a8884d2ada2fb59096eadc43f03b1622283ae23f1b44c5c09339b2ad940505d14dba2c40b7866571ad33a4c50a3fce88ea070baa5fd59adedfa030042cb01d24b327cc627641cb00cdafe4f8278d58815fd2e40db7c0c", 0xe1}, {&(0x7f0000009980)="bd4e42ba0f90a641f6738bc91c9d64c2c5", 0x11}, {&(0x7f00000099c0)="fd0d9b7448e3a00e7a72f8863bf646bd629b59d404479e4d23d4ac236f9f419b85391445a6346fb6fc702dd4f264e0f971a44b53c729f67ff11182a48b01cc9678a38db9e67c2e34faf04ba2ba8302c53abc47c75faa846151414e54eaf7bdf788ac52a26a42757e2fc947cd93bce41be7ecb59998c75167e6372145c5e83ba0a3f2aeddf6439cf6db18da39c3521c7e913e2a5079ef92e0007620cbfa14bae5767265abd1f1052aec1224d0c091b869c812a3cdba6c95387bda04815998aad1a1150c4be6f847cef404b96d25b625d8b535ee2f00e65f39eb74cb70208aafa37b4c2614c1f3b867ca159972", 0xec}], 0x6, &(0x7f0000009b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0xc1d0}}], 0x7, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a4000000000090002"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0xb8}}, 0x20008401) 18m50.045105961s ago: executing program 4 (id=2869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x40000000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) creat(0x0, 0x180) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18m47.990938142s ago: executing program 4 (id=2875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f00000001c0)='stack\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x10004) 18m45.413430103s ago: executing program 4 (id=2889): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r3, 0x8, 0x0, &(0x7f0000000280)) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1ffffffffffffd12, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) 18m42.255891119s ago: executing program 4 (id=2904): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x83f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r6, 0x0, 0xb9b}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0015c3"], 0x0, 0x0}) syz_open_dev$I2C(0x0, 0x1, 0x402) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = gettid() sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x10b85, 0x49060}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 18m42.087465285s ago: executing program 4 (id=2908): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$int_in(r2, 0x5452, &(0x7f0000002400)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) semget$private(0x0, 0x4, 0x11) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cf30203001a000000", 0x33a) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 18m41.892387264s ago: executing program 36 (id=2908): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$int_in(r2, 0x5452, &(0x7f0000002400)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) semget$private(0x0, 0x4, 0x11) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cf30203001a000000", 0x33a) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 13m58.81075802s ago: executing program 3 (id=3973): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @empty, 0xe}}, 0x24) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)={'a', ' *:* ', 'rwm\x00'}, 0xa) socket$rxrpc(0x21, 0x2, 0x2) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x20050800) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x90082, 0x0) 13m55.112005799s ago: executing program 3 (id=3986): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "92cfa7870c6144fc4b4def9bd63bba807f2915877d5484f5b685780587e559e2e1003022a806b90945e3e06e52f3c265d40963e3329b6735b2fbb169356db79d"}, 0x48}, 0x2, 0x0, 0x0, 0x40080}, 0x4040854) 13m54.594162717s ago: executing program 3 (id=3988): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r0, &(0x7f00000000c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '&'}, 0x19, r1) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) keyctl$chown(0x4, r1, r3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000001c0)={0x8, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000200)={0x0, r4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x4, 0x0, 0x4000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x78}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r5 = syz_open_dev$dri(&(0x7f0000000380), 0x2, 0x6a000) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xe) (async) keyctl$negate(0xd, r0, 0xffffffffffffffff, r1) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000003c0)={0x20, r2}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000480)={0x3, r6, 0x8, 0x7fffffff, 0x5, 0x3, 0x80000001}) r7 = syz_clone3(&(0x7f0000001600)={0x1003000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x2f}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/30, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r2}}, 0x58) r8 = syz_open_procfs(r7, &(0x7f0000001680)='attr/prev\x00') (async) bind$alg(r2, &(0x7f00000016c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r9, 0x89e0, &(0x7f0000001740)={0x1}) r10 = open$dir(&(0x7f0000001780)='./file0\x00', 0x844100, 0xe0) name_to_handle_at(r10, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)=@ocfs2_parent={0x18, 0x2, {{0x9, 0x0, 0x6}, {0x7, 0x8, 0x9}}}, &(0x7f0000001840), 0x1200) sysinfo(&(0x7f0000001880)=""/226) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000001980)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000019c0)=0x90000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000001a00)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001ac0)={0x3, 0x0, &(0x7f0000001a80)=[0x0, 0x0, 0x0]}) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r2) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r12, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40408c4) 13m53.979634881s ago: executing program 3 (id=3991): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$usbmon(0x0, 0x6a2, 0x20000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) listen(r2, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) 13m50.737476007s ago: executing program 3 (id=4001): syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], @ndisc_rs}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r1, 0x1, 0x30}, &(0x7f00000002c0)=0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4000000020001) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000c3000000040000000200000030400000", @ANYRES32=r3, @ANYBLOB="09000000000000000000000000000018c26ee708", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0100000002000000000000000c00"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m50.625773856s ago: executing program 3 (id=4002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@multicast, @random="8a6274485194", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x3, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = creat(&(0x7f0000001000)='./file0\x00', 0x10c) (rerun: 64) r4 = dup(r3) (async) pipe2$9p(&(0x7f00000046c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) vmsplice(r6, &(0x7f0000011240)=[{&(0x7f0000011180)="ad", 0x1}], 0x1, 0x1) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m35.876594933s ago: executing program 7 (id=4066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) fcntl$lock(r1, 0x26, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f) 13m35.144847039s ago: executing program 37 (id=4002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@multicast, @random="8a6274485194", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x3, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = creat(&(0x7f0000001000)='./file0\x00', 0x10c) (rerun: 64) r4 = dup(r3) (async) pipe2$9p(&(0x7f00000046c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000004640)='./file0\x00', &(0x7f0000004680), 0x40, &(0x7f0000004700)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) vmsplice(r6, &(0x7f0000011240)=[{&(0x7f0000011180)="ad", 0x1}], 0x1, 0x1) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m34.939561425s ago: executing program 7 (id=4069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) ioctl$NBD_DO_IT(r1, 0xab03) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) 13m31.518393018s ago: executing program 7 (id=4084): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e9982, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r3, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r3}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008002dd9ac1414bb0c0001800800014064010102050014000200000005000500020000000500010006"], 0x6c}}, 0x0) kexec_load(0xfffffffffffffffd, 0x2, &(0x7f00000002c0), 0x280000) 13m30.952033042s ago: executing program 7 (id=4088): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000060a010400000000000000000a0000010900010073797a3100000000100004800c000180080001009b8d636d70000900020073797a3200000000140000001100010000000000000000000100"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x30) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xffffffffffffff4c}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) socket$isdn(0x22, 0x3, 0x3) (async) ioctl$I2C_TIMEOUT(r3, 0x702, 0x66a0) (async, rerun: 32) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x8) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r5, 0x0, 0x13) (async) ioctl$TIOCPKT(r5, 0x5420, 0x0) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x60000000}) 13m30.696020277s ago: executing program 7 (id=4091): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13m30.080080986s ago: executing program 7 (id=4094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) ioctl$NBD_DO_IT(r1, 0xab03) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) 13m29.419181951s ago: executing program 38 (id=4094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) ioctl$NBD_DO_IT(r1, 0xab03) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) 8m18.051571133s ago: executing program 0 (id=5141): socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, 0x0, 0x10000, 0x6b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060102000000000000000000000005050004000100000011000300686173683a6e65742c6e6574000000000c00078005ed1300000000006e2e104faf3cb28e05000a00000005000100060000000900020073797a32000000000000000000"], 0x58}}, 0x4000000) r2 = gettid() timer_create(0x74cf6a457b489991, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r3 = socket(0x6, 0x4, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="cfb14e407d33ffffffffffff86dd697a262d00383afefe8000000000000000000000000000aaff0263a92296b5fa2b0addf2b5c1d8890f2d00000000000000000000000000010200000000008005620813310009ff0000000000000000000000000000b39711cf993fbaad6a48fbe8000001000000000000000000000000000000013b000a1865000000f2e11603dfe922c53b1fa857d2df96080242d6727e759333fda9a5ced02befe2069e7a6b7a5925d1f727c8ac9a60ab030681b05361a72a62f47432eea9407f04c57b3c1a110f1682a206000000d568280aa88c"], 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090f26027000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 8m16.667742096s ago: executing program 0 (id=5147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x40000000, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x243}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x400}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 8m15.456923793s ago: executing program 0 (id=5151): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffd, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0xb) setpriority(0x2, 0x0, 0x6) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x40002320, 0x1, {0x1, r11}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x3c0, 0x300, 0x3c00, 0x1000, 0xbb3a, 0x2, 0x0, 0x100, {0x0, 0x4d}, {0x0, 0x2, 0x1}, {0x4000000, 0x7}, {0xfe, 0x8, 0x40000}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}) 8m12.721869047s ago: executing program 0 (id=5159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x0) r0 = getpgrp(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8m10.992066362s ago: executing program 0 (id=5164): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket(0x1d, 0x802, 0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c00), 0x1, 0x10122, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r1, 0x80044704, 0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x20000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000540), 0x5, 0x2a0700) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000580)=""/115) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0xc000) (fail_nth: 10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 8m10.91057013s ago: executing program 0 (id=5165): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000004c0)={0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2000}) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x0, 0xd4d, 0xffffffffffffffff, 0x0, 0x0}) (async) sendto$netrom(r1, &(0x7f0000000300)="6a932def849eea0e50cc5afb0da99c6bfe9de1278dc10aeaa1b5dbba03ffdc095a5d88ed12c718af288f5bb1bda2126009a00bea0f037f0f76be0d265e98cfe13be7373b4e7b54d9c701597a9e57a0e8e8a600d579a401d9d221fef2a023c60e0eca7e4abfcaad3d51c0f220e36d3f2d9baa407808fb5978947bff1a0188bedb689f22f0f112ce601dc19b61b692306ecd36d23f62e2ef70e6efd909cfe5533c1ed70f0b09eb1105b6923617e43f88b46ee2ca80f23b", 0xb6, 0x0, &(0x7f00000003c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x1a40, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5d8, 0x2e}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdb}, @NL80211_ATTR_CSA_IES={0x1a18, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xf4, 0x7f, [@supported_rates={0x1, 0x6, [{}, {0x1}, {0x12}, {0x6c, 0x1}, {0x4}, {0x36}]}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0xff, 0x5, @broadcast, 0x8, 0x0, 0x46f}}, @mic={0x8c, 0x10, {0x5d6, "8dd9301e246b", @short="6c97b0b6328942fe"}}, @perr={0x84, 0xb5, {0x4, 0xb, [{{}, @device_b, 0x97e, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x27}, {{}, @device_b, 0x9, @void, 0x19}, {{0x0, 0x1}, @broadcast, 0xd6f, @value=@broadcast, 0x2}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x1c}, {{}, @device_b, 0xca7a, @void, 0x15}, {{}, @device_b, 0x6, @void, 0xd}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x34}, {{0x0, 0x1}, @broadcast, 0xf6c, @value, 0x33}, {{}, @device_b, 0x9, @void, 0x3e}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x33}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x4ff, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @random="674739563ad9", {0x0, 0x2}}, 0x67, @default, 0x88, @void, @val={0x1, 0x1, [{0x6c, 0x1}]}, @void, @val={0x4, 0x6, {0xfa, 0x18, 0x8, 0x400}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0xf4, {0xf8, 0xd4, 0x6, "f3bf404c818ca487b96a97236d4d4dc75be4592c7c9e30b69db32271c64ce2fd426d90925d7150c33ec549d12f1dfa93c9cc3c053ac689016d369101e51d0f54673ddc0c840d2a565558387d1f894e0f4e37abb6359357bc8f2e42950c77de322573d4128d6bf77d033d0ad3e03c1ceb2ec27660f6c144bec250e0fa0d9073d17e85ee39a4f0245912c4977e987787aad789e430a368b5d178f23428e99ec6f529d6ca82e68d305d757ad916c92b4c4229898ac6d64aee44e6ec38282b87583e201a621e5e6c79d2b880013f37b72a2d3d1e6b78573c8721186b032863ad695e354f20ce132e9cf0291df44d49da0b6196"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x61}}, @void, [{0xdd, 0xe6, "123a585e5abbd74872391e9df775bbfa1a0cea735b88f74843a126f763ec0b7ebf3fb9368354c32cc6891f1f83be644a9b8d12dc980741322e8a0c3c52141d81141ea47f935f85bb5631fd90dd73ba7db24b9bbd28098e420a9a3eb9bb9418c7449b0b424f49ad5d900f2a058fc81bb0ccf147276c9b15464d50c1a7e8f61a9b7149764388f34fdffdfe67f9814fb974d1b62ab195603a8ca1f24710765659b0efa148e14f51c85bfb4fa0930a326119fcdc73f3b76f7110645771574a88237473109508cef1ab249180ba98822ccff50e75666c7b5e500bd963813e27e16d40e522f7848d8f"}, {0xdd, 0xf4, "6ddd4b1daa2878be3ad7ef6cc4974c2a49b5e0d5600981bff536c6e2886ea272fa00a07fdcb517d6f3b0e8269e2d4cb766da6db5e3ceb0edda4c37f5e82d7f01ad394964b039d2daa398e5b3218479ca79ac91e5cfa1628c091ea43a09580470f4d3dd6c700fb14ae15ba9b959e887298cc2ff75fb820fe5ef28a8423533e59863d3bcd945e328157c46c278e3a16aecbe52bf1106a74ed63fc659b4d79393498a5b9488241206c933c0d7394a380da24edf610612c28bf356a563558585939e6689c6a8edde048779867985b8079ad4ed83c97ca8f85743d2a7f5d945a0ce86de31882176d5659efd9b5cde18e0f00a7eb9e3c4"}, {0xdd, 0x73, "1628d884cae7d723c35a65c175de0b9a7d038d70dcca17ae30dc7106afca1387ad0d5aa6029a608876473d032aaf6c6a17e04db20c8fc460c7274e6229ea5d93a5bdd1ecf480b6f3df19627b1b7cc604b40290b62f8264a36b24a807ecd73d784766b7935442c58a9792fe43377d10fbcfd441"}, {0xdd, 0xfe, "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"}, {0xdd, 0x6c, "efd44d73d4a440fecff1059a233f659542acedf299405191a1149d8b655392dd59c09bb5df9d43e1e3776807586c5db97f24c007bfe7e2b79e4600b566ec9bb4dbe1a09dc3a51fd8dd4cfa8d5667b9fa7ab5f033331db957f00880176cad1e462e1b029f53b857d074640037"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1f7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0xe}}, 0xc6dd, @default, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x12}, {0x1}, {0x30}]}, @val={0x3, 0x1, 0xb0}, @void, @val={0x6, 0x2, 0x80}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x28}}, @void, [{0xdd, 0x6, "96e5081e36da"}, {0xdd, 0xf2, "a4ccc8f496245bfe04fd9309a8b2254c6edfe4d540b51ba7b18db08549376be7ccd055cfade7db439447357cfd4f78077645bc1484adf5ec44c78468908117501e4e3942dd4ee0519a53b16b6ec9cc920e33d13c7b6a7cc217216d45a4f5e69f2b3f2786b4e4b8674a2dc2223974167b3a0a8aa93fdc6ae102c1371113bbf9c8ef00e52bd57f1974a92f97029eaa60e8f9f4952d837df6b1b2dd1fa8cae1a361792a2bedfc11a863d71d3b5af52c6296324cd598025a6bcb376e4f74faa79c7d5a56993a9cf66360019592de080e70699d21fe863174d5011e0a1fdbcc6a7d54ecd699ddeba8f026c2985a5c5e6859a7df2a"}, {0xdd, 0xe, "630aee428931d4c4729adc1ec9ab"}, {0xdd, 0xa1, "106f426c2564f274a5116d14927a09e6200e1d5a22ebf537a1f999e1b488153e840cad4bb1efeade7917d5be6996203e89efe120ad880fdba939a22c255a5866906c554b1ff0c54a003c11260e202594ec26524fb99e0622a5ad32abf7765c5447c8bca578d5fe9e6f9c905e72453f0bd5c0e76199704080a2327dda5e42011050cfe139183ab2dd1becca89f96f69bf4bba5cff6351663cacb7e4b7faae666aac"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xe3, 0x80, [@tim={0x5, 0xd4, {0xb, 0x9c, 0x7, "ca228e0ccd1835db9d42de93ba7d1d2b6a6330710cd722400027a7470871eb380d22b89a9cb80c35e675920f9b22665c97983e9f6acd3dcc608fe006272d4144aea6f41b5a9ecfd27e65f72bc18599409613dd7e54c0235fd00ec15d405794bc342240a6e3291be2b3e1a4693dd90bea7e3899c154344c66f265f3b03be31225daed350574e7d56a9f949294981c5bbafd81bea0fc76757482f9c1c66fa409da1aa5458093f124e65962502c6e138d1680372c78fcf8566c2ac10c6a863c6ce62e202d1a4f6a081cde97bfb987197739ef"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x87, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x313, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_b, @broadcast, @from_mac=@device_b, {0x0, 0xb}, @value=@ver_80211n={0x0, 0x10, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xd, @default, 0x1100, @void, @val={0x1, 0x7, [{0x2, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0xc, 0x1}, {0x30, 0x1}, {0x6c}, {0x37}]}, @void, @val={0x4, 0x6, {0x81, 0x81, 0x89e, 0x8}}, @val={0x6, 0x2, 0xfff9}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x5, 0x0, {0x984, 0x81, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1}, 0x0, 0x6, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1}}, @val={0x76, 0x6, {0x3d, 0x4, 0x3a, 0x1}}, [{0xdd, 0xd3, "3d06094a5724e32d35a357f57a995fbc84f809aadfc28aef6d378fc7b309f77c1b0cd5ef8f339db3a99bd2aebd6d99eebe95ca6e8fa993002875b8d7cb31f373793957cbe5d110376d4fc5da699480d5c2b253d39ee09b294a38820c844ee4421d52e845f7d8c763b0162e6362101a7bed6971fe9d95498e29fc9e63d36e17e61959cac758025593560f4455abbb646fed7636488effa97882c5e0d9dba263ccda21a617e55e33ab9c646abd53fd2aff4e300b1014114f203c26dca839aacaaed748af2811c63ac051355decf1ab5046724a00"}, {0xdd, 0xcd, "6aec54420133856af00e4e3864a99e53885a5c5ffd68718fc99e8779f58acd20bbd8f4afee50260a337a1654a94c8162e015cc0886fffc90b5d1dae7ec0b8d429e0983f1e5f44ef4af3c6d8558f03cebe1d1677acc39e38f3c71af254db444e4e9db8cc5cd998c36ffdc5455ab7270c4e45180749776017bd6badd59c33ee2b278d2883a9b1ef5777285c313f2468a0fe8db8d5066f3c36a55139ab821f884da73a0d71e7d07401bac70a078cfffafe9db1bddc3eec46bc7afb77c900a4f719d0ab2a8f595c7b0a790e2bd4b2d"}, {0xdd, 0xf4, "b54f66f52ed203213ff71423a2096ac61489138f2171fdb4464ef0badc7c7349d8fb9230e7bda99f8cf600a1a85b117a5b3d9a20a5ab6a327899636b6ff80369447013a6042d5d626122be68882c78a74630fbeb78c08fa4073b5f86a8f9cc838bc681ce2eae64e06a624612a15359668316bfcb17d74c6615b19bab7ff6e192c5c1120a75b7f5ae38e9a82953d00ca99643f77441de002bd6d21c543c66b5da39c6c1acea714ba1bbb4d754897926a7e094a20f5bdc9a88c213c1e6a41a63c5e0ae75e02f16b75433f67dcdbed10914fe55131d1719fcbae7701f70a7b02b218d1c3baacd3b74d9096a066ae75fa942e9039196"}]}}], @beacon_params=[@NL80211_ATTR_IE={0x1e, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x10, {0xdc0, "7c5394111ecb", @short="87e801b320e7645d"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x121, 0x80, [@supported_rates={0x1, 0x1, [{0x24}]}, @tim={0x5, 0x28, {0xa, 0x8f, 0x6, "109ab4fef7ade1c635f47fdfd0c12f3b4365806d8bac53e29465a9cbbeb9a3556c6b96bc0b"}}, @tim={0x5, 0xee, {0x4, 0xdf, 0xa, "08829dad88fc9b224e504b7f1a04143efa21e6bd87210dd3f1239503f2a2f4ddb36ec9ca5d4b11df0a8770b22d76affc107b7f1cd20881a10bdc06bcac9c280f586c505a9cfaadf2315d01ce639f5bd47e0a6791a17bd5bdfabdebe665d0df57fba9392b96966c24ec9515fd19e20943597173b55dc0b1dd57248d946a77280c9d35cc1a1883b3133da399545db29d8cc576ceb63f678758a9da0af0d050eedbc51d76fbfe156cf5ed7455d101e31d49329e2d88d0ad87606863edd8b6c5e7f50082db7803375a1ada9f6919b7a6e2a626f8f8b160b03ddb2d17adfc47bb63c682000fb9435fe66eea33a0"}}]}, @NL80211_ATTR_BEACON_TAIL={0xe9, 0xf, [@random={0xd1, 0xbc, "37f8d41b2107e6248fe353524b2d74d1c1f5f0c8213bfa3611f36c9426b794bc92c008419c5d82087cf0a93a4c996ac6fede1ab46c5775052ae3f30bab8d123634fca55e60f0e6e163e4aad4fa715f1c7c77b3ff5cbe8201f54879a4d4c423c3e16e1512ca2d43503acacea6c9a3542eddda12be57277f0b47ebd2d3d9c6cedcbec6cc7a8ffa2d278db2492a03ff04213679d304a725f8dfdbff28ce76038347c93de1b4441aaac4340c255861bdd86004ee6707d87f04e71a6ebd1c"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x4, 0xff, @device_b, 0xfffffffe, 0x1000, 0x2}}, @mesh_chsw={0x76, 0x6, {0x4, 0xd, 0x42, 0xfff9}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x9b, 0x7f, [@perr={0x84, 0xf, {0x3a, 0x1, [{{}, @device_b, 0x0, @void, 0x5}]}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x9}, @fast_bss_trans={0x37, 0x70, {0x1, 0x1, "3fe8115e8dbe4ce17017c5f8ec4c5a64", "25facb72967ab016c832d92392740db78e7f288d591e5ced8e983468982ebc82", "fe916ac8f41f443dc7f5ac1034b0eaca71479ec0ca5fa747d1d2b7c52d21f2dd", [{0x2, 0x1c, "c2ddf60f17ff300e5354060abbb0be5f892b71f77f95da89f25a2b78"}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x37, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x1, @device_b, 0x8, @value, 0x9, 0x2, @device_b, 0x55c7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x64, 0x10}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0x64}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x108, 0x80, [@perr={0x84, 0xa1, {0x7f, 0x9, [{{0x0, 0x1}, @device_a, 0xfff, @value=@broadcast, 0x2c}, {{}, @broadcast, 0x1, @void, 0x2c}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x3}, {{0x0, 0x1}, @device_a, 0x7ff, @value=@broadcast, 0x16}, {{}, @broadcast, 0x0, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0xff, @value=@broadcast, 0x10}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b}, {{0x0, 0x1}, @device_a, 0x881c, @value=@device_b, 0x1a}, {{0x0, 0x1}, @broadcast, 0x80}]}}, @gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x7, 0x0, {0x4, 0xa7, 0x0, 0xa}, 0x8, 0x5, 0x26}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xb4, @broadcast, 0x3, @value=@device_b, 0x0, 0x7, @device_a, 0x1}}, @peer_mgmt={0x75, 0x14, {0x0, 0xa, @void, @void, @val="11d46b352c4e8e1b11e7b4a077a7ca04"}}]}, @NL80211_ATTR_BEACON_TAIL={0x3b, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @dsss={0x3, 0x1, 0xb7}, @gcr_ga={0xbd, 0x6, @device_b}, @chsw_timing={0x68, 0x4, {0x1, 0x4}}, @supported_rates={0x1, 0x2, [{0x18, 0x1}, {0xc, 0x1}]}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x30d, 0x91, "2cb5b7ea7d653aa4fd888e1cf78a5d0bf67226a7c077d5b96708f7a46572dec70b16d9a658049f21d52ba30250d44d8af93c79dbfa981b5ec92af5add4c30864ea3f8cd1136b13f90318e265867716d26639f71c2a409a3c0c710165a4afdf5228068533398f9fce803c1af86127b67a59728d4b06e4c71c579f9492b2108b469ca946650512f8ecbb231b36959633d9d5a45deb2c8dea2eea9816d234eef7dd802b77e7bb547e4226d4b9e413edfcb07b56ea34fafa22abffa269bfcb943897867dad11983f9147dc377277a5485430c0b2752006179dee031c23655d115f806dc2313bb8c5e832a7265d0ed5fd612bd99cabc23989d4df4c7a2346de8688afa028af1812d738dcf52472e49bcfbfafc897223799775e07c7cb657f96db653f59bdd84ddfe8ea349f52fcf11943c70c8d2a651559ad00d7fd632d9fe866e3fd1ebda7f55d13dbbdfb545b12a05c1363d15bc09e9cf68ca57809103cb43f1981ee5149b1925a7c313c30419aba7960cab3fc78a2ad48040cc6d740af3c2200dca5902ef5821f4942005ad8d9138350199d61a15e620f0c459c5fa43a0d50106139b21734f30f9b8478d6673c959d45118e049373ced697628c10822ccdc3cd8b349332d1890bcf8de02cf1f7dbdd7bec38fe2478159362dbdccb4d236429ecd2a70c495712d87524e27bc04d8ec66a95dd8989b9b9b35a82c4e9fb3a86fea436dc3db58e8f97c68d27f475994b26b1bbf7846e2f981d850ad63f3ce07d4e0bbb2a063468dcd9e6648c79196afd6ade9d0f361b74dcb03f18157da9fbe81f8ce32e738df11802b00d438bdbf90d151cb27811285942b2e4e38dbad26986ecae3f1988463e04d69b8a2e072508c6114b10f414f80a296714e43934d5a70d99406be18da3d0a64c69da376ad9908389acf9181e6b298d9e7e126df507ad9d1be83b582932b5ca75080f5e7fc52ab22423779b30cf41758d4ba8f5793c0cec75f06e171437cd026da5189ea608e354833d27fdc1df38b55127262c74bea308672318957e632a8b0d801efff801e3b99802c27604f775e5fd075fbcf84ef53c85a4ebc05571440d38f58157"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x9, 0x1000, 0x7, 0x200, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x8, 0x7, 0x9]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x44, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3d, 0x2, "c4e3e73e738c7ef9494a667fd935c77bece1fc8866d2b98096c5bddb27293a307a8ed907ff9e6d38469c76d63bc0dfb562de62559386bce32c"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x31, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x95, 0x3}}, @cf={0x4, 0x6, {0x3, 0xf1, 0x9, 0x8}}, @peer_mgmt={0x75, 0x4, {0x1, 0x8, @void, @void, @void}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0xdf, 0x2c, @device_b, 0x3cd8, 0x0, 0x101}}, @challenge={0x10, 0x1, 0x10}]}, @NL80211_ATTR_FTM_RESPONDER={0x84, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x79, 0x3, "8d39eb8581817f362435e492829632ef54c9401ba59a8191d9aa9bd3f50ee3b3be98fbbb583e22f222898f1ea870f6365d1dab9ad105402d8f6c1b0b15a326d8b7f83912f59eaa6541fd6d3ce6f2c8d5e9fa2a879447a7d03aae137d9e8027a43567c55e417a08f0fd001edf3251bc414a57c158b5"}]}, @NL80211_ATTR_IE={0xd5, 0x2a, [@ibss={0x6, 0x2, 0x1}, @supported_rates={0x1, 0x5, [{0x6, 0x1}, {0x16}, {0x36, 0x1}, {0x5}, {0x16, 0x1}]}, @tim={0x5, 0xc4, {0x40, 0xbb, 0x81, "dc9a26c1ee0ac9b1d6f8bcaede2190c6b722300e605d317ee2b1d6c96ed9ceb24d780223554500d612001e88b2eced1094d8eaaceca73b42a7b19c43cee5325841956b45cfae78d02977f97230215a82f0ae462621cbadc0bd38279abdfe1e101c0ca593f74e4de37f6b97b1c591f742c006749a87a9b81aef04382f7326b30dd81a2bd02cdd3619555ba2b43639f3e0d1b31e462d07637c159f249e4ad5962bbe0cee16e6f176a007ab99a43e2da29d6a8a61d751c5ebbc17c7aecf2608ed3b0f"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x24d, 0x80, [@cf={0x4, 0x6, {0xe, 0xb, 0xff, 0x74f5}}, @cf={0x4, 0x6, {0x3, 0x0, 0x5}}, @preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x5, 0x6, 0x6000000, @broadcast, 0x8001, @value=@broadcast, 0x2, 0xc, 0x4, [{{0x1}, @broadcast, 0x4}, {{}, @broadcast, 0x6da6}, {{0x0, 0x0, 0x1}, @broadcast, 0x7ff}, {{0x0, 0x0, 0x1}, @device_a, 0x8}]}}, @challenge={0x10, 0x1, 0x24}, @perr={0x84, 0xe3, {0x1, 0xf, [{{}, @broadcast, 0x3, @void, 0x2d}, {{}, @broadcast, 0xd, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x1a}, {{}, @device_a, 0x7, @void, 0x2}, {{}, @device_a, 0xfffffffc, @void, 0x7}, {{}, @device_a, 0x7, @void, 0x2c}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x13}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x3d}, {{}, @device_a, 0x2, @void, 0x15}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x2}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x33}, {{}, @device_b, 0x2, @void, 0x23}, {{}, @broadcast, 0xab, @void, 0x38}, {{}, @device_a, 0x9, @void, 0x9}, {{}, @broadcast, 0x8, @void, 0x8}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x9d, 0x8c}}, @random_vendor={0xdd, 0xf5, "5170003343b49376133382882f92feaff9f34bac3859e728b334096a36254135cd592de7b1b405c3d55f85c9215bab93b52b9f9619083a6e293b0686f53573ca419e3ff6ab8cb7533d13726f10cda0bf511c033187fa2a40a4dac125ea3789efaa680788e46d985305b2eafdcd82c179fb86507d88baea9243b22f171d1de2bfd2dd9fbc47604e189db8f52e3d09428b5475362ba1e0815023ca8e2fb53e564d8e48021ee4b64c5c5635ea38f78a9e0c56a4fe4b517c5eff9b3d71ad4e2f585c648bf7a155da10c355afa588157c5cfbf186284638d91a664a77d782865ff84e5623301073272a747d5f919bd5f1e401ec9703f3a5"}, @chsw_timing={0x68, 0x4, {0x8001}}]}, @NL80211_ATTR_BEACON_HEAD={0x26b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @random="f35f865c3617", {0x6, 0x6}}, 0x80, @default, 0x2481, @void, @void, @void, @void, @void, @val={0x5, 0x37, {0x6, 0xc3, 0x9, "f4aaf54f68aef79aa5f5d7d199e41d6f3a6c7edaa32c5c7538cdf1f06e00a46ec02c71b86e211ac6216cadb44a120eb37df99532"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0xb9, 0x98}}, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x48}}, @val={0x76, 0x6, {0xb, 0x8, 0x0, 0x1}}, [{0xdd, 0x4b, "d69214a97503b99a91bdfc0a265baaff2d9bf13d6bcd62e18d4cc87116b130143b363a8dd4f9ce6ec1ce18b277b3f1388321bb51b4139f7d20f490b781533633530511a412f22273658e3d"}, {0xdd, 0x9d, "a78824fb9dfa3f9f2cd3badf70d9b895e592bc0ee50d98d41c3a5cbeca0073c90a7a188909a22d5a217668b3ec58de63a784619861d0407a6b30e71a8d5cc1fd40e3287eefba857389b0e6d20c38f322d35758ffd8a34abd9031e204ef38a5d03b9049245615ac53080fe62c1249243dd8a1b2b2fea2a6cb245fceab4f9b40f1692e2ce39e5046ab6655399f47fd1ca4ab178f762e70c25130fbb5b5f0"}, {0xdd, 0x62, "ed69c310d7121bbe8162b244d5ab891db8bd7f99c954ea099276f352bee475dfd12929ec0f70a4668ae1e1ca96167171d28281b3fbea8bc2f193f20073f2e69310c1b010271e8ec090d26166fe2596960344af5dcb0b0b93837e45ca363119444b29"}, {0xdd, 0xa1, "3b12c0f56cdea34c3f12acba1264b0da3d62a406bb44c257c7cc171b42c9d35c882d90f5f45c18a8dbfb86ec4a0be21a4bd1adfbc418390a46f30ecdeec254350382b3adb7b92c6d7fcfc79a0cef230e95f40d8130c7d861eee97d74ab162461df6757329d48ddb5e3e39a20a33f41bffc0b8325a2f3049b4cb5a2187bcd0f27376f97bb9360731910c7b1a9d74f47aac0bcf360b0674853c5f6b1d7c0b8a9d042"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x7, 0x4, 0x0, 0x80, 0x3, 0x5, 0xf3a, 0x5, 0x3]}]}]}, 0x1a40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, 0x0, 0x40000c8) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 7m55.848855708s ago: executing program 39 (id=5165): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000004c0)={0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2000}) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x0, 0xd4d, 0xffffffffffffffff, 0x0, 0x0}) (async) sendto$netrom(r1, &(0x7f0000000300)="6a932def849eea0e50cc5afb0da99c6bfe9de1278dc10aeaa1b5dbba03ffdc095a5d88ed12c718af288f5bb1bda2126009a00bea0f037f0f76be0d265e98cfe13be7373b4e7b54d9c701597a9e57a0e8e8a600d579a401d9d221fef2a023c60e0eca7e4abfcaad3d51c0f220e36d3f2d9baa407808fb5978947bff1a0188bedb689f22f0f112ce601dc19b61b692306ecd36d23f62e2ef70e6efd909cfe5533c1ed70f0b09eb1105b6923617e43f88b46ee2ca80f23b", 0xb6, 0x0, &(0x7f00000003c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x1a40, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5d8, 0x2e}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdb}, @NL80211_ATTR_CSA_IES={0x1a18, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xf4, 0x7f, [@supported_rates={0x1, 0x6, [{}, {0x1}, {0x12}, {0x6c, 0x1}, {0x4}, {0x36}]}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0xff, 0x5, @broadcast, 0x8, 0x0, 0x46f}}, @mic={0x8c, 0x10, {0x5d6, "8dd9301e246b", @short="6c97b0b6328942fe"}}, @perr={0x84, 0xb5, {0x4, 0xb, [{{}, @device_b, 0x97e, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x27}, {{}, @device_b, 0x9, @void, 0x19}, {{0x0, 0x1}, @broadcast, 0xd6f, @value=@broadcast, 0x2}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x1c}, {{}, @device_b, 0xca7a, @void, 0x15}, {{}, @device_b, 0x6, @void, 0xd}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x34}, {{0x0, 0x1}, @broadcast, 0xf6c, @value, 0x33}, {{}, @device_b, 0x9, @void, 0x3e}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x33}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x4ff, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @random="674739563ad9", {0x0, 0x2}}, 0x67, @default, 0x88, @void, @val={0x1, 0x1, [{0x6c, 0x1}]}, @void, @val={0x4, 0x6, {0xfa, 0x18, 0x8, 0x400}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0xf4, {0xf8, 0xd4, 0x6, "f3bf404c818ca487b96a97236d4d4dc75be4592c7c9e30b69db32271c64ce2fd426d90925d7150c33ec549d12f1dfa93c9cc3c053ac689016d369101e51d0f54673ddc0c840d2a565558387d1f894e0f4e37abb6359357bc8f2e42950c77de322573d4128d6bf77d033d0ad3e03c1ceb2ec27660f6c144bec250e0fa0d9073d17e85ee39a4f0245912c4977e987787aad789e430a368b5d178f23428e99ec6f529d6ca82e68d305d757ad916c92b4c4229898ac6d64aee44e6ec38282b87583e201a621e5e6c79d2b880013f37b72a2d3d1e6b78573c8721186b032863ad695e354f20ce132e9cf0291df44d49da0b6196"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x61}}, @void, [{0xdd, 0xe6, "123a585e5abbd74872391e9df775bbfa1a0cea735b88f74843a126f763ec0b7ebf3fb9368354c32cc6891f1f83be644a9b8d12dc980741322e8a0c3c52141d81141ea47f935f85bb5631fd90dd73ba7db24b9bbd28098e420a9a3eb9bb9418c7449b0b424f49ad5d900f2a058fc81bb0ccf147276c9b15464d50c1a7e8f61a9b7149764388f34fdffdfe67f9814fb974d1b62ab195603a8ca1f24710765659b0efa148e14f51c85bfb4fa0930a326119fcdc73f3b76f7110645771574a88237473109508cef1ab249180ba98822ccff50e75666c7b5e500bd963813e27e16d40e522f7848d8f"}, {0xdd, 0xf4, "6ddd4b1daa2878be3ad7ef6cc4974c2a49b5e0d5600981bff536c6e2886ea272fa00a07fdcb517d6f3b0e8269e2d4cb766da6db5e3ceb0edda4c37f5e82d7f01ad394964b039d2daa398e5b3218479ca79ac91e5cfa1628c091ea43a09580470f4d3dd6c700fb14ae15ba9b959e887298cc2ff75fb820fe5ef28a8423533e59863d3bcd945e328157c46c278e3a16aecbe52bf1106a74ed63fc659b4d79393498a5b9488241206c933c0d7394a380da24edf610612c28bf356a563558585939e6689c6a8edde048779867985b8079ad4ed83c97ca8f85743d2a7f5d945a0ce86de31882176d5659efd9b5cde18e0f00a7eb9e3c4"}, {0xdd, 0x73, "1628d884cae7d723c35a65c175de0b9a7d038d70dcca17ae30dc7106afca1387ad0d5aa6029a608876473d032aaf6c6a17e04db20c8fc460c7274e6229ea5d93a5bdd1ecf480b6f3df19627b1b7cc604b40290b62f8264a36b24a807ecd73d784766b7935442c58a9792fe43377d10fbcfd441"}, {0xdd, 0xfe, "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"}, {0xdd, 0x6c, "efd44d73d4a440fecff1059a233f659542acedf299405191a1149d8b655392dd59c09bb5df9d43e1e3776807586c5db97f24c007bfe7e2b79e4600b566ec9bb4dbe1a09dc3a51fd8dd4cfa8d5667b9fa7ab5f033331db957f00880176cad1e462e1b029f53b857d074640037"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1f7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0xe}}, 0xc6dd, @default, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x12}, {0x1}, {0x30}]}, @val={0x3, 0x1, 0xb0}, @void, @val={0x6, 0x2, 0x80}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x28}}, @void, [{0xdd, 0x6, "96e5081e36da"}, {0xdd, 0xf2, "a4ccc8f496245bfe04fd9309a8b2254c6edfe4d540b51ba7b18db08549376be7ccd055cfade7db439447357cfd4f78077645bc1484adf5ec44c78468908117501e4e3942dd4ee0519a53b16b6ec9cc920e33d13c7b6a7cc217216d45a4f5e69f2b3f2786b4e4b8674a2dc2223974167b3a0a8aa93fdc6ae102c1371113bbf9c8ef00e52bd57f1974a92f97029eaa60e8f9f4952d837df6b1b2dd1fa8cae1a361792a2bedfc11a863d71d3b5af52c6296324cd598025a6bcb376e4f74faa79c7d5a56993a9cf66360019592de080e70699d21fe863174d5011e0a1fdbcc6a7d54ecd699ddeba8f026c2985a5c5e6859a7df2a"}, {0xdd, 0xe, "630aee428931d4c4729adc1ec9ab"}, {0xdd, 0xa1, "106f426c2564f274a5116d14927a09e6200e1d5a22ebf537a1f999e1b488153e840cad4bb1efeade7917d5be6996203e89efe120ad880fdba939a22c255a5866906c554b1ff0c54a003c11260e202594ec26524fb99e0622a5ad32abf7765c5447c8bca578d5fe9e6f9c905e72453f0bd5c0e76199704080a2327dda5e42011050cfe139183ab2dd1becca89f96f69bf4bba5cff6351663cacb7e4b7faae666aac"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xe3, 0x80, [@tim={0x5, 0xd4, {0xb, 0x9c, 0x7, "ca228e0ccd1835db9d42de93ba7d1d2b6a6330710cd722400027a7470871eb380d22b89a9cb80c35e675920f9b22665c97983e9f6acd3dcc608fe006272d4144aea6f41b5a9ecfd27e65f72bc18599409613dd7e54c0235fd00ec15d405794bc342240a6e3291be2b3e1a4693dd90bea7e3899c154344c66f265f3b03be31225daed350574e7d56a9f949294981c5bbafd81bea0fc76757482f9c1c66fa409da1aa5458093f124e65962502c6e138d1680372c78fcf8566c2ac10c6a863c6ce62e202d1a4f6a081cde97bfb987197739ef"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x87, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x313, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_b, @broadcast, @from_mac=@device_b, {0x0, 0xb}, @value=@ver_80211n={0x0, 0x10, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xd, @default, 0x1100, @void, @val={0x1, 0x7, [{0x2, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0xc, 0x1}, {0x30, 0x1}, {0x6c}, {0x37}]}, @void, @val={0x4, 0x6, {0x81, 0x81, 0x89e, 0x8}}, @val={0x6, 0x2, 0xfff9}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x5, 0x0, {0x984, 0x81, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1}, 0x0, 0x6, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1}}, @val={0x76, 0x6, {0x3d, 0x4, 0x3a, 0x1}}, [{0xdd, 0xd3, "3d06094a5724e32d35a357f57a995fbc84f809aadfc28aef6d378fc7b309f77c1b0cd5ef8f339db3a99bd2aebd6d99eebe95ca6e8fa993002875b8d7cb31f373793957cbe5d110376d4fc5da699480d5c2b253d39ee09b294a38820c844ee4421d52e845f7d8c763b0162e6362101a7bed6971fe9d95498e29fc9e63d36e17e61959cac758025593560f4455abbb646fed7636488effa97882c5e0d9dba263ccda21a617e55e33ab9c646abd53fd2aff4e300b1014114f203c26dca839aacaaed748af2811c63ac051355decf1ab5046724a00"}, {0xdd, 0xcd, "6aec54420133856af00e4e3864a99e53885a5c5ffd68718fc99e8779f58acd20bbd8f4afee50260a337a1654a94c8162e015cc0886fffc90b5d1dae7ec0b8d429e0983f1e5f44ef4af3c6d8558f03cebe1d1677acc39e38f3c71af254db444e4e9db8cc5cd998c36ffdc5455ab7270c4e45180749776017bd6badd59c33ee2b278d2883a9b1ef5777285c313f2468a0fe8db8d5066f3c36a55139ab821f884da73a0d71e7d07401bac70a078cfffafe9db1bddc3eec46bc7afb77c900a4f719d0ab2a8f595c7b0a790e2bd4b2d"}, {0xdd, 0xf4, "b54f66f52ed203213ff71423a2096ac61489138f2171fdb4464ef0badc7c7349d8fb9230e7bda99f8cf600a1a85b117a5b3d9a20a5ab6a327899636b6ff80369447013a6042d5d626122be68882c78a74630fbeb78c08fa4073b5f86a8f9cc838bc681ce2eae64e06a624612a15359668316bfcb17d74c6615b19bab7ff6e192c5c1120a75b7f5ae38e9a82953d00ca99643f77441de002bd6d21c543c66b5da39c6c1acea714ba1bbb4d754897926a7e094a20f5bdc9a88c213c1e6a41a63c5e0ae75e02f16b75433f67dcdbed10914fe55131d1719fcbae7701f70a7b02b218d1c3baacd3b74d9096a066ae75fa942e9039196"}]}}], @beacon_params=[@NL80211_ATTR_IE={0x1e, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x10, {0xdc0, "7c5394111ecb", @short="87e801b320e7645d"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x121, 0x80, [@supported_rates={0x1, 0x1, [{0x24}]}, @tim={0x5, 0x28, {0xa, 0x8f, 0x6, "109ab4fef7ade1c635f47fdfd0c12f3b4365806d8bac53e29465a9cbbeb9a3556c6b96bc0b"}}, @tim={0x5, 0xee, {0x4, 0xdf, 0xa, "08829dad88fc9b224e504b7f1a04143efa21e6bd87210dd3f1239503f2a2f4ddb36ec9ca5d4b11df0a8770b22d76affc107b7f1cd20881a10bdc06bcac9c280f586c505a9cfaadf2315d01ce639f5bd47e0a6791a17bd5bdfabdebe665d0df57fba9392b96966c24ec9515fd19e20943597173b55dc0b1dd57248d946a77280c9d35cc1a1883b3133da399545db29d8cc576ceb63f678758a9da0af0d050eedbc51d76fbfe156cf5ed7455d101e31d49329e2d88d0ad87606863edd8b6c5e7f50082db7803375a1ada9f6919b7a6e2a626f8f8b160b03ddb2d17adfc47bb63c682000fb9435fe66eea33a0"}}]}, @NL80211_ATTR_BEACON_TAIL={0xe9, 0xf, [@random={0xd1, 0xbc, "37f8d41b2107e6248fe353524b2d74d1c1f5f0c8213bfa3611f36c9426b794bc92c008419c5d82087cf0a93a4c996ac6fede1ab46c5775052ae3f30bab8d123634fca55e60f0e6e163e4aad4fa715f1c7c77b3ff5cbe8201f54879a4d4c423c3e16e1512ca2d43503acacea6c9a3542eddda12be57277f0b47ebd2d3d9c6cedcbec6cc7a8ffa2d278db2492a03ff04213679d304a725f8dfdbff28ce76038347c93de1b4441aaac4340c255861bdd86004ee6707d87f04e71a6ebd1c"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x4, 0xff, @device_b, 0xfffffffe, 0x1000, 0x2}}, @mesh_chsw={0x76, 0x6, {0x4, 0xd, 0x42, 0xfff9}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x9b, 0x7f, [@perr={0x84, 0xf, {0x3a, 0x1, [{{}, @device_b, 0x0, @void, 0x5}]}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x9}, @fast_bss_trans={0x37, 0x70, {0x1, 0x1, "3fe8115e8dbe4ce17017c5f8ec4c5a64", "25facb72967ab016c832d92392740db78e7f288d591e5ced8e983468982ebc82", "fe916ac8f41f443dc7f5ac1034b0eaca71479ec0ca5fa747d1d2b7c52d21f2dd", [{0x2, 0x1c, "c2ddf60f17ff300e5354060abbb0be5f892b71f77f95da89f25a2b78"}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x37, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x1, @device_b, 0x8, @value, 0x9, 0x2, @device_b, 0x55c7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x64, 0x10}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0x64}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x108, 0x80, [@perr={0x84, 0xa1, {0x7f, 0x9, [{{0x0, 0x1}, @device_a, 0xfff, @value=@broadcast, 0x2c}, {{}, @broadcast, 0x1, @void, 0x2c}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x3}, {{0x0, 0x1}, @device_a, 0x7ff, @value=@broadcast, 0x16}, {{}, @broadcast, 0x0, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0xff, @value=@broadcast, 0x10}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b}, {{0x0, 0x1}, @device_a, 0x881c, @value=@device_b, 0x1a}, {{0x0, 0x1}, @broadcast, 0x80}]}}, @gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x7, 0x0, {0x4, 0xa7, 0x0, 0xa}, 0x8, 0x5, 0x26}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xb4, @broadcast, 0x3, @value=@device_b, 0x0, 0x7, @device_a, 0x1}}, @peer_mgmt={0x75, 0x14, {0x0, 0xa, @void, @void, @val="11d46b352c4e8e1b11e7b4a077a7ca04"}}]}, @NL80211_ATTR_BEACON_TAIL={0x3b, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @dsss={0x3, 0x1, 0xb7}, @gcr_ga={0xbd, 0x6, @device_b}, @chsw_timing={0x68, 0x4, {0x1, 0x4}}, @supported_rates={0x1, 0x2, [{0x18, 0x1}, {0xc, 0x1}]}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x30d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x9, 0x1000, 0x7, 0x200, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x8, 0x7, 0x9]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x44, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3d, 0x2, "c4e3e73e738c7ef9494a667fd935c77bece1fc8866d2b98096c5bddb27293a307a8ed907ff9e6d38469c76d63bc0dfb562de62559386bce32c"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x31, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0x95, 0x3}}, @cf={0x4, 0x6, {0x3, 0xf1, 0x9, 0x8}}, @peer_mgmt={0x75, 0x4, {0x1, 0x8, @void, @void, @void}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0xdf, 0x2c, @device_b, 0x3cd8, 0x0, 0x101}}, @challenge={0x10, 0x1, 0x10}]}, @NL80211_ATTR_FTM_RESPONDER={0x84, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x79, 0x3, "8d39eb8581817f362435e492829632ef54c9401ba59a8191d9aa9bd3f50ee3b3be98fbbb583e22f222898f1ea870f6365d1dab9ad105402d8f6c1b0b15a326d8b7f83912f59eaa6541fd6d3ce6f2c8d5e9fa2a879447a7d03aae137d9e8027a43567c55e417a08f0fd001edf3251bc414a57c158b5"}]}, @NL80211_ATTR_IE={0xd5, 0x2a, [@ibss={0x6, 0x2, 0x1}, @supported_rates={0x1, 0x5, [{0x6, 0x1}, {0x16}, {0x36, 0x1}, {0x5}, {0x16, 0x1}]}, @tim={0x5, 0xc4, {0x40, 0xbb, 0x81, "dc9a26c1ee0ac9b1d6f8bcaede2190c6b722300e605d317ee2b1d6c96ed9ceb24d780223554500d612001e88b2eced1094d8eaaceca73b42a7b19c43cee5325841956b45cfae78d02977f97230215a82f0ae462621cbadc0bd38279abdfe1e101c0ca593f74e4de37f6b97b1c591f742c006749a87a9b81aef04382f7326b30dd81a2bd02cdd3619555ba2b43639f3e0d1b31e462d07637c159f249e4ad5962bbe0cee16e6f176a007ab99a43e2da29d6a8a61d751c5ebbc17c7aecf2608ed3b0f"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x24d, 0x80, [@cf={0x4, 0x6, {0xe, 0xb, 0xff, 0x74f5}}, @cf={0x4, 0x6, {0x3, 0x0, 0x5}}, @preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x5, 0x6, 0x6000000, @broadcast, 0x8001, @value=@broadcast, 0x2, 0xc, 0x4, [{{0x1}, @broadcast, 0x4}, {{}, @broadcast, 0x6da6}, {{0x0, 0x0, 0x1}, @broadcast, 0x7ff}, {{0x0, 0x0, 0x1}, @device_a, 0x8}]}}, @challenge={0x10, 0x1, 0x24}, @perr={0x84, 0xe3, {0x1, 0xf, [{{}, @broadcast, 0x3, @void, 0x2d}, {{}, @broadcast, 0xd, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x1a}, {{}, @device_a, 0x7, @void, 0x2}, {{}, @device_a, 0xfffffffc, @void, 0x7}, {{}, @device_a, 0x7, @void, 0x2c}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x13}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x3d}, {{}, @device_a, 0x2, @void, 0x15}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x2}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x33}, {{}, @device_b, 0x2, @void, 0x23}, {{}, @broadcast, 0xab, @void, 0x38}, {{}, @device_a, 0x9, @void, 0x9}, {{}, @broadcast, 0x8, @void, 0x8}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x9d, 0x8c}}, @random_vendor={0xdd, 0xf5, "5170003343b49376133382882f92feaff9f34bac3859e728b334096a36254135cd592de7b1b405c3d55f85c9215bab93b52b9f9619083a6e293b0686f53573ca419e3ff6ab8cb7533d13726f10cda0bf511c033187fa2a40a4dac125ea3789efaa680788e46d985305b2eafdcd82c179fb86507d88baea9243b22f171d1de2bfd2dd9fbc47604e189db8f52e3d09428b5475362ba1e0815023ca8e2fb53e564d8e48021ee4b64c5c5635ea38f78a9e0c56a4fe4b517c5eff9b3d71ad4e2f585c648bf7a155da10c355afa588157c5cfbf186284638d91a664a77d782865ff84e5623301073272a747d5f919bd5f1e401ec9703f3a5"}, @chsw_timing={0x68, 0x4, {0x8001}}]}, @NL80211_ATTR_BEACON_HEAD={0x26b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @random="f35f865c3617", {0x6, 0x6}}, 0x80, @default, 0x2481, @void, @void, @void, @void, @void, @val={0x5, 0x37, {0x6, 0xc3, 0x9, "f4aaf54f68aef79aa5f5d7d199e41d6f3a6c7edaa32c5c7538cdf1f06e00a46ec02c71b86e211ac6216cadb44a120eb37df99532"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0xb9, 0x98}}, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x48}}, @val={0x76, 0x6, {0xb, 0x8, 0x0, 0x1}}, [{0xdd, 0x4b, "d69214a97503b99a91bdfc0a265baaff2d9bf13d6bcd62e18d4cc87116b130143b363a8dd4f9ce6ec1ce18b277b3f1388321bb51b4139f7d20f490b781533633530511a412f22273658e3d"}, {0xdd, 0x9d, "a78824fb9dfa3f9f2cd3badf70d9b895e592bc0ee50d98d41c3a5cbeca0073c90a7a188909a22d5a217668b3ec58de63a784619861d0407a6b30e71a8d5cc1fd40e3287eefba857389b0e6d20c38f322d35758ffd8a34abd9031e204ef38a5d03b9049245615ac53080fe62c1249243dd8a1b2b2fea2a6cb245fceab4f9b40f1692e2ce39e5046ab6655399f47fd1ca4ab178f762e70c25130fbb5b5f0"}, {0xdd, 0x62, "ed69c310d7121bbe8162b244d5ab891db8bd7f99c954ea099276f352bee475dfd12929ec0f70a4668ae1e1ca96167171d28281b3fbea8bc2f193f20073f2e69310c1b010271e8ec090d26166fe2596960344af5dcb0b0b93837e45ca363119444b29"}, {0xdd, 0xa1, "3b12c0f56cdea34c3f12acba1264b0da3d62a406bb44c257c7cc171b42c9d35c882d90f5f45c18a8dbfb86ec4a0be21a4bd1adfbc418390a46f30ecdeec254350382b3adb7b92c6d7fcfc79a0cef230e95f40d8130c7d861eee97d74ab162461df6757329d48ddb5e3e39a20a33f41bffc0b8325a2f3049b4cb5a2187bcd0f27376f97bb9360731910c7b1a9d74f47aac0bcf360b0674853c5f6b1d7c0b8a9d042"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x7, 0x4, 0x0, 0x80, 0x3, 0x5, 0xf3a, 0x5, 0x3]}]}]}, 0x1a40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, 0x0, 0x40000c8) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8.907194693s ago: executing program 8 (id=6743): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x517a3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000c65c374faea229aa47364c03705e9e0000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001125640101000000000000000053a520ac5ca7a4df89af09eb642f85480000000000000004d50200000014000d00"], 0x3c}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000040)) r7 = epoll_create(0xb9f1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, 0x0) r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) 8.719584817s ago: executing program 6 (id=6744): socket$netlink(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000440)="0163d144ee2bd80a5f53d91028a2b9e3a3de459ab072500b9252ce8b54f2b8d6d10da519653342a7fb9d51f071892b833f1d11838c380c113fa722204c35068689e1c46e861007435acf300c2bcfd1911547db341d92ae16d28644dd75067ed13c25f390dc566a245b2f62f74dafc26ef00205d9775a5f739140e6ada6bdd803d5fa4f5841a7cf2d9297411fd61ab1e2494ca6abcc20905fcad85720cca45330e3aadd8d219a559d5f691b", 0xab, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r7, r7, r6}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r8, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x4040081) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 8.025423844s ago: executing program 2 (id=6746): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) socket$packet(0x11, 0x3, 0x300) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x54) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000000a880, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000980)=0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 7.884075882s ago: executing program 8 (id=6747): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, 0x0, 0x40624, 0x10243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x98, 0x30, 0x48b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) 7.527802816s ago: executing program 2 (id=6749): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101080) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000f000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 6.95773252s ago: executing program 8 (id=6750): sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000011000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000400)="660f3882282e260f073e660f73d40066b81f010f00d0c4c1e8c23e30650fae16d81d0f00010067646465660f38cfa8fbaac7442400114d0000c7442402fbf1cabdc7442406000000000f011c24", 0x4d}], 0x1, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r6 = dup(r5) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x200000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r9 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r9, 0x0, 0x2000, 0x6, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) r10 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x24, 0x40, 0xf3, [{{0x9, 0x4, 0x0, 0x2, 0x5, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x81, 0xf7, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x11, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0x9, 0x6, 0x250, 0xd4, 0x0, 0xb, 0x20, 0x3}, 0x1c, &(0x7f0000000380)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x44, 0x10, 0x4, 0x0, "01760b45b6bd82b1cf15c027da486bcd"}, @ptm_cap={0x3}]}, 0x1, [{0x64, &(0x7f0000000500)=@lang_id={0x0, 0x3, 0x401}}]}) syz_usb_control_io$printer(r10, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x20, 0x9, 0xc2, {0xc2, 0xc, "f8aa6767a19653956265438f164a28bac5c04698965763426683834756d82f0500cbf9891c23a717c802abb28bd3f8cdd91bb0bba9c639ab67db7bd410d9eae8f6049b49da4a2d52f1e8425a444661ec9cee2a8f73a43981e2b72c444c9cc07e78ccfa83f7cfc32363db1a1fb4015668aae9e0ca52882aec02b68e74d62920facf567161cd333504e5e58cccc5d314366008cd17da2a80bb9accf872db7b6587897ea1d1ca5b82756166aa7d170a4d59d4498049a6350feeb937232341ddfb17"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000000900)={0x34, &(0x7f0000000700)={0x0, 0x30, 0x15, "12fae0c2572232676e4aeb12f57255b86220812912"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000007c0)={0x20, 0x0, 0x6e, {0x6c, "0992c493e00c0c1674fe2ba74ab2331cbdfa0d9f02cc12f4c641bc70cb07e3d29bb18354fbce1dc720882285efd32034f9d5ea3762d0680b71f3c6b667782d2aee896f5adfe5c755ba868ec490cb2b1585585351662018088b7abf880b768011afbb5a774c3133e4475e7001"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x8}}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xc, @string={0xc, 0x3, "9a000000000000000000"}}, 0x0, 0x0}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000940)) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.957123355s ago: executing program 9 (id=6751): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x9a, &(0x7f0000000140)=""/154) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040)=r2, 0x4) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c56", 0x56}], 0x2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x7b0d, 0xe2c0, 0x0, &(0x7f0000000400)={[0x4c01]}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 6.610407439s ago: executing program 6 (id=6752): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20040884}, 0x40000) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.420038344s ago: executing program 6 (id=6753): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) epoll_create1(0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x40002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b4000040"]) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x9) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x40000000, 0x200079, 0x200000007}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000b001200000425bd7000fbdbdf2500000000", @ANYBLOB="08010300bb32ac4b08000f00080000000800040010000000080004000300000008001300", @ANYRES32=r0, @ANYBLOB="140012800b0001006c6f7770616e00000400028024002b8008", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000300030000000a000200aaaaaaaaaabb000008000a00", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000001e00000000000004000000b15dbda30000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 5.452119672s ago: executing program 6 (id=6756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) (async) add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000011c0)="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", 0x1000, r1) (async) r2 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r2, 0x5, 0x17}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'sha224-ni\x00'}}, &(0x7f0000000180)="1707860a26", &(0x7f0000000240)=""/23) close(0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000080)) 5.196381417s ago: executing program 1 (id=6757): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x700000e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x22020200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5.196082502s ago: executing program 6 (id=6758): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x9a, &(0x7f0000000140)=""/154) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 4.980719055s ago: executing program 1 (id=6759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000007354728ecd4c088da8707f00000000000000000000000000000000000000000000f5811a3198ca1e1492ff78e8d1cffd37cc7d0921666291a6fa3998944c15a1e69229fe2e63d34027358ce04feaaab3ebefd4b4f3bc6b47a9a23c6a28a1c52bca48d4242a"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300)="989f", &(0x7f00000005c0)=""/104}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x21) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001780)={@fallback, 0xffffffffffffffff, 0x15, 0x124b09eeef7cc7de}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006040)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x4000000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r11, &(0x7f0000003440)={0x2020}, 0x2020) 4.790571737s ago: executing program 9 (id=6760): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffffffffffe6e) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r6, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbc}, 0xa) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) 4.415840018s ago: executing program 8 (id=6761): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000340)='veth0_to_bond\x00', &(0x7f0000000380)='syz0\x00', &(0x7f00000003c0)=']#{\'&,/+\x00', 0x0, &(0x7f0000000480)='syz0\x00', &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', &(0x7f0000000500)='+^{&\x00']}, &(0x7f0000000600)={[&(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', &(0x7f00000005c0)='syz0\x00']}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) sched_setaffinity(r2, 0x61, &(0x7f0000000040)=0x26b5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') sendto$inet(r4, &(0x7f00000000c0)="60a169a2d10ccdbdd8b67ddd2676fe6c4323142068ab0e9220f45dff669d79cdbdc3fedf4bf38dd0807b681eff7c77b20323341afafdcd7f80ff0edc683353c64ebc0cf60edf6fdeef8039bca8120764a4d9cb79dbf6ba972475ea1a34a39a7a9e61221bdf1f9186933cf61cc2c69b09e635bf34bb6a79230399e1ed3b45365e2ac1b2ae76601ca589e4693a8cda673167d804a015971f183d3ec71616b31d3a36", 0xa1, 0x40c2, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x68000500) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000240)) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000040)={0x14, &(0x7f0000000140)={0x20, 0xc, 0xbc, {0xbc, 0xf, "dcd00c3a38314effe719a70f506647458196af115fb8b4504c00ded22c34103361ada973d9d2a28c0695d24cfcb30b7055bc001491b482445a5fd7e9ec476a0ed07f0b8685fe35df8d3bb79c94b1d0c31f40bdf6c2f3caa4c5ad61d7727113c3ea9aeb4da3d9e6f88d4de24c0911af33694dbd62c82af159810a5d997816f3a6f1959732d6a128489aea532bdb0a5db151a4a6f39d59d0ab9d31a5b8217a72d8c72d20dedd043ca01a970e485ee9628f4394f7df846384ad3bcc"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x6, 0x74, "d8d9b271a5b2a6281075a84d5b192596cace8a1067c2a4fe656efeacd3852e57641bc2b2ad8142f60116a8c54adf2f7af9b7d91a96e47dda953ee8c046753f03b4ae6b63ecec240c9ae9661e84d642d10adcebcb0a65f3f5c2a90594f5d674a5ad242e34d9cc5a8122fb2cfa79efc5e91d43d7cc"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x21, 0xa, {0xa, 0x30, "65713c9f59d924a2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.961515557s ago: executing program 1 (id=6762): socket$netlink(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340), 0x4) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000440)="0163d144ee2bd80a5f53d91028a2b9e3a3de459ab072500b9252ce8b54f2b8d6d10da519653342a7fb9d51f071892b833f1d11838c380c113fa722204c35068689e1c46e861007435acf300c2bcfd1911547db341d92ae16d28644dd75067ed13c25f390dc566a245b2f62f74dafc26ef00205d9775a5f739140e6ada6bdd803d5fa4f5841a7cf2d9297411fd61ab1e2494ca6abcc20905fcad85720cca45330e3aadd8d219a559d5f691b", 0xab, 0xffffffffffffffff) r8 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r8, r8, r7}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r9, @ANYRESHEX=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x4040081) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 3.945631233s ago: executing program 2 (id=6763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000380)='./file0\x00', r2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r2, r3}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x30}}, 0x0) 3.8772176s ago: executing program 9 (id=6764): syz_open_dev$usbmon(0x0, 0x3, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x1) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.787784726s ago: executing program 2 (id=6765): pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x25, 0x0, &(0x7f0000000280)) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.783665575s ago: executing program 2 (id=6766): socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, 0x0, 0x10000, 0x6b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002060102000000000000000000000005050004000100000011000300686173683a6e65742c6e6574000000000c00078005ed1300000000006e2e104faf3cb28e05000a00000005000100060000000900020073797a3200"/102], 0x58}}, 0x4000000) r2 = gettid() timer_create(0x74cf6a457b489991, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r3 = socket(0x6, 0x4, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="cfb14e407d33ffffffffffff86dd697a262d00383afefe8000000000000000000000000000aaff0263a92296b5fa2b0addf2b5c1d8890f2d00000000000000000000000000010200000000008005620813310009ff0000000000000000000000000000b39711cf993fbaad6a48fbe8000001000000000000000000000000000000013b000a1865000000f2e11603dfe922c53b1fa857d2df96080242d6727e759333fda9a5ced02befe2069e7a6b7a5925d1f727c8ac9a60ab030681b05361a72a62f47432eea9407f04c57b3c1a110f1682a206000000d568280aa88c"], 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090f26027000fedbdf251f0000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) 2.425113342s ago: executing program 1 (id=6767): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() r5 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r5, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3, 0x0, 0x9}, {0x81, 0x2, 0x6}, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x3}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000"], 0x1c}}, 0x804) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r11, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r10, 0x0, 0x0, 0x0, 0x0, [], [], [0xfd], [0x0, 0x3, 0x400000006]}) 1.743180099s ago: executing program 8 (id=6768): r0 = userfaultfd(0x801) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000043c0)=[{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000340)="723d9d", 0x3}], 0x1, &(0x7f0000002980)=[@sndinfo={0x20, 0x84, 0x2, {0x69, 0x209, 0x8000, 0x7fffffff}}], 0x20, 0x4}], 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x80000000, {{0x2}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1e00) syz_emit_ethernet(0x12e, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0xf8, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x3, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [@routing={0x2c, 0x4, 0x2, 0xcd, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}]}, @hopopts={0x2e, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x9, 0x80, "2fbbea8f5f5ae111dfd9c8dd3ddca95b692dea83378bb978cd058a3dd67e9c2376f6a19a49463ca1a0ddd19f5eabe8815eb3f9f3545264e70e6a7a86013db83c1100226b86d817cff826521559f2cb9e55e05b3f3f0c2c5a11a0c05af968f88e1d135b93d9ee0874c8f8c8c489e39d4e518d97f0902c441c26c6b5f0c930e2c4"}]}], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0) mlock(&(0x7f000019e000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) syz_clone(0x20200000, 0x0, 0xfffffffffffffe53, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.714116535s ago: executing program 6 (id=6769): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x2, 0x5, 0x7, 0x74, 0xffd, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r4, r5, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x400, 0x7cb}, 0x20) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 1.581106798s ago: executing program 9 (id=6770): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.492671176s ago: executing program 1 (id=6771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x74) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) r6 = syz_open_dev$radio(&(0x7f0000000800), 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000f40)={0xb53, 0x1, 0x800}) 1.311282773s ago: executing program 9 (id=6772): unshare(0x4040600) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x2, 0x8000) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r5}, &(0x7f00000000c0)=0x0) unshare(0x20000400) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r7, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r6, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrandom(0x0, 0x0, 0x0) r10 = fanotify_init(0x1, 0x8000) fanotify_mark(r10, 0x39, 0x1a, r4, 0x0) 1.264291036s ago: executing program 2 (id=6773): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(r1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x2, 0x0, 0x0, 0x400, 0x7cb}, 0x20) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='D\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x1, 0x6, @remote}, 0x10) 520.900259ms ago: executing program 1 (id=6774): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101080) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000f000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 460.153146ms ago: executing program 8 (id=6775): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffffffffffe6e) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r6, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbc}, 0xa) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) 0s ago: executing program 9 (id=6776): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c000580090001006d657461000000000c000280080002400023001b0900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x5, 0x296}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x2bcc, &(0x7f0000000240)={0x0, 0xb481, 0x8, 0x2, 0x194}, &(0x7f0000000100), &(0x7f00000002c0)=0x0) r9 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'sit0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, 0x0, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r13}}) connect$tipc(r2, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x1, {0x9a59c369517cb09c, 0x3, 0x3}}, 0x10) syz_io_uring_submit(r6, r8, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE={0x7, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r13}}) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/115, 0x73}], 0x1, 0x0) ptrace$pokeuser(0x6, r5, 0x7, 0x80000000) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2}) kernel console output (not intermixed with test programs): ess `syz.6.6303'. [ 1937.545365][T26113] usb 3-1: config 216 interface 124 altsetting 16 endpoint 0x2 has invalid maxpacket 9560, setting to 1024 [ 1937.606796][T26113] usb 3-1: config 216 interface 124 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 1937.651315][T26113] usb 3-1: config 216 interface 124 altsetting 16 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1937.706856][T26113] usb 3-1: config 216 interface 233 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1937.722909][T26113] usb 3-1: config 216 interface 233 altsetting 4 endpoint 0xF has invalid maxpacket 495, setting to 64 [ 1937.735410][T26113] usb 3-1: config 216 interface 233 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1937.747456][T26113] usb 3-1: config 216 interface 233 altsetting 4 has an endpoint descriptor with address 0x63, changing to 0x3 [ 1937.760796][T26113] usb 3-1: config 216 interface 233 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 1937.773136][T26113] usb 3-1: config 216 interface 233 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1937.784680][T26113] usb 3-1: config 216 interface 233 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1937.799165][T26113] usb 3-1: config 216 interface 233 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1937.813589][T26113] usb 3-1: config 216 interface 233 altsetting 4 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 1937.827284][T26113] usb 3-1: config 216 interface 108 altsetting 3 endpoint 0x7 has an invalid bInterval 64, changing to 7 [ 1937.894349][T26113] usb 3-1: config 216 interface 108 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1937.914567][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1937.961479][T26113] usb 3-1: config 216 interface 108 altsetting 3 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 1937.989910][T26113] usb 3-1: config 216 interface 108 altsetting 3 endpoint 0x8D has invalid maxpacket 21957, setting to 64 [ 1938.005807][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1938.018222][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1938.029461][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1938.040992][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1938.168252][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1938.216646][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1938.249376][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1938.302896][T26113] usb 3-1: config 216 interface 108 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1938.313938][T26113] usb 3-1: config 216 interface 108 altsetting 3 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1938.356279][T26113] usb 3-1: config 216 interface 45 has no altsetting 0 [ 1938.429603][T26113] usb 3-1: config 216 interface 124 has no altsetting 0 [ 1938.436904][T26113] usb 3-1: config 216 interface 233 has no altsetting 0 [ 1938.539867][T26113] usb 3-1: config 216 interface 108 has no altsetting 0 [ 1938.575517][T26113] usb 3-1: string descriptor 0 read error: -71 [ 1938.588436][T26113] usb 3-1: Dual-Role OTG device on HNP port [ 1938.605524][T26113] usb 3-1: can't set HNP mode: -71 [ 1938.900394][T29352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1940.061237][T29364] hsr0: entered promiscuous mode [ 1942.311495][T29376] tipc: Enabled bearer , priority 0 [ 1942.319618][T29376] syzkaller0: entered promiscuous mode [ 1942.326132][T29376] syzkaller0: entered allmulticast mode [ 1942.341347][T29376] tipc: Resetting bearer [ 1942.645000][T29364] hsr0: left promiscuous mode [ 1942.861750][T29386] hsr0: entered promiscuous mode [ 1943.605867][T29389] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1943.705780][ T5882] IPVS: starting estimator thread 0... [ 1943.821296][T29390] IPVS: using max 41 ests per chain, 98400 per kthread [ 1944.582403][ T5882] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1944.887298][T29407] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1944.894878][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1945.097328][ T5882] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 1945.105852][ T5882] usb 2-1: config 7 has no interface number 0 [ 1945.129061][ T5882] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1945.154051][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.189687][ T5882] usb 2-1: Product: syz [ 1945.195021][ T5882] usb 2-1: Manufacturer: syz [ 1945.199761][ T5882] usb 2-1: SerialNumber: syz [ 1945.282058][T29410] netlink: 'syz.8.6326': attribute type 32 has an invalid length. [ 1945.598438][T29376] tipc: Resetting bearer [ 1945.654807][T29376] tipc: Disabling bearer [ 1945.665018][T29386] hsr0: left promiscuous mode [ 1945.859027][T29418] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1947.126511][ T5882] as10x_usb: device has been detected [ 1947.133186][ T5882] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1947.160091][ T5882] usb 2-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1947.690286][ T5882] as10x_usb: error during firmware upload part1 [ 1947.718820][ T5882] Registered device Elgato EyeTV DTT Deluxe [ 1947.725899][ T5882] usb 2-1: USB disconnect, device number 43 [ 1947.993993][ T5882] Unregistered device Elgato EyeTV DTT Deluxe [ 1948.000905][ T5882] as10x_usb: device has been disconnected [ 1948.345736][T29447] input: syz0 as /devices/virtual/input/input228 [ 1948.903413][T29449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29449 comm=syz.6.6335 [ 1948.965418][ T30] audit: type=1800 audit(2000001306.597:2871): pid=29449 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.6335" name="bus" dev="overlay" ino=1142 res=0 errno=0 [ 1949.054975][T29454] tipc: Started in network mode [ 1949.060444][T29454] tipc: Node identity ded69f8bcdef, cluster identity 4711 [ 1949.076200][T29454] tipc: Enabled bearer , priority 0 [ 1949.085235][T29452] tipc: Enabled bearer , priority 0 [ 1949.097616][T29454] syzkaller0: entered promiscuous mode [ 1949.133158][T29454] syzkaller0: entered allmulticast mode [ 1949.180744][T29452] syzkaller0: entered promiscuous mode [ 1949.221657][T29452] syzkaller0: entered allmulticast mode [ 1949.253575][T29454] tipc: Resetting bearer [ 1949.264735][T29458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6340'. [ 1949.289027][T29452] tipc: Resetting bearer [ 1949.573643][T20758] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 1949.584136][ T5882] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1949.797226][T20758] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1949.808444][T20758] usb 9-1: config 0 has no interface number 0 [ 1949.818383][ T5882] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1949.831311][T20758] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1949.937154][ T5882] usb 3-1: config 0 has no interface number 0 [ 1949.967628][ T5882] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1949.983734][T20758] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1949.996933][T20758] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.011909][T20758] usb 9-1: Product: syz [ 1950.016654][ T5882] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1950.028008][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.056286][T20758] usb 9-1: Manufacturer: syz [ 1950.061479][T20758] usb 9-1: SerialNumber: syz [ 1950.066485][ T5882] usb 3-1: Product: syz [ 1950.121275][ T10] tipc: Node number set to 322543499 [ 1950.373073][ T5882] usb 3-1: Manufacturer: syz [ 1950.379018][ T5882] usb 3-1: SerialNumber: syz [ 1950.386553][T20758] usb 9-1: config 0 descriptor?? [ 1950.432240][ T30] audit: type=1107 audit(2000001308.037:2872): pid=29460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1950.433304][ T8846] bridge0: port 3(team0) entered disabled state [ 1950.433430][ T5882] usb 3-1: config 0 descriptor?? [ 1950.976897][ T30] audit: type=1800 audit(2000001308.617:2873): pid=29481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.6346" name="bus" dev="overlay" ino=1171 res=0 errno=0 [ 1951.005196][ T8846] bridge_slave_1: left allmulticast mode [ 1951.010944][ T8846] bridge_slave_1: left promiscuous mode [ 1951.016937][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.482420][T20758] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1951.492690][ T5882] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1951.511889][T20758] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1951.521102][ T5882] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1951.533426][ T8846] bridge_slave_0: left allmulticast mode [ 1951.535024][T20758] usb 9-1: USB disconnect, device number 59 [ 1951.547718][ T8846] bridge_slave_0: left promiscuous mode [ 1951.557617][ T5882] usb 3-1: USB disconnect, device number 98 [ 1951.557763][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.664773][T29486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6347'. [ 1951.769947][T29486] can: request_module (can-proto-3) failed. [ 1951.937855][T29492] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.6348' sets config #6 [ 1952.355810][ T8846] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1952.367261][ T8846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1952.386791][ T8846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1952.406745][ T8846] bond0 (unregistering): Released all slaves [ 1952.423245][ T8846] bond1 (unregistering): Released all slaves [ 1952.439912][ T8846] bond2 (unregistering): Released all slaves [ 1952.466677][ T8846] bond3 (unregistering): Released all slaves [ 1952.517937][ T8846] bond4 (unregistering): Released all slaves [ 1952.680839][ T8846] bond5 (unregistering): Released all slaves [ 1952.691423][T29483] hsr0: entered promiscuous mode [ 1952.696773][T29453] tipc: Resetting bearer [ 1952.711427][T29453] tipc: Disabling bearer [ 1952.719298][T29451] tipc: Resetting bearer [ 1952.748385][T29451] tipc: Disabling bearer [ 1952.848318][ T8846] 8ÿ: left promiscuous mode [ 1952.936960][ T8846] tipc: Left network mode [ 1953.280569][T29508] netlink: 'syz.2.6353': attribute type 32 has an invalid length. [ 1954.231398][T29484] hsr0: left promiscuous mode [ 1954.681680][ T5882] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1955.792191][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 1955.826434][ T5882] usb 3-1: config 0 has no interfaces? [ 1955.839332][ T5882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1955.889720][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.905697][ T5882] usb 3-1: Product: syz [ 1955.911212][ T5882] usb 3-1: Manufacturer: syz [ 1955.957856][ T8846] hsr_slave_0: left promiscuous mode [ 1956.001558][ T5882] usb 3-1: SerialNumber: syz [ 1956.018073][ T5882] usb 3-1: config 0 descriptor?? [ 1956.033906][ T8846] hsr_slave_1: left promiscuous mode [ 1956.066345][ T8846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1956.100353][ T8846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1956.110128][ T8846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1956.120889][ T8846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1956.166687][ T8846] veth1_macvtap: left promiscuous mode [ 1956.201729][ T8846] veth0_macvtap: left promiscuous mode [ 1956.219058][ T8846] veth1_vlan: left promiscuous mode [ 1956.256577][ T8846] veth0_vlan: left promiscuous mode [ 1956.300699][ T5882] usb 3-1: USB disconnect, device number 99 [ 1956.379209][T29546] FAULT_INJECTION: forcing a failure. [ 1956.379209][T29546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1956.402606][T29546] CPU: 0 UID: 0 PID: 29546 Comm: syz.1.6362 Not tainted syzkaller #0 PREEMPT(full) [ 1956.402628][T29546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1956.402635][T29546] Call Trace: [ 1956.402640][T29546] [ 1956.402645][T29546] dump_stack_lvl+0x16c/0x1f0 [ 1956.402668][T29546] should_fail_ex+0x512/0x640 [ 1956.402688][T29546] _copy_from_user+0x2e/0xd0 [ 1956.402706][T29546] ucma_write+0x128/0x330 [ 1956.402721][T29546] ? __pfx_ucma_write+0x10/0x10 [ 1956.402733][T29546] ? bpf_lsm_file_permission+0x9/0x10 [ 1956.402751][T29546] ? security_file_permission+0x71/0x210 [ 1956.402771][T29546] ? rw_verify_area+0xcf/0x6c0 [ 1956.402786][T29546] ? __pfx_ucma_write+0x10/0x10 [ 1956.402797][T29546] vfs_write+0x2a0/0x11d0 [ 1956.402815][T29546] ? __pfx_vfs_write+0x10/0x10 [ 1956.402828][T29546] ? find_held_lock+0x2b/0x80 [ 1956.402840][T29546] ? __fget_files+0x204/0x3c0 [ 1956.402858][T29546] ? __fget_files+0x20e/0x3c0 [ 1956.402876][T29546] ksys_write+0x1f8/0x250 [ 1956.402890][T29546] ? __pfx_ksys_write+0x10/0x10 [ 1956.402908][T29546] do_syscall_64+0xcd/0xfa0 [ 1956.402924][T29546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.402937][T29546] RIP: 0033:0x7ff990b8efc9 [ 1956.402950][T29546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1956.402961][T29546] RSP: 002b:00007ff991ab8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1956.402973][T29546] RAX: ffffffffffffffda RBX: 00007ff990de6090 RCX: 00007ff990b8efc9 [ 1956.402980][T29546] RDX: 0000000000000118 RSI: 0000200000000140 RDI: 0000000000000007 [ 1956.402987][T29546] RBP: 00007ff991ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1956.402994][T29546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.403006][T29546] R13: 00007ff990de6128 R14: 00007ff990de6090 R15: 00007ffeb7ed8698 [ 1956.403022][T29546] [ 1956.673526][T21840] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 1956.837913][T21840] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1956.883591][T21840] usb 9-1: config 0 has no interface number 0 [ 1956.900647][T21840] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1956.939287][T21840] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1956.957086][T21840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.973099][T21840] usb 9-1: Product: syz [ 1956.977296][T21840] usb 9-1: Manufacturer: syz [ 1956.983207][T21840] usb 9-1: SerialNumber: syz [ 1957.003148][T21840] usb 9-1: config 0 descriptor?? [ 1957.102817][T29560] netlink: 'syz.9.6366': attribute type 32 has an invalid length. [ 1957.644360][ T5882] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1958.415552][ T5882] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1958.427741][ T5882] usb 2-1: config 0 has no interface number 0 [ 1958.431411][T26168] IPVS: ip_vs_send_async error -19 [ 1958.443030][ T5882] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1958.452491][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.680592][ T5882] usb 2-1: Product: syz [ 1958.691340][ T5882] usb 2-1: Manufacturer: syz [ 1958.700849][ T5882] usb 2-1: SerialNumber: syz [ 1958.860512][ T5882] usb 2-1: config 0 descriptor?? [ 1958.939705][ T8846] team_slave_1 (unregistering): left promiscuous mode [ 1958.971955][ T8846] team_slave_1 (unregistering): left allmulticast mode [ 1959.001585][ T8846] team0 (unregistering): Port device team_slave_1 removed [ 1959.114888][ T8846] team_slave_0 (unregistering): left promiscuous mode [ 1959.130170][ T8846] team_slave_0 (unregistering): left allmulticast mode [ 1959.156993][ T8846] team0 (unregistering): Port device team_slave_0 removed [ 1959.428052][ T5882] usb 2-1: Firmware: major: 7, minor: 158, hardware type: UNKNOWN (102) [ 1959.636956][ T5882] usb 2-1: Firmware: build [ 1959.974011][ T30] audit: type=1400 audit(2000001317.607:2874): avc: denied { create } for pid=29576 comm="syz.9.6369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1960.361360][ T30] audit: type=1400 audit(2000001317.607:2875): avc: denied { setopt } for pid=29576 comm="syz.9.6369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1960.452744][ T30] audit: type=1400 audit(2000001318.097:2876): avc: denied { create } for pid=29552 comm="syz.1.6365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1960.475482][ T30] audit: type=1400 audit(2000001318.117:2877): avc: denied { write } for pid=29552 comm="syz.1.6365" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1960.645510][ T30] audit: type=1400 audit(2000001318.287:2878): avc: denied { read write } for pid=28179 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1960.673004][ T30] audit: type=1400 audit(2000001318.287:2879): avc: denied { open } for pid=28179 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1960.692454][ T5882] usb 2-1: failed to fetch extended address, random address set [ 1960.701370][ T30] audit: type=1400 audit(2000001318.287:2880): avc: denied { ioctl } for pid=28179 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1960.735375][ T5882] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1960.742787][ T30] audit: type=1400 audit(2000001318.387:2881): avc: denied { create } for pid=29581 comm="syz.9.6370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.744041][ T5882] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 1960.772986][ T30] audit: type=1400 audit(2000001318.387:2882): avc: denied { write } for pid=29581 comm="syz.9.6370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.804012][ T30] audit: type=1400 audit(2000001318.447:2883): avc: denied { prog_load } for pid=29581 comm="syz.9.6370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1960.979259][T29541] tipc: Enabled bearer , priority 0 [ 1960.990719][T29547] tipc: Resetting bearer [ 1960.998031][T29542] syzkaller0: entered promiscuous mode [ 1961.004320][T29542] syzkaller0: entered allmulticast mode [ 1961.017287][T29572] hsr0: entered promiscuous mode [ 1961.050127][T29572] hsr0: left promiscuous mode [ 1961.056757][T29561] netdevsim netdevsim6: Direct firmware load for . [ 1961.056757][T29561] failed with error -2 [ 1961.080213][T21840] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1961.113869][T29561] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1961.113869][T29561] [ 1961.119223][ T5882] usb 2-1: USB disconnect, device number 44 [ 1961.132461][T29542] tipc: Resetting bearer [ 1961.171759][T21840] usb 9-1: USB disconnect, device number 60 [ 1961.320057][T29542] tipc: Disabling bearer [ 1963.162301][ T8846] IPVS: stop unused estimator thread 0... [ 1963.237480][T29603] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1963.411381][ T5882] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 1963.430032][T29613] tipc: Enabled bearer , priority 0 [ 1963.443128][T29613] syzkaller0: entered promiscuous mode [ 1963.449063][T29613] syzkaller0: entered allmulticast mode [ 1963.480134][T29613] tipc: Resetting bearer [ 1963.520060][T29613] tipc: Disabling bearer [ 1963.573964][ T5882] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.596132][ T5882] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1963.640548][ T5882] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1963.661522][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.671681][ T5882] usb 9-1: Product: syz [ 1963.676263][ T5882] usb 9-1: Manufacturer: syz [ 1963.682314][ T5882] usb 9-1: SerialNumber: syz [ 1963.696358][ T5882] usb 9-1: config 0 descriptor?? [ 1964.299858][T29627] ntfs3(loop1): try to read out of volume at offset 0x0 [ 1964.816093][T29628] hsr0: entered promiscuous mode [ 1965.196391][T29633] tipc: Enabled bearer , priority 0 [ 1965.204710][T29633] syzkaller0: entered promiscuous mode [ 1965.210221][T29633] syzkaller0: entered allmulticast mode [ 1965.244667][T29633] tipc: Resetting bearer [ 1965.317695][T29637] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1965.343018][T20758] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1965.358032][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1965.358049][ T30] audit: type=1400 audit(2000001322.997:2924): avc: denied { read } for pid=29640 comm="syz.6.6386" dev="nsfs" ino=4026535288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1965.386619][ T30] audit: type=1400 audit(2000001322.997:2925): avc: denied { open } for pid=29640 comm="syz.6.6386" path="net:[4026535288]" dev="nsfs" ino=4026535288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1965.415760][ T30] audit: type=1400 audit(2000001322.997:2926): avc: denied { create } for pid=29640 comm="syz.6.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1965.436227][ T30] audit: type=1400 audit(2000001322.997:2927): avc: denied { connect } for pid=29640 comm="syz.6.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1965.469803][ T30] audit: type=1400 audit(2000001323.107:2928): avc: denied { create } for pid=29640 comm="syz.6.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1965.502682][T20758] usb 2-1: Using ep0 maxpacket: 8 [ 1965.535561][ T5882] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1965.613649][T20758] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1965.629245][T20758] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1965.649649][T20758] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1965.651882][ T30] audit: type=1400 audit(2000001323.107:2929): avc: denied { write } for pid=29640 comm="syz.6.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1965.695700][T20758] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1965.703595][ T30] audit: type=1400 audit(2000001323.107:2930): avc: denied { module_request } for pid=29640 comm="syz.6.6386" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1965.706590][T20758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.749766][T20758] usb 2-1: config 0 descriptor?? [ 1965.773060][ T5882] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1965.781326][ T5882] usb 3-1: config 0 has no interface number 0 [ 1965.791778][ T5882] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1965.808558][ T5882] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1965.823573][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.833572][ T5882] usb 3-1: Product: syz [ 1965.840098][ T5882] usb 3-1: Manufacturer: syz [ 1965.845342][ T5882] usb 3-1: SerialNumber: syz [ 1965.858113][ T5882] usb 3-1: config 0 descriptor?? [ 1966.080327][ T30] audit: type=1400 audit(2000001323.717:2931): avc: denied { create } for pid=29632 comm="syz.2.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1966.123186][ T5889] usb 9-1: USB disconnect, device number 61 [ 1966.159811][ T30] audit: type=1400 audit(2000001323.797:2932): avc: denied { read write } for pid=29662 comm="syz.8.6387" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1966.192307][ T30] audit: type=1400 audit(2000001323.797:2933): avc: denied { open } for pid=29662 comm="syz.8.6387" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1966.232710][T20758] usbhid 2-1:0.0: can't add hid device: -71 [ 1966.239731][T20758] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1966.253229][T20758] usb 2-1: USB disconnect, device number 45 [ 1966.479091][ T5882] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1966.566181][ T5882] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1966.590866][T29632] tipc: Resetting bearer [ 1966.767626][T29632] tipc: Disabling bearer [ 1966.783563][ T5882] usb 3-1: USB disconnect, device number 100 [ 1967.330783][T29621] hsr0: left promiscuous mode [ 1967.518779][T29681] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1968.386985][T29680] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1968.553143][T29689] smc: net device bond0 applied user defined pnetid SYZ2 [ 1968.581705][T29690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6391'. [ 1969.708648][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1970.388877][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1970.388893][ T30] audit: type=1400 audit(2000001328.027:2950): avc: denied { unmount } for pid=28179 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1970.644978][T29716] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6399'. [ 1970.671414][T29716] gretap0: entered promiscuous mode [ 1970.700975][T29719] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6399'. [ 1970.711328][T29719] 0ªî{X¹¦: renamed from gretap0 [ 1970.774217][T29719] 0ªî{X¹¦: left promiscuous mode [ 1970.779423][T29719] 0ªî{X¹¦: entered allmulticast mode [ 1970.847087][T29719] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1970.880919][ T30] audit: type=1400 audit(2000001328.517:2951): avc: denied { setopt } for pid=29714 comm="syz.9.6401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1970.986888][ T30] audit: type=1400 audit(2000001328.607:2952): avc: denied { create } for pid=29717 comm="syz.2.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1971.009981][ T30] audit: type=1400 audit(2000001328.607:2953): avc: denied { setopt } for pid=29717 comm="syz.2.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1971.051403][ T30] audit: type=1400 audit(2000001328.607:2954): avc: denied { write } for pid=29717 comm="syz.2.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1971.080314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1971.210229][ T30] audit: type=1400 audit(2000001328.607:2955): avc: denied { connect } for pid=29717 comm="syz.2.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1971.254692][ T30] audit: type=1400 audit(2000001328.607:2956): avc: denied { name_connect } for pid=29717 comm="syz.2.6403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1971.509702][T29729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29729 comm=syz.8.6402 [ 1971.623987][ T30] audit: type=1400 audit(2000001329.247:2957): avc: denied { mount } for pid=29718 comm="syz.8.6402" name="/" dev="ramfs" ino=146745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1971.657096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1971.769596][ T30] audit: type=1400 audit(2000001329.407:2958): avc: denied { create } for pid=29730 comm="syz.1.6404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1971.801425][T29731] Bluetooth: MGMT ver 1.23 [ 1971.817527][ T30] audit: type=1400 audit(2000001329.437:2959): avc: denied { ioctl } for pid=29730 comm="syz.1.6404" path="socket:[146750]" dev="sockfs" ino=146750 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1971.844766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1972.301279][ T5882] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1972.472348][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1972.511115][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1973.023147][ T5882] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1973.026450][T29742] ntfs3(loop2): try to read out of volume at offset 0x0 [ 1973.038417][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.079227][ T5882] usb 2-1: config 0 descriptor?? [ 1973.392489][ T5889] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1973.651391][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 1973.657990][ T5889] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1973.669924][ T5889] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1973.684768][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1973.691586][ T5889] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1973.706156][ T5882] waltop 0003:172F:0032.0063: unknown main item tag 0x0 [ 1973.714258][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.722586][ T5882] waltop 0003:172F:0032.0063: unknown main item tag 0x0 [ 1973.731072][ T5882] waltop 0003:172F:0032.0063: unknown main item tag 0x0 [ 1973.740983][ T5889] usb 3-1: config 0 descriptor?? [ 1973.747253][ T5882] waltop 0003:172F:0032.0063: unknown main item tag 0x0 [ 1973.755228][ T5882] waltop 0003:172F:0032.0063: unknown main item tag 0x0 [ 1973.766461][ T5882] waltop 0003:172F:0032.0063: hidraw0: USB HID v0.01 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 1974.261739][T29754] fuse: Unknown parameter '0x0000000000000007ÿÿÿÿ00000000000000000000' [ 1974.777989][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 1974.795110][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1974.840480][ T5889] usb 3-1: USB disconnect, device number 101 [ 1975.237606][T29763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6413'. [ 1975.631261][T26788] Bluetooth: hci3: command 0x0405 tx timeout [ 1975.831383][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1975.831395][ T30] audit: type=1400 audit(2000001333.467:2982): avc: denied { name_bind } for pid=29766 comm="syz.8.6415" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1975.980511][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.987579][T21840] usb 2-1: USB disconnect, device number 46 [ 1976.092039][ T30] audit: type=1400 audit(2000001333.737:2983): avc: denied { read write } for pid=29775 comm="syz.6.6419" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1976.129929][ T30] audit: type=1400 audit(2000001333.767:2984): avc: denied { open } for pid=29775 comm="syz.6.6419" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1976.160380][ T30] audit: type=1400 audit(2000001333.767:2985): avc: denied { ioctl } for pid=29775 comm="syz.6.6419" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1976.568310][T29786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29786 comm=syz.2.6417 [ 1978.035056][ T5828] Bluetooth: hci7: command 0x0406 tx timeout [ 1978.116123][T12046] Bluetooth: hci5: command 0x1003 tx timeout [ 1978.122853][T26788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1978.698290][T29808] ntfs3(loop6): try to read out of volume at offset 0x0 [ 1978.776300][T29806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6426'. [ 1978.865607][T29816] overlay: Unknown parameter 'uid>00000000000000000000' [ 1978.942953][ T30] audit: type=1400 audit(2000001336.567:2986): avc: denied { read write } for pid=29809 comm="syz.9.6428" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1979.004845][ T30] audit: type=1400 audit(2000001336.567:2987): avc: denied { open } for pid=29809 comm="syz.9.6428" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1979.260072][T29814] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.6429'. [ 1979.276109][T29814] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1979.290645][T29814] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1981.227425][ T30] audit: type=1400 audit(2000001338.867:2988): avc: denied { sys_module } for pid=29829 comm="syz.9.6433" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1981.519472][ T30] audit: type=1400 audit(2000001339.157:2989): avc: denied { read write } for pid=29841 comm="syz.2.6435" name="radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1982.237925][ T30] audit: type=1400 audit(2000001339.157:2990): avc: denied { open } for pid=29841 comm="syz.2.6435" path="/dev/radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1982.451309][ T30] audit: type=1400 audit(2000001339.257:2991): avc: denied { create } for pid=29841 comm="syz.2.6435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1982.544193][ T30] audit: type=1400 audit(2000001340.177:2992): avc: denied { write } for pid=29846 comm="syz.1.6436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1983.061096][T29861] can0: slcan on ttyS3. [ 1983.282476][T29868] tipc: Enabled bearer , priority 0 [ 1983.426386][T29868] syzkaller0: entered promiscuous mode [ 1983.433900][T29868] syzkaller0: entered allmulticast mode [ 1983.972463][ T30] audit: type=1400 audit(2000001341.167:2993): avc: denied { firmware_load } for pid=29869 comm="syz.2.6443" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1983.982944][T29861] can0 (unregistered): slcan off ttyS3. [ 1984.053573][T29871] tipc: Resetting bearer [ 1984.200214][ T30] audit: type=1400 audit(2000001341.837:2994): avc: denied { shutdown } for pid=29878 comm="syz.1.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1984.308661][ T43] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 1984.530120][T29882] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6444'. [ 1984.583236][T29885] ntfs3(loop2): try to read out of volume at offset 0x0 [ 1984.661266][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1984.713854][ T43] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1984.724113][ T43] usb 9-1: config 0 has no interface number 0 [ 1984.730930][ T43] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1984.754544][ T43] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1984.767012][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.775722][ T43] usb 9-1: Product: syz [ 1984.780140][ T43] usb 9-1: Manufacturer: syz [ 1984.799099][ T43] usb 9-1: SerialNumber: syz [ 1984.838841][ T43] usb 9-1: config 0 descriptor?? [ 1984.851472][T21840] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1984.911965][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1985.025591][T21840] usb 3-1: Using ep0 maxpacket: 8 [ 1985.115265][T21840] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1985.125191][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1985.133003][T21840] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1985.152163][T21840] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1985.158279][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1985.159162][T21840] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1985.184425][T21840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.203753][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1985.205944][T21840] usb 3-1: config 0 descriptor?? [ 1985.236486][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1985.246676][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1985.258155][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1985.272049][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1985.291481][ T10] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1985.300935][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.310613][ T10] usb 2-1: Product: syz [ 1985.315844][ T10] usb 2-1: Manufacturer: syz [ 1985.320909][ T10] usb 2-1: SerialNumber: syz [ 1985.325401][T29891] tipc: Enabled bearer , priority 0 [ 1985.328628][ T10] usb 2-1: config 0 descriptor?? [ 1985.341530][T29891] syzkaller0: entered promiscuous mode [ 1985.343652][T29883] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1985.356762][T29891] syzkaller0: entered allmulticast mode [ 1985.363526][ T10] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected [ 1985.372713][ T10] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 1985.394392][ T43] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1985.404625][ T43] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1985.417230][T29863] tipc: Resetting bearer [ 1985.440585][ T43] usb 9-1: USB disconnect, device number 62 [ 1985.450474][T29863] tipc: Disabling bearer [ 1985.465829][T29894] tipc: Resetting bearer [ 1985.598777][T29881] netlink: 'syz.1.6445': attribute type 7 has an invalid length. [ 1985.606847][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1985.625014][ T30] audit: type=1400 audit(2000001343.267:2995): avc: denied { write } for pid=29878 comm="syz.1.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1985.655461][T21840] usbhid 3-1:0.0: can't add hid device: -71 [ 1985.663763][T21840] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1985.666049][ T10] usb 2-1: USB disconnect, device number 47 [ 1985.676088][T21840] usb 3-1: USB disconnect, device number 102 [ 1985.699925][ T10] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1985.709837][ T10] iuu_phoenix 2-1:0.0: device disconnected [ 1985.802074][T29889] usb 10-1: new full-speed USB device number 90 using dummy_hcd [ 1985.985390][T29889] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1986.342382][T29889] usb 10-1: config 0 has no interface number 0 [ 1986.350683][T29889] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1986.363537][T29889] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1986.385465][T29889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.399718][T29889] usb 10-1: Product: syz [ 1986.405408][T29889] usb 10-1: Manufacturer: syz [ 1986.414954][T29889] usb 10-1: SerialNumber: syz [ 1986.427749][T29889] usb 10-1: config 0 descriptor?? [ 1986.922994][ T30] audit: type=1400 audit(2000001344.567:2996): avc: denied { read write } for pid=29902 comm="syz.2.6452" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1986.997107][ T30] audit: type=1400 audit(2000001344.567:2997): avc: denied { open } for pid=29902 comm="syz.2.6452" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1987.155382][ T30] audit: type=1400 audit(2000001344.587:2998): avc: denied { ioctl } for pid=29902 comm="syz.2.6452" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1987.875531][T29889] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1987.917152][T29909] tipc: Resetting bearer [ 1988.214636][T29889] usb 10-1: USB disconnect, device number 90 [ 1988.251930][T29918] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1988.259125][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1988.326066][T29923] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 1988.406496][ T30] audit: type=1400 audit(2000001345.907:2999): avc: denied { append } for pid=29920 comm="syz.1.6456" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1988.448392][T29909] tipc: Disabling bearer [ 1990.322396][ T30] audit: type=1400 audit(2000001347.557:3000): avc: denied { create } for pid=29937 comm="syz.9.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1990.575871][T29945] netlink: 'syz.2.6459': attribute type 1 has an invalid length. [ 1990.782553][T29948] tipc: Enabled bearer , priority 0 [ 1990.793532][T29948] syzkaller0: entered promiscuous mode [ 1990.799517][T29948] syzkaller0: entered allmulticast mode [ 1990.879758][T29953] x_tables: duplicate underflow at hook 3 [ 1990.886272][T21840] hid (null): invalid report_size 868 [ 1990.897789][T21840] hid (null): unknown global tag 0xc [ 1990.911374][T21840] hid (null): unknown global tag 0xc2 [ 1990.918052][T29951] x_tables: duplicate underflow at hook 3 [ 1990.944171][T21840] hid-generic 0FFF:0009:FFFFFC00.0064: unknown main item tag 0x7 [ 1990.965834][T21840] hid-generic 0FFF:0009:FFFFFC00.0064: unknown main item tag 0x1 [ 1990.995257][T21840] hid-generic 0FFF:0009:FFFFFC00.0064: invalid report_size 868 [ 1991.004866][ T30] audit: type=1400 audit(2000001348.637:3001): avc: denied { ioctl } for pid=29949 comm="syz.6.6463" path="socket:[146077]" dev="sockfs" ino=146077 ioctlcmd=0x4802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1991.014847][T21840] hid-generic 0FFF:0009:FFFFFC00.0064: item 0 2 1 7 parsing failed [ 1991.047695][T21840] hid-generic 0FFF:0009:FFFFFC00.0064: probe with driver hid-generic failed with error -22 [ 1991.172680][T29950] tipc: Resetting bearer [ 1991.215106][T29957] svc: failed to register nfsdv3 RPC service (errno 111). [ 1991.225305][T29962] FAULT_INJECTION: forcing a failure. [ 1991.225305][T29962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1991.242958][T29957] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1991.253274][T29962] CPU: 1 UID: 0 PID: 29962 Comm: syz.8.6461 Not tainted syzkaller #0 PREEMPT(full) [ 1991.253298][T29962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1991.253309][T29962] Call Trace: [ 1991.253315][T29962] [ 1991.253324][T29962] dump_stack_lvl+0x16c/0x1f0 [ 1991.253352][T29962] should_fail_ex+0x512/0x640 [ 1991.253379][T29962] _copy_from_user+0x2e/0xd0 [ 1991.253405][T29962] ucma_resolve_addr+0x9e/0x270 [ 1991.253429][T29962] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 1991.253479][T29962] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 1991.253500][T29962] ucma_write+0x1fb/0x330 [ 1991.253520][T29962] ? __pfx_ucma_write+0x10/0x10 [ 1991.253538][T29962] ? bpf_lsm_file_permission+0x9/0x10 [ 1991.253564][T29962] ? security_file_permission+0x71/0x210 [ 1991.253594][T29962] ? rw_verify_area+0xcf/0x6c0 [ 1991.253616][T29962] ? __pfx_ucma_write+0x10/0x10 [ 1991.253635][T29962] vfs_write+0x2a0/0x11d0 [ 1991.253663][T29962] ? __pfx_vfs_write+0x10/0x10 [ 1991.253683][T29962] ? find_held_lock+0x2b/0x80 [ 1991.253701][T29962] ? __fget_files+0x204/0x3c0 [ 1991.253728][T29962] ? __fget_files+0x20e/0x3c0 [ 1991.253758][T29962] ksys_write+0x1f8/0x250 [ 1991.253780][T29962] ? __pfx_ksys_write+0x10/0x10 [ 1991.253810][T29962] do_syscall_64+0xcd/0xfa0 [ 1991.253842][T29962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.253860][T29962] RIP: 0033:0x7fb96a38efc9 [ 1991.253875][T29962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1991.253891][T29962] RSP: 002b:00007fb96b158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1991.253908][T29962] RAX: ffffffffffffffda RBX: 00007fb96a5e6090 RCX: 00007fb96a38efc9 [ 1991.253920][T29962] RDX: 0000000000000118 RSI: 0000200000000140 RDI: 0000000000000009 [ 1991.253931][T29962] RBP: 00007fb96b158090 R08: 0000000000000000 R09: 0000000000000000 [ 1991.253941][T29962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.253951][T29962] R13: 00007fb96a5e6128 R14: 00007fb96a5e6090 R15: 00007fff96b79f28 [ 1991.253974][T29962] [ 1991.312776][ T5882] usb 10-1: new full-speed USB device number 91 using dummy_hcd [ 1992.181673][ T30] audit: type=1400 audit(2000001349.817:3002): avc: denied { bind } for pid=29968 comm="syz.6.6467" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1992.244726][ T30] audit: type=1400 audit(2000001349.817:3003): avc: denied { name_bind } for pid=29968 comm="syz.6.6467" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1992.268169][ T30] audit: type=1400 audit(2000001349.817:3004): avc: denied { node_bind } for pid=29968 comm="syz.6.6467" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1992.292011][T21840] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1992.452696][T21840] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1992.465370][T21840] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1992.479409][ T5882] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1992.485543][T21840] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1992.489386][ T5882] usb 10-1: config 0 has no interface number 0 [ 1992.497684][T21840] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1992.503083][ T5882] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1992.519397][T21840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.521482][ T5882] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1992.531943][T21840] usb 9-1: config 0 descriptor?? [ 1992.537109][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.550167][ T5882] usb 10-1: Product: syz [ 1992.554907][ T5882] usb 10-1: Manufacturer: syz [ 1992.559625][ T5882] usb 10-1: SerialNumber: syz [ 1992.574337][ T5882] usb 10-1: config 0 descriptor?? [ 1993.197709][T29983] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6465'. [ 1993.965620][T21840] usbhid 9-1:0.0: can't add hid device: -71 [ 1993.972001][T21840] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1993.999866][T21840] usb 9-1: USB disconnect, device number 63 [ 1994.037592][T29989] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1994.053641][T29989] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1994.067373][T29989] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1994.067373][T29989] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1994.111957][T29989] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1994.194969][T29992] netlink: 'syz.6.6472': attribute type 1 has an invalid length. [ 1994.239716][T29989] CUSE: DEVNAME unspecified [ 1995.106697][ T5882] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1995.632796][ T30] audit: type=1400 audit(2000001353.077:3005): avc: denied { ioctl } for pid=29995 comm="syz.8.6473" path="/dev/radio5" dev="devtmpfs" ino=984 ioctlcmd=0x5639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1995.731976][ T5882] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1995.756838][ T5882] usb 10-1: USB disconnect, device number 91 [ 1995.851436][T29947] tipc: Resetting bearer [ 1996.132990][T29947] tipc: Disabling bearer [ 1996.411518][ T5882] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1996.674549][ T5882] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1996.709237][ T5882] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1996.751493][ T30] audit: type=1400 audit(2000001354.387:3006): avc: denied { load_policy } for pid=30013 comm="syz.6.6478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1996.774777][T30017] SELinux: failed to load policy [ 1997.206239][ T5882] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1997.228435][ T5882] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1997.239294][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.250290][ T5882] usb 9-1: config 0 descriptor?? [ 1997.915472][T30032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6475'. [ 1998.234421][ T30] audit: type=1400 audit(2000001355.787:3007): avc: denied { read write } for pid=30033 comm="syz.1.6483" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1998.506392][ T30] audit: type=1400 audit(2000001355.787:3008): avc: denied { open } for pid=30033 comm="syz.1.6483" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1998.536642][ T30] audit: type=1400 audit(2000001355.787:3009): avc: denied { ioctl } for pid=30033 comm="syz.1.6483" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1998.563985][ T5968] libceph: connect (1)[b::]:6789 error -101 [ 1998.632500][ T5968] libceph: mon0 (1)[b::]:6789 connect error [ 1998.683355][ T30] audit: type=1400 audit(2000001356.317:3010): avc: denied { read } for pid=30019 comm="syz.9.6480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1998.730954][ T30] audit: type=1400 audit(2000001356.367:3011): avc: denied { connect } for pid=30019 comm="syz.9.6480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1998.910820][ T30] audit: type=1400 audit(2000001356.547:3012): avc: denied { setopt } for pid=30019 comm="syz.9.6480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1998.923961][ T5968] libceph: connect (1)[b::]:6789 error -101 [ 1998.966833][T30035] ceph: No mds server is up or the cluster is laggy [ 1999.041825][ T5968] libceph: mon0 (1)[b::]:6789 connect error [ 1999.059864][T26788] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 1999.154010][T30050] hsr0: entered promiscuous mode [ 1999.171572][T30049] hsr0: left promiscuous mode [ 1999.179050][ T5882] usbhid 9-1:0.0: can't add hid device: -71 [ 1999.185172][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1999.199854][T30046] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6484'. [ 1999.209890][ T30] audit: type=1400 audit(2000001356.837:3013): avc: denied { write } for pid=30040 comm="syz.2.6484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1999.232757][ T5882] usb 9-1: USB disconnect, device number 64 [ 1999.276885][ T30] audit: type=1400 audit(2000001356.837:3014): avc: denied { nlmsg_write } for pid=30040 comm="syz.2.6484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1999.690584][T30055] tipc: Enabled bearer , priority 0 [ 1999.712850][T30055] syzkaller0: entered promiscuous mode [ 1999.719041][T30055] syzkaller0: entered allmulticast mode [ 1999.799923][T30060] tipc: Resetting bearer [ 2000.041414][ T5968] usb 10-1: new full-speed USB device number 92 using dummy_hcd [ 2000.347284][ T5968] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 2000.367191][ T5968] usb 10-1: config 0 has no interface number 0 [ 2000.389934][ T5968] usb 10-1: config 0 interface 41 has no altsetting 0 [ 2000.394776][T30073] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 2000.404972][T30073] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2000.439494][ T5968] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2000.443917][T30076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6492'. [ 2000.451282][ T5968] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.460872][T30073] vhci_hcd vhci_hcd.0: Device attached [ 2000.504753][ T5968] usb 10-1: Product: syz [ 2000.511772][ T5968] usb 10-1: Manufacturer: syz [ 2000.518207][ T5968] usb 10-1: SerialNumber: syz [ 2000.574731][ T5968] usb 10-1: config 0 descriptor?? [ 2000.893629][T20758] usb 46-1: SetAddress Request (2) to port 0 [ 2001.016897][T20758] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2001.047591][T30074] vhci_hcd: connection closed [ 2001.049659][T26619] vhci_hcd: stop threads [ 2001.059098][T26619] vhci_hcd: release socket [ 2001.063927][T26619] vhci_hcd: disconnect device [ 2001.121642][T30082] syzkaller0: entered promiscuous mode [ 2001.127247][T30082] syzkaller0: entered allmulticast mode [ 2001.657586][ T30] audit: type=1400 audit(2000001359.297:3015): avc: denied { sqpoll } for pid=30090 comm="syz.6.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2001.783880][ T30] audit: type=1400 audit(2000001359.427:3016): avc: denied { getopt } for pid=30096 comm="syz.8.6498" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2002.065420][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2002.210184][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6499'. [ 2002.672344][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2002.707611][ T10] usb 2-1: config 0 has no interface number 0 [ 2002.749500][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2002.890310][ T5968] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2002.906868][ T5968] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 2002.918095][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.922357][T30055] tipc: Resetting bearer [ 2002.933166][ T10] usb 2-1: Product: syz [ 2002.968752][ T10] usb 2-1: Manufacturer: syz [ 2002.969235][ T5968] usb 10-1: USB disconnect, device number 92 [ 2003.005812][ T10] usb 2-1: SerialNumber: syz [ 2003.026876][ T10] usb 2-1: config 0 descriptor?? [ 2003.035525][T30055] tipc: Disabling bearer [ 2003.077807][T30111] tipc: Enabled bearer , priority 0 [ 2003.085238][T30111] syzkaller0: entered promiscuous mode [ 2003.090682][T30111] syzkaller0: entered allmulticast mode [ 2003.103466][T30111] tipc: Resetting bearer [ 2003.256663][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2003.266952][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2003.277650][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2003.286153][ T10] usb 2-1: media controller created [ 2003.299946][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2003.341368][T21840] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 2003.351244][ T5882] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2003.458305][ T10] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 2003.479012][ T10] usb 2-1: USB disconnect, device number 48 [ 2003.492503][T21840] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2003.500747][T21840] usb 3-1: config 0 has no interface number 0 [ 2003.507264][T21840] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2003.516553][T21840] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2003.525790][T21840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.534418][T21840] usb 3-1: Product: syz [ 2003.534630][ T5882] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 2003.538657][T21840] usb 3-1: Manufacturer: syz [ 2003.555177][T21840] usb 3-1: SerialNumber: syz [ 2003.555582][ T5882] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2003.561915][T21840] usb 3-1: config 0 descriptor?? [ 2003.574611][ T5882] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2003.584797][ T5882] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2003.601312][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.620231][ T5882] usb 9-1: config 0 descriptor?? [ 2004.105076][ T30] audit: type=1400 audit(2000001361.737:3017): avc: denied { watch } for pid=30115 comm="syz.9.6505" path="/92" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2004.501515][T30122] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6502'. [ 2004.532799][T21840] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2004.545334][T30110] tipc: Resetting bearer [ 2004.554389][T21840] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 2004.567848][T21840] usb 3-1: USB disconnect, device number 103 [ 2004.635327][T30110] tipc: Disabling bearer [ 2004.945238][T30125] netlink: 'syz.1.6506': attribute type 32 has an invalid length. [ 2005.813204][T30139] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6511'. [ 2006.157732][T30142] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2006.182829][T20758] usb 46-1: device descriptor read/8, error -110 [ 2006.303562][ T5882] usbhid 9-1:0.0: can't add hid device: -71 [ 2006.365248][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2006.380191][T30145] hsr0: entered promiscuous mode [ 2006.397270][ T5882] usb 9-1: USB disconnect, device number 65 [ 2006.722291][T30144] hsr0: left promiscuous mode [ 2006.740310][T20758] usb usb46-port1: attempt power cycle [ 2006.982780][T30158] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2007.121319][ T5882] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 2007.340528][ T5882] usb 9-1: config 7 has an invalid interface number: 101 but max is 0 [ 2007.358127][ T5882] usb 9-1: config 7 has no interface number 0 [ 2007.368347][ T5882] usb 9-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2007.377695][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.386501][ T5882] usb 9-1: Product: syz [ 2007.395585][ T5882] usb 9-1: Manufacturer: syz [ 2007.400206][ T5882] usb 9-1: SerialNumber: syz [ 2007.411316][ T5889] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 2007.461927][T20758] usb usb46-port1: unable to enumerate USB device [ 2007.562801][ T5889] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 2007.571224][ T5889] usb 2-1: config 7 has no interface number 0 [ 2007.580732][ T5889] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2007.589957][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.601797][ T5889] usb 2-1: Product: syz [ 2007.612212][ T5889] usb 2-1: Manufacturer: syz [ 2007.619904][ T5889] usb 2-1: SerialNumber: syz [ 2008.173634][ T5882] as10x_usb: device has been detected [ 2008.195583][ T5882] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2008.284776][ T5882] usb 9-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2008.311042][T30178] tipc: Enabled bearer , priority 0 [ 2008.329816][T30178] syzkaller0: entered promiscuous mode [ 2008.336950][T30178] syzkaller0: entered allmulticast mode [ 2008.423911][ T5889] as10x_usb: device has been detected [ 2008.435845][ T5889] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2008.450766][ T5889] usb 2-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2008.488859][ T30] audit: type=1400 audit(2000001366.127:3018): avc: denied { open } for pid=30190 comm="syz.6.6524" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2008.526829][ T30] audit: type=1400 audit(2000001366.167:3019): avc: denied { create } for pid=30193 comm="syz.2.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2008.528532][T30194] SELinux: failed to load policy [ 2008.531065][ T5882] as10x_usb: error during firmware upload part1 [ 2008.531136][ T5882] Registered device Elgato EyeTV DTT Deluxe [ 2008.533321][ T5882] usb 9-1: USB disconnect, device number 66 [ 2008.539580][ T5882] Unregistered device Elgato EyeTV DTT Deluxe [ 2008.540896][ T5882] as10x_usb: device has been disconnected [ 2008.651594][T29889] usb 10-1: new full-speed USB device number 93 using dummy_hcd [ 2008.664188][ T5889] as10x_usb: error during firmware upload part1 [ 2008.670991][ T5889] Registered device Elgato EyeTV DTT Deluxe [ 2008.684787][ T5889] usb 2-1: USB disconnect, device number 49 [ 2008.727753][ T30] audit: type=1400 audit(2000001366.367:3020): avc: denied { ioctl } for pid=30190 comm="syz.6.6524" path="/dev/ptyr1" dev="devtmpfs" ino=136 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2008.735838][ T5889] Unregistered device Elgato EyeTV DTT Deluxe [ 2008.804728][ T5889] as10x_usb: device has been disconnected [ 2008.853542][T29889] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 2008.863415][T29889] usb 10-1: config 0 has no interface number 0 [ 2008.870109][T29889] usb 10-1: config 0 interface 41 has no altsetting 0 [ 2008.891884][T29889] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2008.902993][T29889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.911569][T29889] usb 10-1: Product: syz [ 2008.916684][T29889] usb 10-1: Manufacturer: syz [ 2008.921894][T29889] usb 10-1: SerialNumber: syz [ 2008.955286][T29889] usb 10-1: config 0 descriptor?? [ 2009.165913][ T30] audit: type=1400 audit(2000001366.807:3021): avc: denied { write } for pid=30198 comm="syz.2.6527" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2009.355597][ T30] audit: type=1400 audit(2000001366.887:3022): avc: denied { bind } for pid=30198 comm="syz.2.6527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2009.380729][ C0] vkms_vblank_simulate: vblank timer overrun [ 2009.686930][ T5889] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2009.943317][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 2009.961538][ T5889] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2010.007573][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.119224][ T5889] usb 3-1: Product: syz [ 2010.345271][ T5889] usb 3-1: Manufacturer: syz [ 2010.345681][T29889] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 2010.383088][ T5889] usb 3-1: SerialNumber: syz [ 2010.396398][T30189] tipc: Resetting bearer [ 2010.429624][ T5889] usb 3-1: config 0 descriptor?? [ 2010.473871][ T5889] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2010.496087][T30189] tipc: Disabling bearer [ 2011.021665][ T5889] gspca_topro: reg_w err -110 [ 2011.067791][T30211] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6530'. [ 2011.084333][ T5889] gspca_topro: Sensor soi763a [ 2012.172769][ T5881] usb 3-1: USB disconnect, device number 104 [ 2012.188383][T29889] usb 10-1: USB disconnect, device number 93 [ 2012.284004][ T30] audit: type=1400 audit(2000001369.927:3023): avc: denied { read } for pid=30222 comm="syz.2.6534" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2012.307490][ C0] vkms_vblank_simulate: vblank timer overrun [ 2012.463877][T30225] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6533'. [ 2012.618218][ T30] audit: type=1400 audit(2000001369.987:3025): avc: denied { create } for pid=30218 comm="syz.6.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2012.761637][ T30] audit: type=1400 audit(2000001369.967:3024): avc: denied { open } for pid=30222 comm="syz.2.6534" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2012.790206][T29889] libceph: connect (1)[c::]:6789 error -101 [ 2012.903591][ T30] audit: type=1400 audit(2000001369.987:3026): avc: denied { write } for pid=30218 comm="syz.6.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2012.907666][T29889] libceph: mon0 (1)[c::]:6789 connect error [ 2012.982357][ T30] audit: type=1400 audit(2000001370.627:3027): avc: denied { name_connect } for pid=30231 comm="syz.2.6535" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2013.093397][T30226] ceph: No mds server is up or the cluster is laggy [ 2013.134154][T30238] netlink: 'syz.1.6536': attribute type 32 has an invalid length. [ 2013.234892][T30225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2013.257389][T30225] bond_slave_0: left allmulticast mode [ 2013.330181][T30225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2013.437362][T30225] bond_slave_1: left allmulticast mode [ 2013.651911][T30225] bond0 (unregistering): Released all slaves [ 2014.151590][ T30] audit: type=1400 audit(2000001371.797:3028): avc: denied { name_bind } for pid=30247 comm="syz.2.6540" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2014.269194][T30248] ubi: mtd0 is already attached to ubi31 [ 2015.055537][ T30] audit: type=1400 audit(2000001372.697:3029): avc: denied { create } for pid=30258 comm="syz.1.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2015.200912][T30260] cgroup: fork rejected by pids controller in /syz8 [ 2015.326215][ T30] audit: type=1400 audit(2000001372.747:3030): avc: denied { listen } for pid=30258 comm="syz.1.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2015.350550][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2015.401793][ T5889] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2015.417645][ T30] audit: type=1400 audit(2000001372.747:3031): avc: denied { getopt } for pid=30258 comm="syz.1.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2016.029574][ T5889] usb 2-1: device descriptor read/64, error -71 [ 2016.040996][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 2016.052215][ T10] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2016.065765][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2016.073878][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2016.084785][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.098540][ T10] usb 3-1: config 0 descriptor?? [ 2016.125599][ T30] audit: type=1400 audit(2000001373.767:3032): avc: denied { bind } for pid=30242 comm="syz.6.6538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2016.291541][ T5889] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2016.446070][ T5889] usb 2-1: device descriptor read/64, error -71 [ 2016.571817][ T5889] usb usb2-port1: attempt power cycle [ 2016.854423][T31571] hsr0: entered promiscuous mode [ 2017.022031][ T5889] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2017.351528][ T5889] usb 2-1: device descriptor read/8, error -71 [ 2017.763452][ T5889] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2017.823261][ T5889] usb 2-1: device descriptor read/8, error -71 [ 2017.993842][ T5889] usb usb2-port1: unable to enumerate USB device [ 2018.383419][T31580] hsr0: entered promiscuous mode [ 2018.542562][ T30] audit: type=1400 audit(2000001376.167:3033): avc: denied { write } for pid=31581 comm="syz.1.6549" name="if_inet6" dev="proc" ino=4026536055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2018.596891][T20758] libceph: connect (1)[c::]:6789 error -101 [ 2018.609828][T20758] libceph: mon0 (1)[c::]:6789 connect error [ 2018.895546][T20758] libceph: connect (1)[c::]:6789 error -101 [ 2018.910937][T20758] libceph: mon0 (1)[c::]:6789 connect error [ 2018.931772][T20758] libceph: connect (1)[c::]:6789 error -101 [ 2018.939483][T20758] libceph: mon0 (1)[c::]:6789 connect error [ 2019.183472][T20758] libceph: connect (1)[c::]:6789 error -101 [ 2019.266558][ T30] audit: type=1400 audit(2000001376.897:3034): avc: denied { append } for pid=31591 comm="syz.9.6550" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2019.308834][T20758] libceph: mon0 (1)[c::]:6789 connect error [ 2019.472865][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 2019.653903][T31473] hsr0: left promiscuous mode [ 2019.736978][T31587] ceph: No mds server is up or the cluster is laggy [ 2019.741981][T31584] ceph: No mds server is up or the cluster is laggy [ 2019.751357][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 2019.837050][ T30] audit: type=1400 audit(2000001376.897:3035): avc: denied { open } for pid=31591 comm="syz.9.6550" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2019.986904][T31596] sg_write: data in/out 768/71 bytes for SCSI command 0xaf-- guessing data in; [ 2019.986904][T31596] program syz.6.6551 not setting count and/or reply_len properly [ 2020.014072][ T30] audit: type=1400 audit(2000001376.907:3036): avc: denied { ioctl } for pid=31591 comm="syz.9.6550" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2020.040529][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 2020.047027][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2020.057131][ T10] usb 3-1: USB disconnect, device number 105 [ 2020.455952][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 2020.463290][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 2020.529491][ T30] audit: type=1400 audit(2000001378.167:3037): avc: denied { create } for pid=31597 comm="syz.2.6553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 2020.561873][ T30] audit: type=1400 audit(2000001378.167:3038): avc: denied { write } for pid=31597 comm="syz.2.6553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 2020.597447][ T30] audit: type=1400 audit(2000001378.227:3039): avc: denied { ioctl } for pid=31597 comm="syz.2.6553" path="/470/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2021.265812][T31614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6557'. [ 2021.343936][T31616] netlink: 'syz.1.6556': attribute type 32 has an invalid length. [ 2021.492453][T31579] hsr0: left promiscuous mode [ 2022.257564][ T30] audit: type=1400 audit(2000001379.897:3040): avc: denied { connect } for pid=31622 comm="syz.6.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2022.340925][ T30] audit: type=1400 audit(2000001379.897:3041): avc: denied { read } for pid=31622 comm="syz.6.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2022.580528][ T30] audit: type=1400 audit(2000001380.187:3042): avc: denied { append } for pid=31627 comm="syz.8.6560" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2022.789451][T31635] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6561'. [ 2023.043646][ T30] audit: type=1400 audit(2000001380.687:3043): avc: denied { ioctl } for pid=31636 comm="syz.1.6562" path="socket:[149667]" dev="sockfs" ino=149667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2023.416738][ T30] audit: type=1400 audit(2000001380.967:3044): avc: denied { unlink } for pid=31640 comm="syz.1.6564" name="#6f" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2023.451277][T29889] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2023.714772][ T30] audit: type=1400 audit(2000001380.967:3045): avc: denied { mount } for pid=31640 comm="syz.1.6564" name="/" dev="overlay" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2023.919577][T29889] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 2024.008163][T29889] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2024.022697][T29889] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2024.029325][T29889] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2024.054935][T29889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.067541][T29889] usb 9-1: config 0 descriptor?? [ 2024.219810][ T30] audit: type=1400 audit(2000001381.857:3046): avc: denied { unmount } for pid=29105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2025.142380][T31656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6563'. [ 2025.540417][T31663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6570'. [ 2025.580170][T31667] tipc: Started in network mode [ 2025.585657][T31667] tipc: Node identity 8ab55bee4435, cluster identity 4711 [ 2025.594215][T31667] tipc: Enabled bearer , priority 0 [ 2025.610127][T31663] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6570'. [ 2025.650115][T31668] syzkaller0: entered promiscuous mode [ 2025.655961][T31668] syzkaller0: entered allmulticast mode [ 2025.961317][ T5881] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2026.143004][ T5881] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2026.248653][ T5881] usb 2-1: config 0 has no interface number 0 [ 2026.519827][ T5881] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2026.558524][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2026.558559][ T30] audit: type=1400 audit(2000001384.197:3049): avc: denied { bind } for pid=31672 comm="syz.2.6573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2026.699777][ T30] audit: type=1400 audit(2000001384.197:3050): avc: denied { name_bind } for pid=31672 comm="syz.2.6573" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2026.722309][ T5968] tipc: Node number set to 3464518638 [ 2026.728488][ T30] audit: type=1400 audit(2000001384.197:3051): avc: denied { node_bind } for pid=31672 comm="syz.2.6573" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2026.750684][ T5881] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2026.759844][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.767861][ T5881] usb 2-1: Product: syz [ 2026.779967][ T5881] usb 2-1: Manufacturer: syz [ 2026.784860][ T5881] usb 2-1: SerialNumber: syz [ 2026.789844][T29889] usbhid 9-1:0.0: can't add hid device: -71 [ 2026.795851][T29889] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2026.806407][ T5881] usb 2-1: config 0 descriptor?? [ 2026.813062][T29889] usb 9-1: USB disconnect, device number 67 [ 2026.850114][T31675] IPv6: sit1: Disabled Multicast RS [ 2026.860833][T31675] sit1: entered allmulticast mode [ 2027.672527][T29889] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 2027.716697][ T5881] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2027.910480][ T5881] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2027.920001][T31666] tipc: Resetting bearer [ 2027.934430][ T5881] usb 2-1: USB disconnect, device number 54 [ 2027.940427][T29889] usb 9-1: config 7 has an invalid interface number: 101 but max is 0 [ 2027.959001][T29889] usb 9-1: config 7 has no interface number 0 [ 2027.966343][T31666] tipc: Disabling bearer [ 2027.974145][T29889] usb 9-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2027.983890][T29889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.993066][T29889] usb 9-1: Product: syz [ 2027.997401][T29889] usb 9-1: Manufacturer: syz [ 2028.002095][T29889] usb 9-1: SerialNumber: syz [ 2028.387349][T31691] binder: 31690:31691 ioctl c018620c 2000000001c0 returned -1 [ 2028.843238][T20758] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 2029.004637][T20758] usb 10-1: config 0 has an invalid interface number: 183 but max is 0 [ 2029.016743][T20758] usb 10-1: config 0 has no interface number 0 [ 2029.024310][T20758] usb 10-1: config 0 interface 183 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2029.034552][T20758] usb 10-1: config 0 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2029.045525][T20758] usb 10-1: config 0 interface 183 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 2029.057520][T20758] usb 10-1: config 0 interface 183 altsetting 0 endpoint 0x87 has an invalid bInterval 250, changing to 11 [ 2029.068946][T20758] usb 10-1: config 0 interface 183 altsetting 0 endpoint 0x87 has invalid maxpacket 33871, setting to 1024 [ 2029.081221][T20758] usb 10-1: config 0 interface 183 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2029.094705][T20758] usb 10-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=45.20 [ 2029.104575][T20758] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.117790][T20758] usb 10-1: config 0 descriptor?? [ 2029.123609][T31696] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2029.130879][T31696] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2029.621906][T31719] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2029.988630][T20758] radio-si470x 10-1:0.183: si470x_get_report: usb_control_msg returned -110 [ 2029.997714][T20758] radio-si470x 10-1:0.183: probe with driver radio-si470x failed with error -5 [ 2030.035240][T29889] as10x_usb: device has been detected [ 2030.049552][T29889] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2030.086771][T29889] usb 9-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2030.110414][T29889] as10x_usb: error during firmware upload part1 [ 2030.124255][T29889] Registered device Elgato EyeTV DTT Deluxe [ 2030.126869][T29889] usb 9-1: USB disconnect, device number 68 [ 2030.149945][T29889] Unregistered device Elgato EyeTV DTT Deluxe [ 2030.151433][T29889] as10x_usb: device has been disconnected [ 2030.341519][T20758] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2030.521617][T20758] usb 3-1: Using ep0 maxpacket: 8 [ 2030.540768][T20758] usb 3-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 2030.551755][T20758] usb 3-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2030.562231][T20758] usb 3-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2030.576345][T20758] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2030.588227][T20758] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2030.598647][T20758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.607335][T20758] usb 3-1: Product: syz [ 2030.612790][T20758] usb 3-1: Manufacturer: syz [ 2030.617671][T20758] usb 3-1: SerialNumber: syz [ 2030.645299][T31723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2030.655329][T31723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2030.831426][T26168] IPVS: ip_vs_send_async error -19 [ 2030.870403][T20758] usb 3-1: bad CDC descriptors [ 2030.878044][T20758] usb 3-1: USB disconnect, device number 106 [ 2031.507636][T29889] usb 10-1: USB disconnect, device number 94 [ 2031.609118][ T30] audit: type=1400 audit(2000001389.247:3052): avc: denied { create } for pid=31737 comm="syz.2.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2031.631871][ T30] audit: type=1400 audit(2000001389.277:3053): avc: denied { ioctl } for pid=31737 comm="syz.2.6593" path="socket:[149977]" dev="sockfs" ino=149977 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2031.842357][T31741] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2032.005471][T31743] ntfs3(loop2): try to read out of volume at offset 0x0 [ 2032.327727][T31752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6597'. [ 2032.371666][ T5889] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2032.522839][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 2032.532497][ T5889] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 2032.547740][ T5889] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2032.561308][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2032.568240][ T5889] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2032.577567][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.588042][ T5889] usb 3-1: config 0 descriptor?? [ 2032.661344][ T10] usb 10-1: new full-speed USB device number 95 using dummy_hcd [ 2032.854924][ T10] usb 10-1: config 7 has an invalid interface number: 101 but max is 0 [ 2032.864860][ T10] usb 10-1: config 7 has no interface number 0 [ 2032.874602][ T10] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2032.894531][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.909905][ T10] usb 10-1: Product: syz [ 2032.919623][ T10] usb 10-1: Manufacturer: syz [ 2032.928404][ T10] usb 10-1: SerialNumber: syz [ 2033.007857][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 2033.014889][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2033.026304][ T5889] usb 3-1: USB disconnect, device number 107 [ 2033.236959][ T30] audit: type=1400 audit(2000001390.877:3054): avc: denied { read } for pid=31762 comm="syz.1.6602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2033.438527][T31766] netlink: 'syz.8.6603': attribute type 11 has an invalid length. [ 2033.502619][ T30] audit: type=1400 audit(2000001391.147:3055): avc: denied { mount } for pid=31765 comm="syz.8.6603" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2033.557717][ T30] audit: type=1400 audit(2000001391.197:3056): avc: denied { mounton } for pid=31765 comm="syz.8.6603" path="/281/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2033.661997][T26788] Bluetooth: hci1: connection err: -111 [ 2033.672944][ T30] audit: type=1400 audit(2000001391.317:3057): avc: denied { unmount } for pid=25228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2033.816470][ T30] audit: type=1400 audit(2000001391.457:3058): avc: denied { read } for pid=31773 comm="syz.2.6607" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2033.843660][ T30] audit: type=1400 audit(2000001391.457:3059): avc: denied { open } for pid=31773 comm="syz.2.6607" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2033.868037][ T30] audit: type=1400 audit(2000001391.477:3060): avc: denied { ioctl } for pid=31773 comm="syz.2.6607" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2033.981244][ T5889] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2034.685989][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 2034.698562][ T5889] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2034.707702][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.715723][ T5889] usb 9-1: Product: syz [ 2034.719890][ T5889] usb 9-1: Manufacturer: syz [ 2034.724525][ T5889] usb 9-1: SerialNumber: syz [ 2034.732166][ T5889] usb 9-1: config 0 descriptor?? [ 2034.739095][ T5889] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2034.997188][T31785] netlink: 'syz.2.6610': attribute type 32 has an invalid length. [ 2036.214071][ T30] audit: type=1400 audit(2000001392.997:3061): avc: denied { read } for pid=31788 comm="syz.2.6611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2036.235948][ T5889] gspca_sonixj: reg_w1 err -110 [ 2036.240866][ T5889] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 2036.862344][ T10] as10x_usb: device has been detected [ 2036.868037][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2036.891485][ T10] usb 10-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2036.920794][ T10] as10x_usb: error during firmware upload part1 [ 2036.924406][T31799] ntfs3(loop6): try to read out of volume at offset 0x0 [ 2036.939267][ T10] Registered device Elgato EyeTV DTT Deluxe [ 2036.941986][ T10] usb 10-1: USB disconnect, device number 95 [ 2036.971650][ T30] audit: type=1400 audit(2000001394.607:3062): avc: denied { ioctl } for pid=31800 comm="syz.2.6615" path="socket:[150575]" dev="sockfs" ino=150575 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2037.005811][ T10] Unregistered device Elgato EyeTV DTT Deluxe [ 2037.009887][ T10] as10x_usb: device has been disconnected [ 2037.383317][ T30] audit: type=1400 audit(2000001395.027:3063): avc: denied { listen } for pid=31810 comm="syz.2.6618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2037.419569][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.089743][ T10] usb 9-1: USB disconnect, device number 69 [ 2038.221000][T31818] netlink: 'syz.2.6621': attribute type 32 has an invalid length. [ 2038.410127][ T30] audit: type=1400 audit(2000001396.047:3064): avc: denied { kexec_image_load } for pid=31814 comm="syz.1.6619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2038.440450][ T30] audit: type=1400 audit(2000001396.077:3065): avc: denied { wake_alarm } for pid=31827 comm="syz.9.6625" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2038.621537][ T10] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 2038.748851][T11051] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 2038.979761][ T10] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 2038.990159][ T10] usb 3-1: config 7 has no interface number 0 [ 2039.045988][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2039.058131][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.068250][T11051] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2039.079481][T11051] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2039.091328][ T10] usb 3-1: Product: syz [ 2039.095556][T11051] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2039.108897][ T10] usb 3-1: Manufacturer: syz [ 2039.113778][ T10] usb 3-1: SerialNumber: syz [ 2039.120982][T11051] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2039.253756][T11051] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.263652][T11051] usb 10-1: config 0 descriptor?? [ 2040.032106][ T30] audit: type=1400 audit(2000001397.677:3066): avc: denied { create } for pid=31841 comm="syz.1.6628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2040.074122][ T30] audit: type=1400 audit(2000001397.677:3067): avc: denied { ioctl } for pid=31841 comm="syz.1.6628" path="socket:[150235]" dev="sockfs" ino=150235 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2040.912542][T11051] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2040.981443][ T30] audit: type=1400 audit(2000001398.607:3068): avc: denied { read } for pid=31827 comm="syz.9.6625" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2041.017510][ T30] audit: type=1400 audit(2000001398.607:3069): avc: denied { open } for pid=31827 comm="syz.9.6625" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2041.053427][ T30] audit: type=1400 audit(2000001398.607:3070): avc: denied { ioctl } for pid=31827 comm="syz.9.6625" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2041.081517][ T30] audit: type=1400 audit(2000001398.627:3071): avc: denied { write } for pid=31848 comm="syz.6.6631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2041.170608][T31856] netlink: 'syz.1.6632': attribute type 12 has an invalid length. [ 2041.201098][T31858] netlink: 'syz.8.6633': attribute type 32 has an invalid length. [ 2041.551574][ T5968] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2041.661100][ T10] as10x_usb: device has been detected [ 2041.669246][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2041.696923][ T10] usb 3-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2041.712461][ T10] as10x_usb: error during firmware upload part1 [ 2041.712861][ T5968] usb 9-1: config 8 has an invalid interface number: 59 but max is 0 [ 2041.719330][ T10] Registered device Elgato EyeTV DTT Deluxe [ 2041.729993][T31869] tipc: Enabled bearer , priority 0 [ 2041.734480][ T10] usb 3-1: USB disconnect, device number 108 [ 2041.736238][ T5968] usb 9-1: config 8 has no interface number 0 [ 2041.748794][T31869] syzkaller0: entered promiscuous mode [ 2041.748815][T31869] syzkaller0: entered allmulticast mode [ 2041.766039][ T10] Unregistered device Elgato EyeTV DTT Deluxe [ 2041.766548][ T5968] usb 9-1: config 8 interface 59 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2041.767492][ T10] as10x_usb: device has been disconnected [ 2041.772781][ T5968] usb 9-1: config 8 interface 59 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2041.774612][ T5968] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f6.ce [ 2041.807679][ T5968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.816844][ T5968] usb 9-1: Product: syz [ 2041.821993][ T5968] usb 9-1: Manufacturer: syz [ 2041.827017][ T5968] usb 9-1: SerialNumber: syz [ 2041.991260][T11051] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2042.058186][ T5968] kvaser_usb 9-1:8.59: error -EPROTO: Cannot get software info [ 2042.082509][T31875] hsr0: entered promiscuous mode [ 2042.102339][ T5968] kvaser_usb 9-1:8.59: probe with driver kvaser_usb failed with error -71 [ 2042.129803][ T5968] usb 9-1: USB disconnect, device number 70 [ 2042.441405][ T10] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 2042.462549][T11051] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2042.470926][T11051] usb 2-1: config 0 has no interface number 0 [ 2042.477248][T11051] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2042.486341][T11051] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2042.495718][T11051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.503850][T11051] usb 2-1: Product: syz [ 2042.508005][T11051] usb 2-1: Manufacturer: syz [ 2042.520704][T11051] usb 2-1: SerialNumber: syz [ 2042.526856][T11051] usb 2-1: config 0 descriptor?? [ 2042.605922][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2042.617091][ T10] usb 3-1: config 0 has no interface number 0 [ 2042.623601][ T10] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2042.633492][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2042.643462][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2042.652591][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.660620][ T10] usb 3-1: Product: syz [ 2042.665053][ T10] usb 3-1: Manufacturer: syz [ 2042.669679][ T10] usb 3-1: SerialNumber: syz [ 2042.682097][ T10] usb 3-1: config 0 descriptor?? [ 2042.693686][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 2042.823821][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2042.823854][ T30] audit: type=1400 audit(2000001400.467:3074): avc: denied { write } for pid=31878 comm="syz.9.6642" path="socket:[150365]" dev="sockfs" ino=150365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2042.882145][ T5881] usb 10-1: USB disconnect, device number 96 [ 2044.042760][T11051] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2044.052886][T31868] tipc: Resetting bearer [ 2044.091256][T11051] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2044.104551][T11051] usb 2-1: USB disconnect, device number 55 [ 2044.118233][T31868] tipc: Disabling bearer [ 2044.591266][T12046] Bluetooth: hci3: command 0x0405 tx timeout [ 2044.604360][T31899] netlink: 'syz.9.6646': attribute type 32 has an invalid length. [ 2044.878325][T31875] hsr0: left promiscuous mode [ 2044.957713][ T5881] usb 3-1: USB disconnect, device number 109 [ 2045.393912][T31912] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2045.645424][ T30] audit: type=1400 audit(2000001403.287:3075): avc: denied { bind } for pid=31914 comm="syz.8.6652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2046.192892][T31926] netdevsim netdevsim8: Direct firmware load for . [ 2046.192892][T31926] failed with error -2 [ 2046.207894][T31926] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 2046.207894][T31926] [ 2046.653916][ T30] audit: type=1400 audit(2000001404.297:3076): avc: denied { setopt } for pid=31932 comm="syz.9.6655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2047.021309][T31944] netlink: 'syz.2.6660': attribute type 32 has an invalid length. [ 2047.312094][T20758] usb 10-1: new full-speed USB device number 97 using dummy_hcd [ 2047.469784][T20758] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 2047.827386][T20758] usb 10-1: config 0 has no interface number 0 [ 2047.849333][T20758] usb 10-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2048.058266][T20758] usb 10-1: config 0 interface 41 has no altsetting 0 [ 2048.149786][T20758] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2048.168263][T20758] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.234721][T20758] usb 10-1: Product: syz [ 2048.250415][T20758] usb 10-1: Manufacturer: syz [ 2048.263509][T20758] usb 10-1: SerialNumber: syz [ 2048.283631][T20758] usb 10-1: config 0 descriptor?? [ 2048.296866][T20758] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -22 [ 2048.565799][T31959] sctp: [Deprecated]: syz.8.6665 (pid 31959) Use of int in maxseg socket option. [ 2048.565799][T31959] Use struct sctp_assoc_value instead [ 2049.902170][T31971] MPI: mpi too large (129928 bits) [ 2049.946963][ T30] audit: type=1400 audit(2000001407.587:3077): avc: denied { write } for pid=31968 comm="syz.1.6668" path="socket:[151756]" dev="sockfs" ino=151756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2050.154064][T21840] usb 10-1: USB disconnect, device number 97 [ 2050.641272][ T5881] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2050.887473][T31984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6672'. [ 2050.910256][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 2050.952654][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.963606][ T5881] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2050.981286][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.990437][ T5881] usb 3-1: config 0 descriptor?? [ 2051.262473][T31988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6671'. [ 2051.477835][ T5881] mcp2221 0003:04D8:00DD.0066: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2051.601206][T20758] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 2051.783419][T20758] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 2051.799018][T20758] usb 2-1: config 7 has no interface number 0 [ 2051.814555][T20758] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2051.824978][T20758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.833248][T20758] usb 2-1: Product: syz [ 2051.837592][T20758] usb 2-1: Manufacturer: syz [ 2051.842686][T20758] usb 2-1: SerialNumber: syz [ 2051.938906][ T5881] usb 3-1: USB disconnect, device number 110 [ 2053.185466][ T30] audit: type=1400 audit(2000001410.817:3078): avc: denied { write } for pid=32001 comm="syz.8.6677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2053.207474][T32005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6678'. [ 2053.311089][T32015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6680'. [ 2053.751614][ T5889] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 2053.911971][ T30] audit: type=1400 audit(2000001411.527:3079): avc: denied { ioctl } for pid=32021 comm="syz.8.6683" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2054.021832][ T5889] usb 10-1: Using ep0 maxpacket: 16 [ 2054.172995][ T5889] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2054.337282][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.751314][ T5889] usb 10-1: Product: syz [ 2054.769526][T20758] as10x_usb: device has been detected [ 2054.778317][ T5889] usb 10-1: Manufacturer: syz [ 2054.786607][ T5889] usb 10-1: SerialNumber: syz [ 2054.791926][T20758] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2054.802798][ T5889] usb 10-1: config 0 descriptor?? [ 2054.817761][ T5889] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2054.837288][T20758] usb 2-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2054.927212][T20758] as10x_usb: error during firmware upload part1 [ 2055.081026][T20758] Registered device Elgato EyeTV DTT Deluxe [ 2055.094769][T20758] usb 2-1: USB disconnect, device number 56 [ 2055.160904][T32034] binder: 32028:32034 ioctl 89e0 200000000600 returned -22 [ 2055.168693][ T30] audit: type=1400 audit(2000001412.747:3080): avc: denied { map } for pid=32028 comm="syz.8.6686" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2055.206615][T32034] binder: 32028:32034 ioctl 9362 0 returned -22 [ 2055.374325][ T5889] ssu100 10-1:0.0: probe with driver ssu100 failed with error -110 [ 2055.425005][T20758] Unregistered device Elgato EyeTV DTT Deluxe [ 2055.425761][T20758] as10x_usb: device has been disconnected [ 2055.715872][T32042] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6689'. [ 2055.725832][T32042] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6689'. [ 2055.869535][ T30] audit: type=1400 audit(2000001413.477:3081): avc: denied { create } for pid=32035 comm="syz.2.6687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2055.945542][T32037] SELinux: failed to load policy [ 2055.967326][ T30] audit: type=1400 audit(2000001413.607:3082): avc: denied { mounton } for pid=32045 comm="syz.8.6690" path="/299/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2056.098600][ T30] audit: type=1326 audit(2000001413.637:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32039 comm="syz.1.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff990b8efc9 code=0x7ffc0000 [ 2056.122069][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.131720][ T30] audit: type=1326 audit(2000001413.637:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32039 comm="syz.1.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff990b8efc9 code=0x7ffc0000 [ 2056.155175][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.284482][ T30] audit: type=1326 audit(2000001413.647:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32039 comm="syz.1.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff990b8efc9 code=0x7ffc0000 [ 2056.426000][ T30] audit: type=1326 audit(2000001413.647:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32039 comm="syz.1.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff990b8efc9 code=0x7ffc0000 [ 2056.449607][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.946711][ T30] audit: type=1326 audit(2000001413.647:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32039 comm="syz.1.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff990b8efc9 code=0x7ffc0000 [ 2056.954844][ T5889] usb 10-1: USB disconnect, device number 98 [ 2056.970206][ C1] vkms_vblank_simulate: vblank timer overrun [ 2056.972228][ T30] audit: type=1326 audit(2000001413.677:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32039 comm="syz.1.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ff990b8efc9 code=0x7ffc0000 [ 2057.005698][ C1] vkms_vblank_simulate: vblank timer overrun [ 2057.012506][ T30] audit: type=1326 audit(2000001413.677:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32039 comm="syz.1.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff990b8efc9 code=0x7ffc0000 [ 2057.035946][ C1] vkms_vblank_simulate: vblank timer overrun [ 2057.085101][T26788] Bluetooth: hci7: connection err: -111 [ 2057.318355][T32074] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 2057.338305][T32074] SELinux: failed to load policy [ 2057.345135][T32075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32075 comm=syz.9.6698 [ 2057.361600][T32077] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2057.533602][T32078] netlink: 'syz.2.6697': attribute type 1 has an invalid length. [ 2058.503158][T32091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6701'. [ 2061.537310][T32102] hsr0: entered promiscuous mode [ 2061.724181][T32101] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 2061.744027][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 2061.781358][ T5889] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2061.944076][ T5889] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 2061.965518][ T5889] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2061.981030][T26788] Bluetooth: hci1: connection err: -111 [ 2062.034615][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2062.071335][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2062.071352][ T30] audit: type=1400 audit(2000001419.707:3112): avc: denied { watch_reads } for pid=32112 comm="syz.9.6709" path="/127" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2062.106230][ T5889] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 2062.195737][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.217759][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6709'. [ 2062.350606][ T30] audit: type=1400 audit(2000001419.857:3113): avc: denied { getopt } for pid=32112 comm="syz.9.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2062.460613][ T5889] usb 2-1: config 0 descriptor?? [ 2062.686371][T32121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32121 comm=syz.9.6711 [ 2063.027085][T32123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6705'. [ 2063.320878][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 2063.327339][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2063.348321][ T5889] usb 2-1: USB disconnect, device number 57 [ 2064.532386][T32102] hsr0: left promiscuous mode [ 2064.537471][T32137] dummy0: entered allmulticast mode [ 2064.560753][ T30] audit: type=1400 audit(2000000000.840:3114): avc: denied { read write } for pid=32136 comm="syz.1.6716" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2064.591660][ T30] audit: type=1400 audit(2000000000.840:3115): avc: denied { open } for pid=32136 comm="syz.1.6716" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2064.616433][ T30] audit: type=1400 audit(2000000000.870:3116): avc: denied { ioctl } for pid=32136 comm="syz.1.6716" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2064.626036][T32137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6716'. [ 2064.651828][ T30] audit: type=1400 audit(2000000000.910:3117): avc: denied { write } for pid=32136 comm="syz.1.6716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2064.671753][T32137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2064.730060][ T30] audit: type=1400 audit(2000000000.910:3118): avc: denied { ioctl } for pid=32136 comm="syz.1.6716" path="socket:[151466]" dev="sockfs" ino=151466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2064.764363][T32142] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 2064.774364][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 2064.781667][T20758] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2064.852915][T32137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2064.945460][T20758] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2064.954959][T20758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.972849][T20758] usb 3-1: Product: syz [ 2064.983558][T20758] usb 3-1: Manufacturer: syz [ 2064.996042][T20758] usb 3-1: SerialNumber: syz [ 2065.018320][T20758] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2065.037280][ T5889] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2065.291900][T32136] dummy0: left allmulticast mode [ 2065.476884][T32135] FAULT_INJECTION: forcing a failure. [ 2065.476884][T32135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.511287][T32135] CPU: 1 UID: 0 PID: 32135 Comm: syz.2.6715 Not tainted syzkaller #0 PREEMPT(full) [ 2065.511310][T32135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2065.511318][T32135] Call Trace: [ 2065.511322][T32135] [ 2065.511327][T32135] dump_stack_lvl+0x16c/0x1f0 [ 2065.511351][T32135] should_fail_ex+0x512/0x640 [ 2065.511367][T32135] _copy_from_user+0x2e/0xd0 [ 2065.511387][T32135] copy_msghdr_from_user+0x98/0x160 [ 2065.511410][T32135] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2065.511444][T32135] ___sys_sendmsg+0xfe/0x1d0 [ 2065.511466][T32135] ? __pfx____sys_sendmsg+0x10/0x10 [ 2065.511483][T32135] ? __lock_acquire+0x622/0x1c90 [ 2065.511515][T32135] __sys_sendmsg+0x16d/0x220 [ 2065.511528][T32135] ? __pfx___sys_sendmsg+0x10/0x10 [ 2065.511555][T32135] do_syscall_64+0xcd/0xfa0 [ 2065.511578][T32135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.511595][T32135] RIP: 0033:0x7f805e38efc9 [ 2065.511610][T32135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2065.511625][T32135] RSP: 002b:00007f805f263038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2065.511641][T32135] RAX: ffffffffffffffda RBX: 00007f805e5e5fa0 RCX: 00007f805e38efc9 [ 2065.511652][T32135] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000007 [ 2065.511658][T32135] RBP: 00007f805f263090 R08: 0000000000000000 R09: 0000000000000000 [ 2065.511665][T32135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2065.511671][T32135] R13: 00007f805e5e6038 R14: 00007f805e5e5fa0 R15: 00007ffef7467ac8 [ 2065.511686][T32135] [ 2065.681264][ C1] vkms_vblank_simulate: vblank timer overrun [ 2065.862341][T20758] usb 3-1: USB disconnect, device number 111 [ 2065.917914][ T30] audit: type=1400 audit(2000000002.150:3119): avc: denied { create } for pid=32149 comm="syz.1.6720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2066.061810][ T30] audit: type=1400 audit(2000000002.160:3120): avc: denied { connect } for pid=32149 comm="syz.1.6720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2066.387944][ T5889] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2066.958962][ T5889] ath9k_htc: Failed to initialize the device [ 2067.096263][T20758] usb 3-1: ath9k_htc: USB layer deinitialized [ 2067.755904][T32169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32169 comm=syz.2.6724 [ 2067.780438][ T30] audit: type=1400 audit(2000000003.830:3121): avc: denied { write } for pid=32160 comm="syz.8.6723" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2067.859034][ T30] audit: type=1400 audit(2000000004.140:3122): avc: denied { remount } for pid=32164 comm="syz.1.6725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2069.092964][T32201] hsr0: entered promiscuous mode [ 2069.590810][ T30] audit: type=1400 audit(2000000005.870:3123): avc: denied { read write } for pid=32211 comm="syz.2.6734" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2071.181357][T29889] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 2071.331432][T29889] usb 10-1: Using ep0 maxpacket: 16 [ 2071.338492][T29889] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2071.645917][ T30] audit: type=1400 audit(2000000007.640:3124): avc: denied { execheap } for pid=32228 comm="syz.6.6739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2071.666054][T29889] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2071.682128][T29889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.715737][ T30] audit: type=1400 audit(2000000007.690:3125): avc: denied { map } for pid=32228 comm="syz.6.6739" path="/287/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2071.740233][T29889] usb 10-1: config 0 descriptor?? [ 2072.868685][T32193] hsr0: left promiscuous mode [ 2073.260967][T29889] hid (null): global environment stack underflow [ 2073.287814][T29889] hid (null): unknown global tag 0xc [ 2073.302180][T29889] hid (null): report_id 25068 is invalid [ 2073.321243][T29889] hid (null): report_id 0 is invalid [ 2073.427707][T29889] hid (null): global environment stack overflow [ 2073.452071][T29889] hid (null): unknown global tag 0xc [ 2073.522840][T32253] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9489 sclass=netlink_xfrm_socket pid=32253 comm=syz.8.6743 [ 2074.041306][T29889] hid (null): unknown global tag 0x58 [ 2074.054743][T29889] usb 10-1: USB disconnect, device number 99 [ 2074.214299][T32261] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2074.331746][T32267] netlink: 'syz.6.6744': attribute type 1 has an invalid length. [ 2074.646161][T32266] bridge2: entered allmulticast mode [ 2074.873445][T32274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6748'. [ 2075.491261][T11051] usb 10-1: new full-speed USB device number 100 using dummy_hcd [ 2075.582879][T20758] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2075.614087][T32285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32285 comm=syz.6.6752 [ 2075.642500][T11051] usb 10-1: config 7 has an invalid interface number: 101 but max is 0 [ 2075.651345][T11051] usb 10-1: config 7 has no interface number 0 [ 2075.668066][T11051] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2075.679393][T11051] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.701981][T11051] usb 10-1: Product: syz [ 2075.714171][T11051] usb 10-1: Manufacturer: syz [ 2075.727271][T11051] usb 10-1: SerialNumber: syz [ 2075.742965][T20758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2075.761491][T20758] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2075.773228][T20758] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2075.782820][T20758] usb 9-1: Manufacturer: syz [ 2075.791070][T20758] usb 9-1: config 0 descriptor?? [ 2076.106562][ T30] audit: type=1400 audit(2000000012.390:3126): avc: denied { mount } for pid=32291 comm="syz.1.6754" name="/" dev="ocfs2_dlmfs" ino=152813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2076.143936][T32292] o2cb: This node has not been configured. [ 2076.153281][T32292] o2cb: Cluster check failed. Fix errors before retrying. [ 2076.162804][T32292] (syz.1.6754,32292,1):user_dlm_register:674 ERROR: status = -22 [ 2076.170624][T32292] (syz.1.6754,32292,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 2076.180714][ T30] audit: type=1400 audit(2000000012.430:3127): avc: denied { add_name } for pid=32291 comm="syz.1.6754" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2076.202756][ T30] audit: type=1400 audit(2000000012.430:3128): avc: denied { create } for pid=32291 comm="syz.1.6754" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2076.239013][ T30] audit: type=1400 audit(2000000012.430:3129): avc: denied { associate } for pid=32291 comm="syz.1.6754" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2076.291812][ T30] audit: type=1400 audit(2000000012.550:3130): avc: denied { unmount } for pid=29105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2076.408545][ T30] audit: type=1400 audit(2000000012.690:3131): avc: denied { mounton } for pid=32293 comm="syz.1.6755" path="/proc/358/task" dev="proc" ino=152821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2076.460547][ T30] audit: type=1400 audit(2000000012.720:3132): avc: denied { mount } for pid=32293 comm="syz.1.6755" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2076.520035][T11051] as10x_usb: device has been detected [ 2076.538506][T11051] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2076.605888][T11051] usb 10-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2076.828718][T20758] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0068/input/input231 [ 2076.842690][T11051] as10x_usb: error during firmware upload part1 [ 2076.849498][T11051] Registered device Elgato EyeTV DTT Deluxe [ 2076.866506][T11051] usb 10-1: USB disconnect, device number 100 [ 2076.891976][ T30] audit: type=1400 audit(2000000013.180:3133): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=4189 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2076.919647][T11051] Unregistered device Elgato EyeTV DTT Deluxe [ 2076.927374][T11051] as10x_usb: device has been disconnected [ 2076.965481][ T30] audit: type=1400 audit(2000000013.180:3134): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4189 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2076.973581][T20758] uclogic 0003:256C:006D.0068: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2076.989020][ C1] vkms_vblank_simulate: vblank timer overrun [ 2077.083889][ T30] audit: type=1400 audit(2000000013.240:3135): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4189 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2077.085257][T20758] usb 9-1: USB disconnect, device number 71 [ 2077.108893][ C1] vkms_vblank_simulate: vblank timer overrun [ 2077.141576][T32306] dummy0: entered allmulticast mode [ 2077.148609][T32305] dummy0: left allmulticast mode [ 2077.517781][T32309] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6759'. [ 2077.951341][ T5881] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2078.103505][ T5881] usb 9-1: Using ep0 maxpacket: 8 [ 2078.122697][ T5881] usb 9-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 2078.155885][ T5881] usb 9-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2078.188723][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2078.222790][ T5881] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2078.241229][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.256395][ T5881] usb 9-1: config 0 descriptor?? [ 2078.281540][T32320] netlink: 'syz.2.6763': attribute type 20 has an invalid length. [ 2078.818349][T32317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.871678][T32317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.072299][T32333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.087388][T32333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.099588][T32333] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2079.139237][T32334] netlink: 'syz.1.6762': attribute type 1 has an invalid length. [ 2079.198627][ T5881] gt683r_led 0003:1770:FF00.0069: unknown main item tag 0x7 [ 2079.394442][ T5881] gt683r_led 0003:1770:FF00.0069: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.8-1/input0 [ 2079.413397][ T5881] usb 9-1: USB disconnect, device number 72 [ 2079.456742][T29889] gt683r_led 0003:1770:FF00.0069: failed to send set report request: -19 [ 2079.489969][T32339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6766'. [ 2079.948286][T32343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6767'. [ 2080.874184][T32360] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.6772'. [ 2082.191671][T32382] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2082.267209][T32384] sp0: Synchronizing with TNC [ 2082.276133][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 2082.282391][ C0] CPU: 0 UID: 0 PID: 32384 Comm: syz.9.6776 Not tainted syzkaller #0 PREEMPT(full) [ 2082.291758][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2082.301803][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 2082.307872][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 2082.327470][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 2082.333529][ C0] RAX: 0000000000000001 RBX: ffffc90005aa9000 RCX: ffffffff88cc375f [ 2082.341489][ C0] RDX: 0000000000000000 RSI: ffffffff88c9df80 RDI: 0000000000000004 [ 2082.349446][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 2082.357403][ C0] R10: 0000000000000001 R11: ffff888049a68c3c R12: ffff888049a68c00 [ 2082.365362][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88cc36a0 [ 2082.373320][ C0] FS: 00007f314e6406c0(0000) GS:ffff8881249d8000(0000) knlGS:0000000000000000 [ 2082.382242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2082.388815][ C0] CR2: 00007f314e63ff98 CR3: 000000008e759000 CR4: 00000000003526f0 [ 2082.396778][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2082.404736][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2082.412692][ C0] Call Trace: [ 2082.415944][ C0] [ 2082.418763][ C0] comedi_buf_write_samples+0x3fc/0x640 [ 2082.424290][ C0] das16m1_handler+0x203/0x5a0 [ 2082.429027][ C0] das16m1_interrupt+0xb7/0x1c0 [ 2082.433850][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 2082.439291][ C0] __handle_irq_event_percpu+0x236/0x920 [ 2082.444921][ C0] handle_irq_event+0xab/0x1e0 [ 2082.449669][ C0] handle_edge_irq+0x3ca/0x9e0 [ 2082.454431][ C0] __common_interrupt+0xd0/0x2f0 [ 2082.459342][ C0] common_interrupt+0xba/0xe0 [ 2082.463995][ C0] [ 2082.466899][ C0] [ 2082.469811][ C0] asm_common_interrupt+0x26/0x40 [ 2082.474804][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2082.481190][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 c9 2f f6 48 89 df e8 fe 1c 30 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 26 20 f6 65 8b 05 7e 25 3b 08 85 c0 74 16 5b [ 2082.500767][ C0] RSP: 0018:ffffc90002ed7ba0 EFLAGS: 00000246 [ 2082.506893][ C0] RAX: 0000000000000002 RBX: ffffffff9ae09360 RCX: 0000000000000006 [ 2082.514833][ C0] RDX: 0000000000000000 RSI: ffffffff8db03325 RDI: ffffffff8bf1dec0 [ 2082.522778][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 2082.530719][ C0] R10: ffffffff908313d7 R11: 0000000000000001 R12: 0000000000000001 [ 2082.538660][ C0] R13: ffffffff9ae09468 R14: 0000000000000000 R15: 0000000000000003 [ 2082.546606][ C0] uart_write+0x2a4/0xb30 [ 2082.550907][ C0] sixpack_open+0x7cd/0x990 [ 2082.555389][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 2082.560385][ C0] ? tty_set_ldisc+0x368/0x780 [ 2082.565140][ C0] ? down_write+0x14d/0x200 [ 2082.569628][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 2082.574639][ C0] tty_ldisc_open+0x9f/0x120 [ 2082.579213][ C0] tty_set_ldisc+0x32b/0x780 [ 2082.583779][ C0] tty_ioctl+0xc2d/0x1680 [ 2082.588087][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 2082.592836][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2082.599662][ C0] ? hook_file_ioctl_common+0x145/0x410 [ 2082.605180][ C0] ? selinux_file_ioctl+0x180/0x270 [ 2082.610353][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 2082.615440][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 2082.620180][ C0] __x64_sys_ioctl+0x18e/0x210 [ 2082.624926][ C0] do_syscall_64+0xcd/0xfa0 [ 2082.629444][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2082.635308][ C0] RIP: 0033:0x7f314d78efc9 [ 2082.639704][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2082.659280][ C0] RSP: 002b:00007f314e640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.667675][ C0] RAX: ffffffffffffffda RBX: 00007f314d9e6090 RCX: 00007f314d78efc9 [ 2082.675878][ C0] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 2082.683835][ C0] RBP: 00007f314d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 2082.691783][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2082.699729][ C0] R13: 00007f314d9e6128 R14: 00007f314d9e6090 R15: 00007ffc7380dfc8 [ 2082.707677][ C0] [ 2082.710679][ C0] Modules linked in: [ 2082.714545][ C0] ---[ end trace 0000000000000000 ]--- [ 2082.719968][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 2082.726020][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 2082.745606][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 2082.751640][ C0] RAX: 0000000000000001 RBX: ffffc90005aa9000 RCX: ffffffff88cc375f [ 2082.759589][ C0] RDX: 0000000000000000 RSI: ffffffff88c9df80 RDI: 0000000000000004 [ 2082.767549][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 2082.775523][ C0] R10: 0000000000000001 R11: ffff888049a68c3c R12: ffff888049a68c00 [ 2082.783473][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88cc36a0 [ 2082.791417][ C0] FS: 00007f314e6406c0(0000) GS:ffff8881249d8000(0000) knlGS:0000000000000000 [ 2082.800319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2082.806873][ C0] CR2: 00007f314e63ff98 CR3: 000000008e759000 CR4: 00000000003526f0 [ 2082.814815][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2082.822755][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2082.830697][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 2082.838081][ C0] Kernel Offset: disabled [ 2082.842391][ C0] Rebooting in 86400 seconds..